Calzi AI

Privacy Policy

Last updated: October 20, 2026

This Privacy Policy describes how Calzi AI ("Calzi AI," "we," "us," or "our") collects, uses, and shares information when you use the Calzi AI mobile application (the "App"). By using the App, you agree to the practices described here.

1. Information We Collect

Information you provide

• Profile and goals: name, age, height, current weight, target weight, gender, activity level, dietary preferences, workout frequency, and nutrition goals.
• Food log entries: meals, foods you log, portion sizes, water intake, fasting sessions, exercise entries, weight history, weekly check-ins, and any notes you add.
• Photos for food scanning: images you capture or upload to identify food. These images are sent to our AI providers for analysis (see Section 4) and are not stored on our infrastructure beyond the duration of the request.
• Free-text food descriptions: when you log food using natural language (e.g. "two scrambled eggs and toast"), the text is sent to our AI provider to identify foods and estimate nutrition.
• Feedback and support messages: if you use Send Feedback, we receive the category you pick, your message, an optional star rating, and — only if you enter one — an email address for replies. If you choose to share a scan correction with us, we receive the correction categories, your note, and the names of the detected foods, never the photo; sharing is controlled by a checkbox on the correction screen. Feedback includes basic diagnostics so we can reproduce issues: app version and build, iOS version, device model, language/region, subscription status, and the screen it was sent from. It is delivered to our support inbox via our server and email provider (see Section 4).

Information collected during sign-in

The App offers two sign-in options:

• Sign in with Apple — we receive your Apple user identifier and, if you choose to share them, your name and email. This data is stored locally on your device in the iOS Keychain. Apple's privacy practices apply.
• Sign in with Google — we receive your Google account identifier, name, and email via Google's Sign-In SDK. This data is stored locally on your device in the iOS Keychain. Google's privacy policy applies to data Google collects during sign-in.

Information collected automatically

• Subscription status: whether you have an active Calzi AI Pro subscription, provided through Apple's StoreKit and RevenueCat. We do not receive your payment card or full Apple ID.
• Network metadata: when the App makes API requests, our server (and third-party APIs) receive standard network metadata such as your IP address and a user-agent string. This is used to operate the service. If you opt into the ad measurement described below, Meta also receives network metadata to measure advertising.

Analytics and crash reporting: Calzi uses PostHog for product analytics and Sentry for crash and error diagnostics. Product analytics records categories of screen and feature use, app and device context, and an installation identifier that Calzi does not link to your sign-in account. These product-analytics events exclude food entries, nutrition and health values, free text, photos, voice recordings, account identifiers, and location coordinates. Automatic screen recording and session replay are disabled. Product analytics is enabled by default; you can turn it off in Profile → Analytics & Privacy → Share Product Analytics (called Product Analytics in earlier versions). This setting controls product analytics, not Sentry diagnostics or the separate ad-measurement permission below.

Optional ad measurement: Adults may choose to allow ad measurement after reading Calzi's explanation and granting Apple's tracking permission. This is separate from product analytics. The expanded subscription reporting described here requires a new opt-in; permission from earlier app versions is not automatically carried forward. Until you allow it, Calzi does not initialize Meta's SDK or send it ad events. If you allow it, Meta's SDK receives install and app-session events, device identifiers (including the advertising identifier when available), app/device/operating-system information, event times and standard network metadata. Calzi shares Meta's anonymous installation identifier with RevenueCat so RevenueCat can report trial starts, payments after trials, initial paid subscriptions and renewals to Meta, including when Calzi is closed. These reports include purchase amounts, currency, product and transaction identifiers, a hashed RevenueCat subscription customer identifier and app/device information. Meta may associate these events with information across apps and websites to measure and improve Calzi advertising on Facebook and Instagram. Calzi does not send Meta food logs, food names, nutrition values, photos, weight, HealthKit data, precise location, names, email addresses or phone numbers. Automatic purchase logging, event suggestions and advanced matching are disabled.

Ad measurement is optional and does not affect Calzi features or your subscription. Turn it off in Profile → Analytics & Privacy → Allow Ad Measurement or revoke tracking permission in iOS Settings. Calzi checks permission before device events and when it next runs. Server reporting stops after Calzi reconnects and successfully synchronizes the removal of its matching identifier with RevenueCat. If the app is offline, closed or unable to synchronize, this change may be delayed; requests already in progress may finish. Turning it off does not delete events already received by Meta. This permission is separate from product analytics, diagnostics and Apple Health permissions.

Information from Apple Health (HealthKit)

If you grant permission, the App reads and writes the following HealthKit data on-device:

• Reads: body weight, step count, water intake, dietary energy consumed, dietary protein, dietary carbohydrates, dietary fat, active energy burned, and workouts.
• Writes: body weight, water intake, dietary energy, dietary protein, dietary carbohydrates, dietary fat, active energy burned, and workouts. (Step count is read-only.)
• Background updates: with your permission, the App receives step-count updates from HealthKit in the background so your daily activity and calorie targets stay current. No HealthKit data is transmitted off-device.

Raw HealthKit records are stored in Apple HealthKit on your device. Calzi AI does not maintain a server-side HealthKit database. If you use AI coaching or daily insights, the App may include derived or summarized context in an AI request, such as current weight, weekly weight change, calories burned, or whether a workout was logged today, so the insight matches what you see in the App. You can revoke HealthKit access at any time in Settings → Health → Data Access & Devices → Calzi AI.

Camera and depth sensor (LiDAR)

When you use food scan, the App uses your device camera to capture a photo. On devices with a LiDAR depth sensor (iPhone Pro models from 12 Pro onward), the App also captures depth information to estimate food portion volume. Depth data is processed entirely on-device — only the resulting photo and parsed nutrition estimates leave the device, and only as described in this Policy. No raw depth or 3D scene data is sent to any server.

Location

When you use Nearby restaurants or choose to find nearby grocery stores from your shopping list, Calzi requests location access using iOS's When in Use permission. Your location is used in Apple MapKit requests to find nearby places. You can change Calzi's location permission in iOS Settings.

2. How We Use Information

• Calculate your daily calorie and macro targets and personalize the experience.
• Identify foods from photos, barcodes, and free-text descriptions and return nutrition estimates.
• Save your food log, weight history, fasting history, and goals locally so they're available across sessions.
• Verify and manage your subscription via Apple StoreKit and RevenueCat.
• With your permission, measure and improve Calzi ads on Facebook and Instagram using the limited ad events described above.
• Send local notifications you've enabled (meal reminders, hydration nudges, fasting milestones, weekly summaries). Notifications are scheduled on-device using Apple's UserNotifications framework — no third-party push service is used.
• Communicate with you about support requests and important service changes.

3. How Your Data Is Stored

• On-device files: profile, food log, weight history, meals, fasting sessions, exercise log, and weekly check-ins are stored locally in the App's sandbox (Documents directory) with iOS Data Protection enabled (completeFileProtection).
• iOS Keychain: sign-in identifiers (Apple/Google user ID, your name, your email, sign-in provider) are stored in the Keychain with afterFirstUnlock accessibility.
• HealthKit: health data stays in Apple HealthKit on your device.
• App Group / Widget: a small subset of your nutrition data (today's calories and macros) is shared with the home-screen widget through an iOS App Group. This data never leaves your device.
• iOS Backup: if you have iCloud Backup or encrypted local backups enabled in iOS, Apple may include the App's local data in those backups. Backups are managed by Apple, not by us, and are governed by Apple's privacy policy.
• Our servers: we do not maintain a user account database. We operate a proxy server that forwards individual API requests to AI and food-database providers. We do not intentionally store request contents after the request is complete, though our hosting and infrastructure providers may process standard operational logs.
• In transit: all data sent to our proxy and third-party APIs is transmitted over HTTPS/TLS.

4. Third-Party Services

The App relies on the following third parties to provide its functionality. Your use of the App is also subject to their privacy practices.

AI providers

The App uses AI models from the providers below to identify foods, estimate nutrition, and generate insights. Specific model versions may change as providers release updates; the data we send to each provider does not.

• OpenAI — receives images and short text prompts for food identification from photos and for generating nutrition insights. Nutrition insight prompts may include food logs, goals, profile details, and summarized activity or weight context. Calls are routed through our proxy. No persistent user identifier is sent.
  openai.com/policies/privacy-policy
• Google Gemini — receives images and short text prompts for food identification from photos, cross-checking results, and fallback nutrition insights. Nutrition insight prompts may include food logs, goals, profile details, and summarized activity or weight context. No persistent user identifier is sent.
  policies.google.com/privacy
• Perplexity — receives free-text food descriptions you enter (e.g. "two scrambled eggs and toast") and returns parsed foods and nutrition estimates. Routed through our proxy. No persistent user identifier is sent.
  perplexity.ai/hub/legal/privacy-policy

Food and nutrition databases

• FatSecret Platform API — receives search queries and barcode numbers to look up foods. Routed through our proxy.
  fatsecret.com/privacy
• USDA FoodData Central — receives search queries and barcode numbers; public U.S. government API.
  fdc.nal.usda.gov
• Open Food Facts — receives barcode numbers and search queries; public open database.
  world.openfoodfacts.org/terms-of-use
• Edamam Nutrition Data — used to parse natural-language ingredient descriptions when configured. Receives the ingredient text only.
  edamam.com/privacy
• Nutritionix — optional food-search and natural-language nutrition fallback when configured. Receives food search text or natural-language meal descriptions only.
  nutritionix.com/privacy

Apple platform services

• Sign in with Apple — authentication.
• Apple StoreKit — subscription purchases, transaction verification, and restore.
• Apple HealthKit — only reads/writes data you explicitly authorize, on your device.
• Apple MapKit — used for nearby restaurant and grocery-store searches.
• Apple UserNotifications — local notifications scheduled on-device.

Subscription management

• RevenueCat — manages Calzi AI Pro entitlement status and restore behavior. RevenueCat receives an app user identifier and subscription entitlement/transaction status. If you opt into the expanded ad measurement, it also receives Meta’s anonymous installation identifier and tracking-permission status and sends the limited subscription reports described in Section 1 to Meta. Apple handles payment processing.
  revenuecat.com/privacy

Analytics and diagnostics

• PostHog — receives the privacy-safe usage events described in Section 1 (screen and feature usage, app version, device/OS class, an anonymous installation identifier). No food, health, free-text, photo, or account data is sent. Can be disabled in Profile → Analytics & Privacy (Product Analytics in earlier versions).
  posthog.com/privacy
• Sentry — receives crash reports and error diagnostics (stack traces, app version, device and OS information). Calzi disables Sentry's default personal-information collection and screenshot and view-hierarchy attachments. Diagnostics are separate from the Share Product Analytics setting.
  sentry.io/privacy

Advertising measurement (optional)

• Meta (Facebook and Instagram) — receives only the consented ad-measurement events and technical metadata described in Section 1. Calzi does not share food or health information with Meta. Meta processes received information under its own privacy policy and applicable business-tool terms. Meta Privacy Policy.

Email delivery

• Resend — delivers in-app feedback to our support inbox. Receives the content of your feedback message, the diagnostics listed in Section 1, and, if you provided one, your reply email address.
  resend.com/legal/privacy-policy

Google services

• Google Sign-In SDK — used only when you choose Sign in with Google. Google receives standard sign-in data.
  policies.google.com/privacy

We do not exchange personal information for money. Optional sharing with Meta for advertising measurement and delivery may be considered sharing for cross-context behavioral advertising under some privacy laws. It is disabled unless you opt in, and it never includes the food and health information excluded above. You can withdraw your permission as described in Section 6.

5. Data Retention

Data stored on your device is kept until you delete the App or use Profile → Personal Details → Delete Account. Photos and free-text descriptions sent to AI providers are processed in real time; we do not intentionally retain them on our infrastructure after the request is complete. Subscription records are retained by Apple and RevenueCat as required by their policies and applicable tax/accounting law. Feedback you send us is kept in our support inbox for as long as needed to handle the request and improve the App; you can ask us to delete it at any time.

Events already shared with Meta are retained under Meta's policies. Turning off ad measurement stops new device events; server reporting stops once the change is synchronized as described in Section 1. It does not automatically remove earlier events. For privacy requests, contact us at the address below or use Meta's privacy controls.

6. Your Rights and Choices

• Access and edit: you can view and edit your profile, goals, and history directly in the App.
• Delete: use Profile → Personal Details → Delete Account to erase Calzi AI data stored by the App on that device, including sign-in credentials, profile, food log, weight history, fasting and exercise data, saved preferences, and widget-shared data. Deleting the App from your device also removes local app data. These actions do not delete Apple Health data or cancel an Apple subscription.
• HealthKit: revoke specific permissions in iOS Settings.
• Notifications: manage notification permissions in iOS Settings.
• Ad measurement: choose not to allow tracking, or turn off Allow Ad Measurement in Profile → Analytics & Privacy. Your choice does not affect app features. You can also change tracking authorization in iOS Settings. Calzi does not request this permission from profiles under 18.
• Marketing: we do not send marketing emails. Service emails are limited to support and important policy changes.
• California, EEA, UK, and other regional rights: you may have rights to access, correct, delete, or port your information, or to restrict or object to certain processing. Because we generally do not retain your personal data on our servers (it lives on your device), most of these rights are exercised by managing the App directly. To make a formal request, contact us at Calzisupport@gmail.com.

7. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use industry-standard safeguards including HTTPS/TLS in transit, the iOS Keychain for credentials, iOS Data Protection (completeFileProtection) for stored files, and a server-side proxy so that third-party API keys are not embedded in the App binary. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9. International Users

The App may be used worldwide. By using the App, you consent to the processing of your information in the United States and other jurisdictions where our service providers operate, which may have different data-protection laws than your own.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after a change indicates acceptance of the revised Policy.

11. Contact

Questions or requests? Email Calzisupport@gmail.com.