Effective date: September 2, 2026
This Privacy Policy explains how Calorista ("we", "us", "the App") collects, uses, and shares information when you use the Calorista mobile application and related services.
1. Information we collect
- Account information: when you sign in, we (via Firebase Authentication) may receive your email address, display name, and profile photo if you use Google, Apple, or email/password sign-in. You can also use the App anonymously as a guest.
- Health and nutrition data you provide: biometrics (height, weight, age, sex, activity level), calorie and macro targets, weight history, water intake, and the food entries you log (photos, barcodes, text/voice descriptions, and the resulting nutrition data).
- Content you submit for AI analysis: meal photos, barcodes, and text/voice descriptions you submit are sent to our AI provider (Google Gemini or OpenAI, depending on configuration) solely to identify foods and estimate nutrition. This content is processed to generate a response and is not used by us to build a public profile of you.
- Subscription and purchase data: if you subscribe to Calorista Pro, purchase information is processed by Google Play and our subscription-management provider (RevenueCat) to activate and manage your entitlement. We do not receive your full payment card details.
- Device and usage data: device identifiers, app version, crash reports, performance data, and general usage analytics, collected via Firebase Analytics, Crashlytics, and Performance Monitoring.
- Advertising data: if ads are shown, your Advertising ID and general interaction with ads may be processed by Google AdMob to serve and measure ads.
- Marketing/attribution data: on iOS, only with your App Tracking Transparency permission, and on Android, aggregate install/engagement events may be shared with Meta (Facebook App Events) for marketing measurement.
- Push notification data: a device push token is registered with OneSignal so we can send you reminders and updates you've opted into.
2. How we use your information
- To provide the core App functionality: logging food, calculating calories/macros, tracking progress, generating AI-powered insights, and syncing your data across sessions.
- To process and manage subscriptions and entitlements.
- To send you notifications you've opted into (reminders, updates).
- To maintain and improve the App: diagnosing crashes, understanding feature usage, and measuring performance.
- To show and measure ads, where applicable, and to measure marketing campaign effectiveness.
- To communicate with you about your account or respond to support requests.
3. Who we share information with
We do not sell your personal information. We share information with the following categories of service providers, solely to operate the App:
- Google Firebase — authentication, database sync, analytics, crash reporting, performance monitoring, remote configuration, and cloud storage.
- Google Gemini / OpenAI — AI analysis of food photos, barcodes, and text descriptions you submit.
- RevenueCat — subscription and purchase management.
- Google AdMob — advertising, where ads are enabled.
- OneSignal — push notification delivery.
- Meta (Facebook) — marketing measurement, subject to your consent/App Tracking Transparency choice on iOS.
- Our hosting provider, to operate the backend service that powers the App.
We may also disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
4. Data retention
We retain your account and nutrition data for as long as your account is active, so the App can function (history, trends, and streaks depend on it). If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, security, or fraud-prevention purposes.
5. Deleting your account and data
You can delete your account and associated data at any time from within the App (Settings → Account → Delete Account), or by visiting calorista.billx.io/en/account-deletion for step-by-step instructions, including how to request deletion if you no longer have the App installed.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will respond in accordance with applicable law (including GDPR for users in the EEA/UK and CCPA/CPRA for California residents).
7. Children's privacy
Calorista is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate action.
8. Security
We use industry-standard measures — including encrypted network connections and secure token storage — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International data transfers
Your information may be processed and stored in countries other than your own, including the United States, by the service providers listed in Section 3. We take steps to ensure appropriate safeguards are in place for such transfers where required by law.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the effective date above when we do. Continued use of the App after changes take effect means you accept the updated policy.
11. Contact us
Questions about this Privacy Policy: morningstarcode@gmail.com