Privacy Policy

Effective October 24, 2026

Information you choose to enter

FitCalo can store your profile settings, age, sex, height, weight, activity level, goals, meal history, calorie and macro estimates, water entries, weight entries, saved meals, reminder preferences and app settings. Nutrition history and profile information are stored locally on your device or browser so the app can provide personalized targets and history. Remote reminder settings are handled as described below.

Apple Health

Apple Health integration is optional. If you choose to connect it, FitCalo requests read access to your step count, walking and running distance, active energy (active calories), and exercise minutes so the app can show your recent activity alongside your nutrition goals. FitCalo does not write data to Apple Health.

HealthKit values are read on your iPhone when you refresh or view the Apple Health section. FitCalo does not send HealthKit data to FitCalo's backend, OpenAI, advertising or analytics services, or the suggestions service, and it does not use HealthKit data for advertising, marketing, or data mining. FitCalo does not perform background HealthKit synchronization. You can review or revoke FitCalo's Health access at any time in Apple's Health app or iOS Settings.

Meal and nutrition-label photos

Before FitCalo sends data to an AI service provider for the first time, the app asks for your explicit permission. When you choose an AI meal scan or nutrition-label scan and approve AI analysis, the selected image is resized on your device and sent to FitCalo's backend for analysis. The image is then provided to OpenAI to generate the requested nutrition estimate or read the label. FitCalo's backend does not intentionally persist the uploaded image after the request is processed. OpenAI may process or temporarily retain request data according to its own service terms and applicable data-handling settings.

AI photo-scan results are estimates and are not guaranteed to be 100% accurate. The AI may misidentify food or incorrectly estimate portion weight, calories or nutrients, and nutrition-label readings may contain errors. Review and correct results before saving. See the Terms of Use for details about AI photo-scan accuracy and nutrition limitations.

You can withdraw permission under Profile > AI data sharing > Withdraw without deleting your meal history or other local records. New AI requests then require fresh consent. Manual logging, food search and barcode lookup remain available. Withdrawal stops new AI submissions; it does not erase information already sent to service providers, and a request already submitted may still finish processing.

AI insights

If you request FitCalo AI Insights, the app sends a limited aggregate summary such as recent average calories, protein, water, weight trend and goal information. It does not need to send your full meal-history database to generate the insight.

Food search and barcodes

Food-search terms are sent through FitCalo's backend to USDA FoodData Central to retrieve food nutrition information. Barcode numbers are sent through FitCalo's backend to Open Food Facts to look up packaged-product information. These requests use the search term or barcode necessary to provide the requested result, and the external services may process ordinary network metadata.

Service safeguards

FitCalo verifies Apple-signed purchase information with Apple before providing paid AI features. Daily usage is recorded against a hashed subscription identifier, with request identifiers, counts and the time zone first used by the subscription. The time zone keeps the daily limit consistent across devices. Usage records are retained for up to 35 days; the hashed subscription identifier and time zone remain while the service operates to preserve consistent limits. Photos, nutrition results and full Apple purchase proofs are not stored in this usage database. The backend can also receive normal network information such as an IP address for abuse prevention and service security. These safeguards are not used for advertising or cross-app tracking.

Voluntary suggestions and feedback

If you choose to submit an idea through Profile > Suggestions for FitCalo, the app sends the text of your suggestion, selected language, a random device installation ID, a request ID and your explicit acceptance of the suggestion-license terms to FitCalo's server. The server also stores the time submitted, the accepted version of those terms and a hash of a separate device-generated credential to restrict access to your submission. Do not include medical records, sensitive personal information, confidential material or content you lack the rights to share. Suggestions are optional, are not used for advertising, and are retained until you delete them or FitCalo removes them in its service operations. You can review and delete suggestions submitted from the same device in Profile. When you delete a suggestion, its text is removed from the server; a non-content record is retained to prevent duplicate retries from recreating deleted text. Deletion cannot undo uses of the idea already permitted by the terms. Deleting local FitCalo data first removes suggestions submitted from that device from the server, then clears the device's feedback credential. If the server cannot confirm deletion, the app keeps the local data so you can retry.

Subscriptions

Purchases and subscription billing are processed by Apple on iOS. FitCalo can read the App Store transaction and entitlement status necessary to unlock subscription features and restore purchases. FitCalo does not receive your full payment-card information from Apple.

Analytics, ads and tracking

The current version of FitCalo does not include third-party advertising SDKs and does not use your activity to track you across other companies' apps or websites for advertising.

Retention and deletion

Your locally stored FitCalo history remains on your device until you delete it, clear the app's local data, or uninstall the app. You can use Profile → Delete local FitCalo data to remove the locally stored FitCalo information on that device. Deletion also removes temporary nutrition-export CSV copies created in the app's cache. Copies you saved or shared outside the app are not removed. Deleting local data does not cancel an App Store subscription; subscriptions are managed through Apple.

Security

FitCalo uses encrypted HTTPS connections for network requests. No system can guarantee absolute security, so do not use FitCalo to store information you consider inappropriate for a general wellness application.

Children

FitCalo is a general wellness application and is not directed to children under 13. Nutrition estimates are not a substitute for advice from a qualified healthcare professional.

Changes to this policy

We may update this policy when features or data practices change. The effective date above will be updated when a material revision is published.

Optional remote reminders

When you enable a daily reminder in the iPhone app, FitCalo sends its backend an Apple notification token, a random installation identifier, a notification credential, your selected reminder time and your time zone. These are used only to deliver the reminder through Apple Push Notification service. Notification text is generic and does not include meals, weight, HealthKit information or nutrition results. The server stores a hash of the notification credential. Turning reminders off removes the notification token and stops future scheduling; Apple may already have accepted an alert before the change. Disabled registration records and delivery records are removed after 35 days. Active settings remain while reminders are enabled. Deleting local FitCalo data first confirms that remote reminders are disabled; an internet connection is required for that confirmation.

Questions or privacy requests

For help with FitCalo or questions about this policy, visit the FitCalo Support page below.