Privacy Policy

We collect the following categories of information when you create an account and use the app:

• Account & profile information — your email address, name, and profile details you provide, such as age, sex, height, starting weight, activity level, and goals, which we use to calculate your calorie and macronutrient targets.
• Food diary — the foods, meals, and portion sizes you log, along with the date and time of each entry.
• Weight history — the weight entries you record to track progress over time.
• Photos — images you submit for photo-based food logging, so our vision provider and, where relevant, our admin reviewers can identify foods and estimate nutrition.
• Scan history — barcodes you scan and the product lookups associated with them.
• Technical & usage data — device and browser information, IP address, and log data collected automatically for security, troubleshooting, and abuse prevention.

We use the information above to:

• Provide and operate the tracking features of the app (diary, weight log, scanning, photo logging);
• Calculate personalized calorie and macro targets and progress trends;
• Analyze food photos and barcodes to estimate nutrition information;
• Maintain and improve our food database, including reviewing user-submitted foods;
• Secure accounts, prevent abuse, and troubleshoot issues; and
• Respond to support requests you send us.

Your data is stored in a Supabase-hosted Postgres database with row-level security (RLS) enabled. RLS policies ensure that your profile, food diary, weight history, and scan history are only ever readable by your own authenticated account, or by an administrator account carrying out permitted moderation or support tasks.

Photos you submit for photo-based food logging are stored in a private storage bucket and are only accessible to you and, where relevant, admin reviewers responsible for verifying food submissions — they are never made public.

We share limited data with the following third parties strictly to provide the service:

• Supabase— provides our database, authentication, and file storage infrastructure. Your account credentials, profile, diary, weight, scan, and photo data are hosted on Supabase's infrastructure and subject to their security practices.
• Open Food Facts — an open, third-party product database we query when you scan a barcode, so we can look up packaged-food nutrition information. Only the scanned barcode is sent to retrieve product data; no personal account information is shared with Open Food Facts.
• Vision API (Anthropic Claude)— when you use photo-based food logging, the photo you submit is sent to Anthropic's Claude API to identify the food and estimate its nutrition content. This is used solely to generate your log entry and is subject to Anthropic's API terms.
• Resend — used to deliver transactional email, such as account confirmation, password reset, and account-related notifications. Resend processes your email address and the message content necessary to deliver that mail.

We retain your account, profile, diary, weight, scan, and photo data for as long as your account remains active, so the app can show your history and trends.

If you delete your account, your personal data — including your profile, diary entries, weight and measurement history, water logs, saved meals, favourites, scan history, and uploaded photos — is deleted from active systems immediately. Copies may persist briefly in encrypted backups until those backups are rotated out in the ordinary course of our backup cycle, after which they are permanently purged.

You can review and correct most of your profile, diary, and weight data directly in the app. You have the right to access, export, correct, or delete your personal data — and you can do both of the following yourself, at any time, from Settings:

• Export your data— "Export my data" in Settings generates a JSON file of everything associated with your account (profile, goals, diary entries, weight and measurement history, water logs, saved meals, favourites, and scan history) for you to download immediately.
• Delete your account— "Delete my account" in Settings permanently deletes your account and all associated data right away, once you confirm. This is immediate and irreversible — there is no 30-day grace period or recovery option, so export a copy first if you want to keep one.

You can also email privacy@caloafrica.com if you'd rather request either of these from us directly, or if you no longer have access to your account.