The short version: CalPrime collects only what it needs to work. We never sell your personal data. Food photos are processed by AI and not stored permanently. You can delete your account and all data at any time.
1 Information We Collect
We collect information you provide directly and information generated by your use of the app.
Information You Provide
- Account data: email address, display name, and password (hashed) when you register.
- Profile data: age, height, weight, sex, and activity level — used only to calculate calorie and macro targets.
- Food logs: meals, portion sizes, and nutritional data you log or that the app logs on your behalf.
- Voice input: audio captured when you use voice logging is transcribed on-device and not retained as audio.
Information Collected Automatically
- Usage data: features used, session length, and crash reports — used to improve the app.
- Device data: device model, OS version, and app version for compatibility and support purposes.
- Subscription data: purchase status and expiry — managed through Apple App Store or Google Play. We do not store payment card details.
2 How We Use Your Information
We use the information we collect to:
- Provide and personalise the CalPrime app experience.
- Calculate your daily calorie and macro targets based on your profile.
- Process food photos and voice input to identify meals and log nutrition.
- Send account-related notifications (e.g., subscription renewal reminders) — not marketing without your consent.
- Detect and fix bugs, and improve app performance.
- Comply with legal obligations.
We do not use your data to train AI models without your explicit opt-in consent.
3 Food Photos and AI Processing
Photos are processed, not stored. When you scan a meal, the image is sent to an AI vision service to identify food and estimate nutrition. The photo is not stored on our servers after processing is complete.
CalPrime uses third-party AI services to analyse food photos:
- Google Gemini 2.5 Flash — primary AI vision model for food recognition.
- Anthropic Claude Haiku — fallback AI model when primary is unavailable.
Images transmitted to these services are subject to their respective data processing agreements, which prohibit use of your images for model training. No image is associated with your identity or stored permanently by CalPrime.
Barcode scans do not transmit images — only the barcode number is used to query food databases.
4 Data Sharing and Third Parties
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
Service Providers
- Amazon Web Services (AWS): cloud infrastructure and photo processing.
- Google (Gemini API): AI food recognition (images not retained).
- Anthropic (Claude API): fallback AI food recognition (images not retained).
- FatSecret API: food and nutrition database lookups (barcode numbers only, no personal data).
- Apple / Google: in-app purchase and subscription management.
Legal Requirements
We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
Business Transfer
If CalPrime is acquired or merges with another company, your data may be transferred as part of that transaction. You will be notified in advance and given the option to delete your account.
5 Data Storage and Security
Your data is stored on servers located in the United States (AWS us-east-1 region). We protect your data using:
- Encryption in transit (TLS 1.2+) for all data sent between the app and our servers.
- Encryption at rest for all database storage.
- Hashed passwords (bcrypt) — we never store your password in plain text.
- Access controls limiting which staff can view user data.
No system is completely secure. If we become aware of a security breach that affects your data, we will notify you within 72 hours as required by applicable law.
6 Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: update inaccurate or incomplete data through the app's profile settings.
- Deletion: delete your account and all associated data from Settings → Account → Delete Account. Deletion is permanent and processed within 30 days.
- Portability: export your food log data in CSV format from Settings → Export Data.
- Opt-out of notifications: manage push notification preferences in your device settings at any time.
To exercise any of these rights, contact us at privacy@calprime.app. We will respond within 30 days.
California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.
EU / UK Residents (GDPR)
If you are in the European Economic Area or United Kingdom, our legal basis for processing your data is contract performance (to provide the app service) and, where applicable, legitimate interests. You have the right to lodge a complaint with your local data protection authority.
7 Children's Privacy
CalPrime is not directed to children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.
8 Data Retention
- Active accounts: data is retained for as long as your account is active.
- Deleted accounts: all personal data is permanently deleted within 30 days of account deletion. Anonymised, aggregated statistics (e.g., "1,000 meals logged today") may be retained indefinitely.
- Food photos: deleted from our servers immediately after AI processing is complete (typically within seconds).
- Crash and usage logs: retained for 90 days, then deleted.
9 International Users
CalPrime is operated from the United States. If you access the app from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.
By using CalPrime, you consent to the transfer of your information to the United States. Where required, we use Standard Contractual Clauses approved by the European Commission to ensure adequate data protection for transfers from the EU/EEA.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send a notification via the app or email at least 14 days before the change takes effect.
Your continued use of CalPrime after changes take effect constitutes acceptance of the updated policy. If you do not agree with the updated policy, you may delete your account before the effective date.
11 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: