Privacy Policy

We collect the information necessary to provide and improve Calos:

• Account information: when you sign in, we receive the email address you provide.
• Food and nutrition data: the food items, portions, and meals you log.
• Weight and exercise logs: weight entries, exercise activities, and water intake you record.
• Meal photos: photos you capture with the camera scanner. Photos are stored in Supabase Storage and automatically deleted after 28 days. Photos sent for AI analysis are processed by Google Gemini and are not retained by Gemini after processing.
• Device information: diagnostic data and crash reports used to identify and fix issues.

We use the information we collect to:

• Personalize your nutrition tracking and goals.
• Provide AI-powered meal analysis and food recognition.
• Sync your data across the devices where you are signed in.
• Maintain, troubleshoot, and improve the service.

We do not sell your personal data.

Your data is stored in Supabase, which is hosted on AWS. All data is encrypted in transit using TLS and encrypted at rest. Meal photos uploaded for scanning are automatically deleted from our storage 28 days after upload.

Local data cached on your device is held in the operating system's encrypted storage.

We rely on the following third-party services to operate Calos. Each processes data in accordance with its own privacy policy:

• Supabase — database hosting and authentication.
• Cloudflare — forum image storage and caching.
• Google Gemini — AI meal analysis and food recognition.
• RevenueCat — iOS subscription management.
• Razorpay — payment processing for web and Android subscriptions.
• Vercel — hosting for the Calos website and API.

Account deletion is immediate and permanent. Calos removes the account and associated records from its primary database. When a forum post or account is deleted, Calos also attempts to delete associated forum images from object storage and purge cached copies. These image-deletion operations are best-effort and are not guaranteed; a failed attempt may leave an unreferenced storage object. Cached images may remain accessible for up to four hours after deletion.

To request a copy of your data, email support@calos.fit.

Calos is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email to the address associated with your account.

For questions about this Privacy Policy or your data, email support@calos.fit.