Privacy Policy

CalScanner ("we", "us", "our") is a mobile application that uses artificial intelligence to estimate nutrition information from food photographs and helps you track your daily meals. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use CalScanner.

1. Information We Collect

a) Authentication Information

You may create and access your account using email/password or Sign in with Apple. Depending on the authentication method you choose, we may collect:

• A unique, stable user identifier tied to your account.
• Your email address.
• Your first name or display name (if provided).
• Authentication-related metadata required to maintain your session securely across app launches.

Email/password authentication and account management are securely handled through Supabase. Sign in with Apple is managed by Apple and may provide us with your name and email address, including a private relay email if you choose to hide your real email.

b) Camera Access

CalScanner requests access to your device camera solely to capture food photographs for nutritional analysis. Camera access is required only when you choose to scan a food item. We do not access your camera in the background, and we do not access your photo library unless you explicitly choose to provide an image.

c) Food Scan Images

When you scan a food item, the photograph you capture is transmitted to our processing endpoint for AI-based nutritional analysis. The image is sent over an encrypted HTTPS connection. After the analysis is complete and results are returned to the app, we do not intentionally retain the image ourselves beyond what is reasonably necessary to process the request and provide the scan result.

d) Meal and Profile Data

When using CalScanner, you may provide profile and usage data such as:

• Age
• Current weight
• Height
• Target weight
• Activity level
• Fitness or nutrition goals
• Meal entries and nutrition tracking data
• Progress data over time
• Preferred unit system (for example, imperial or metric)

This data is used to personalize your experience, calculate calorie and macro targets, display progress, and support core app functionality. Depending on the feature, this information may be stored locally on your device and/or securely stored using Supabase infrastructure.

e) Subscription Information

Your subscription status is managed through Apple's In-App Purchase system. We do not process or store payment card details, billing addresses, or financial account information. We may store subscription-related status information needed to determine whether premium features should be available to your account.

2. Information We Do NOT Collect

• Precise or coarse location data.
• Contacts, calendar, or unrelated personal device data.
• Browsing history, advertising identifiers, or cross-app tracking data.
• Health or fitness data from Apple Health or any health kit, unless explicitly stated in a future version of the app.
• Payment card details or banking information.
• Analytics or crash-reporting telemetry beyond what Apple or our infrastructure providers may provide by default, unless clearly disclosed in a future update.

3. How We Use Your Information

• To create and manage your account using Supabase and Apple authentication systems.
• To authenticate your identity and maintain your session securely.
• To analyze food photographs and return estimated nutrition data.
• To store your meals, progress, and profile preferences.
• To determine your subscription status and unlock premium features.
• To calculate personalized daily calorie and macro targets based on the profile data you provide.
• To maintain, secure, and improve app functionality.

4. How Scanning Works

When you use the scanner:

• The app captures a photograph using your device camera.
• The image is transmitted via HTTPS to our Cloudflare Worker endpoint.
• The Cloudflare Worker forwards the image to OpenAI for AI-powered nutritional analysis.
• OpenAI processes the image and returns estimated nutrition values (such as calories, protein, carbohydrates, fats, and fiber).
• The results are sent back to the app and displayed to you.

The image is used solely for the purpose of generating nutrition estimates and delivering that functionality to you. We do not use your food images for advertising or sell them to third parties. We do not intentionally use them for our own model training.

5. Third-Party Service Providers

We use the following third-party services to operate CalScanner:

• Supabase: Provides authentication and database infrastructure for securely storing user account, profile, and app-related data.
• Cloudflare: Hosts our processing endpoint. Cloudflare may process request data as part of delivering the service and may temporarily log metadata for security and abuse prevention purposes, in accordance with their privacy practices.
• OpenAI: Provides the AI model that analyzes food images. OpenAI receives the food photograph to generate nutrition estimates. OpenAI may temporarily process or retain data in accordance with their API policies for safety, abuse prevention, and service reliability.
• Apple: Manages authentication through Sign in with Apple and subscription billing through In-App Purchases. Apple’s privacy practices apply to those services.

We do not sell, rent, or trade your personal data. We share information with service providers only as needed to operate the app and deliver its features.

6. Data Storage and Retention

• Local data: Some profile, meal, preference, and app-state data may be stored locally on your device to support app functionality and performance.
• Server-side account and profile data: We securely store account and profile data using Supabase infrastructure to enable authentication, account management, and app functionality.
• Scanned images: Images submitted for analysis pass through our processing infrastructure and are not intentionally stored by us beyond what is reasonably necessary to process the scan and deliver the result.
• Third-party retention: Cloudflare, OpenAI, Supabase, and Apple may retain certain data according to their own service, security, abuse-prevention, and compliance policies. We do not control those retention periods, but we select providers that follow industry-standard data protection practices.

7. Data Security

We implement reasonable technical measures to protect your information:

• All data transmitted between the app and our servers uses HTTPS encryption.
• Authentication relies on secure infrastructure provided by Supabase and Apple.
• Payment processing is handled entirely by Apple’s secure In-App Purchase system.
• User data stored through Supabase is protected using secure database and authentication systems.
• Local data on your device is protected by your device’s built-in security features (such as passcode, Face ID, or Touch ID, where applicable).

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

• Update or delete in-app data: You can edit or delete certain profile and tracking data within the app where those features are available.
• Delete account and associated data: You may request deletion of your account and data by contacting us at contact@calscanner-app.com. Where available in the app, you may also use the in-app account deletion functionality.
• Revoke camera access: You can revoke camera permission at any time in your device’s Settings app.
• Revoke Apple Sign-In: You can manage or revoke Sign in with Apple credentials through your Apple ID settings.
• Reset email/password access: If you use email/password authentication, you may request a password reset through the app’s password recovery flow.
• Cancel subscription: You can cancel your subscription at any time through iOS Settings → Apple ID → Subscriptions.

9. Children

CalScanner is not directed at or intended for use by children under the age of 9 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@calscanner-app.com and we will take steps to address the situation.

10. International Users

When you use certain features, including food scanning, your data may be processed on servers located outside your country of residence. By using CalScanner, you understand and consent to the transfer and processing of your data as necessary to provide the service. We rely on our service providers to maintain appropriate safeguards for data they process.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, app functionality, service providers, or applicable laws. The updated policy will be made available within the app or on our website, and the “Last updated” date at the top will be revised. Your continued use of CalScanner after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

contact@calscanner-app.com