Privacy Policy
The short version
- Calorie Tracker is made by an individual developer, not a company. There are no ads, no analytics SDKs, no trackers, and your data is never sold.
- To work, the app stores your account email, your profile (age, sex, height, weight, activity level, targets) and what you log: meals, weights and your chat with the assistant.
- Your messages and any photos you send are processed by OpenAI to estimate calories. Photos are not stored by us.
- Voice input uses Apple's speech recognition, on-device where available.
- You can delete your account and all of its data at any time — see Deleting your data.
1. Who is responsible
The data controller for Calorie Tracker is Mihai Molnar, an individual developer based in Romania. For anything related to this policy or your data, email mihai.molnar1984@icloud.com.
2. What we collect and why
Account
When you register we store your email address and a hashed password. These are handled by Supabase Auth (see section 4). We use your email only to sign you in and to send password-reset emails when you ask for one. We do not send marketing email.
Profile
During onboarding you enter your age, sex, height, weight, activity level and target weight. We use these once to calculate your daily calorie target, and we keep them so the assistant can give you sensible answers (for example, how much you have left today). You can change the target in Settings at any time.
What you log
Everything you track is stored against your account so it appears in your dashboard and history:
- Meals — the description you gave and the estimated calories.
- Weight entries — the number and the date.
- Chat messages — what you wrote and what the assistant replied, so the conversation can be shown again later and used as context.
Photos
If you send a photo of your meal, it is transmitted to our server and forwarded to OpenAI for calorie estimation. We do not store the photo. Only a note that a photo was sent, together with the text you typed, is kept in your chat history. The app only accesses the camera or photo library when you choose to send an image.
Voice input
If you tap the microphone, the app uses Apple's Speech framework to turn your voice into text. Recognition runs on your device when your iPhone supports it for the chosen language; otherwise Apple may process the audio on its servers under Apple's privacy policy. We never receive or store the audio — only the resulting text, once you press Send, is sent to us like any other message.
Technical data
Like any web service, our server keeps standard access logs (IP address, time, requested URL, user-agent) for security and troubleshooting. They are rotated automatically and are not linked to your profile or used for profiling. The app stores your daily calorie target and voice-input language on your device for convenience.
What we do not collect
- No advertising identifiers, no analytics or crash-reporting SDKs, no third-party tracking of any kind.
- No location data, no contacts, no Apple Health / HealthKit access.
- No payment information — the app currently has no purchases.
3. Legal basis
If you are in the EU/EEA or the UK, we process your data on these grounds:
- Performance of a contract — account, profile, logs and chat are needed to provide the service you asked for.
- Explicit consent — health-related data (weight, dietary intake, body measurements) is special-category data. By entering it in the app you consent to its processing for the purpose of calorie tracking. You can withdraw consent by deleting your account.
- Legitimate interests — server logs and rate limiting, to keep the service secure and available.
4. Who processes your data
We use a small number of service providers, each acting on our instructions:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database and authentication | Email, hashed password, profile, meals, weights, chat history |
| OpenAI | Calorie estimation and assistant replies (API) | Your chat messages, meal photos you send, and the profile context needed to answer (targets and today's totals) |
| Hetzner Online | Hosting of our server (Finland, EU) | All traffic passes through it; access logs |
| Apple | Speech recognition; App Store distribution | Voice audio for dictation (see above) |
Data sent to OpenAI is processed under OpenAI's API data-usage terms, which state that API data is not used to train their models. Supabase and OpenAI may process data in the United States; the EU Standard Contractual Clauses apply to those transfers.
We do not sell personal data and we do not share it with anyone else, except if required by law.
5. How long we keep it
Your account, profile and everything you have logged are kept for as long as your account exists, so that your history and trends remain available to you. Server access logs are kept for a short period (typically up to 14 days) and then deleted. Database backups, where taken, are retained for up to 14 days.
6. Deleting your data
You can delete your account and all associated data — profile, meals, weights and chat history — at any time. Email mihai.molnar1984@icloud.com from the address you registered with and we will delete everything within 30 days and confirm by email. Deletion is permanent. (An in-app "Delete account" button is coming to Settings; this policy will be updated when it ships.)
You can remove individual meals or weight entries at any time by telling the assistant, for example "remove the toast" or "delete today's weight".
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to restrict or object to its processing, and to withdraw consent. To exercise any of these, email us at the address above. You also have the right to complain to your local data-protection authority — in Romania, the ANSPDCP.
8. Security
All traffic between the app and our server uses HTTPS. Passwords are never stored in plain text. Access to the database is restricted to the server and the developer. No system is perfectly secure, but we keep the amount of data we hold to what the app actually needs.
9. Children
Calorie Tracker is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. Not medical advice
Calorie estimates and the assistant's suggestions are approximations produced by an AI model and are for general information only. They are not medical or nutritional advice. If you have a medical condition, an eating disorder, or specific dietary needs, please consult a qualified professional.
11. Changes to this policy
If we change how the app handles your data, we will update this page and the effective date at the top. Significant changes will also be announced in the app.
12. Contact
Mihai Molnar · mihai.molnar1984@icloud.com