Privacy Policy

Welcome to Cal AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service"). Please read this privacy policy carefully.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Email address, name, password, and profile details
• Health Data: Weight, height, age, gender, fitness goals, and dietary preferences
• Food Data: Photos of meals, manual food entries, and nutritional logs
• Progress Data: Weight tracking, progress photos, and achievement records
• User Content: Any other information you choose to provide through the app

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, time spent, interaction patterns
• Location Data: Approximate location based on IP address (if permitted)
• Analytics Data: App performance, crashes, and error reports

1.3 AI Processing Data

When you use our AI-powered food recognition feature, we process the photos you take of your meals. These images are analyzed by our artificial intelligence systems to identify foods and estimate nutritional content.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: Deliver core functionality including calorie tracking, AI food recognition, and progress monitoring
• Personalization: Customize your experience with personalized goals, recommendations, and insights
• AI Improvement: Train and improve our machine learning models for better food recognition accuracy
• Analytics: Understand usage patterns to improve our Service
• Communication: Send you updates, reminders, and important service notifications
• Security: Protect against fraud, abuse, and security threats
• Legal Compliance: Comply with legal obligations and resolve disputes

3. Data Sharing and Disclosure

3.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Cloud storage and hosting services
• AI and machine learning processing (Amazon Nova via OpenRouter)
• Analytics and app performance monitoring
• Customer support services
• Payment processing (for premium features)

These providers are contractually obligated to protect your data and use it only for specified purposes.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal process or governmental requests
• Enforcement of our terms and policies
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls and authentication requirements
• Security Monitoring: Regular security audits and vulnerability assessments
• Data Minimization: We collect only the data necessary to provide our Service

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your personal information through the app settings at any time.

6.2 Data Portability

You can request a copy of your data in a portable format through the app or by contacting us.

6.3 Deletion

You can delete your account and associated data at any time through the app settings.

6.4 Marketing Communications

You can opt out of marketing communications by adjusting your notification preferences in the app.

6.5 Cookie Management

You can control cookies through your browser settings (for our website).

7. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. California Privacy Rights

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price, even if you exercise your privacy rights

10. GDPR Rights (EEA Users)

If you are located in the European Economic Area, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Contact Us

14. Consent

By using our Service, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.