Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains how CaloShape collects, uses, stores, and protects information when you use the CaloShape mobile application and related services.

Information We Collect

Depending on how you use CaloShape, we may collect or process the following information:

Account information, such as email address, sign-in method, profile name, and account identifiers.
Profile and goal information, such as age, height, gender, weight goals, nutrition goals, and activity preferences.
Food and nutrition information, including food logs, saved foods, calories, macros, micronutrients, meal times, and nutrition history.
Images you upload for food recognition, nutrition-label analysis, weight tracking, or related app features.
Progress data, such as weight records, water records, workout records, fasting data, and daily summaries.
Health and subscription information specific to your platform, as described separately below.
Technical information, such as device identifiers, app version, locale, network diagnostics, logs, and anti-abuse or security signals.

How We Use Information

To provide calorie tracking, food logging, nutrition estimation, weight tracking, workout tracking, and related app features.
To personalize nutrition goals, summaries, progress views, reminders, and app settings.
To process food photos, labels, barcode data, or other inputs using AI-assisted recognition and nutrition analysis.
To verify subscriptions, restore purchases, manage entitlements, and prevent abuse.
To send account, verification, support, security, and service-related messages.
To improve reliability, diagnose errors, protect the service, and comply with legal obligations.

Platform-Specific Information

Use the section for your device. Apple Health and App Store information applies to iOS; Health Connect and Google Play information applies to Android.

iOS / App Store

Apple Health: With your permission, CaloShape reads steps, active energy, and workouts through HealthKit to support activity estimates and progress features. CaloShape stores daily activity summaries for these features.

Access is optional and read-only. You can manage access in the Health app. Revoking access stops future reads; to remove summaries already stored by CaloShape, request account deletion. This does not delete the original data in Apple Health.

App Store: We process purchase identifiers, product information, subscription dates and status, and offer information to verify purchases, restore access, handle refunds, and administer iOS referral offers.

Sign in with Apple: If selected, we process your Apple sign-in identifier and the name or email Apple shares with us, including a private relay address if you use Hide My Email.

Android / Google Play

Health Connect: If you choose to connect CaloShape with Health Connect, CaloShape may request permission to read health and fitness data such as steps, active calories burned, exercise sessions, and related history. We use this information to estimate daily activity burn, update your calorie dashboard, and provide workout and progress insights.

Health Connect access is optional. You can grant or revoke access at any time in Android Health Connect settings. If CaloShape stores activity summaries or derived progress records from Health Connect data, those records may be deleted through the account deletion process where applicable.

Google Play: We process subscription and entitlement information needed to verify premium access through Google Play.

CaloShape does not use Apple Health or Health Connect data for advertising.

Third-Party Services

CaloShape may use trusted third-party services to operate the app, including:

iOS: Apple’s App Store for purchases and subscription verification, Sign in with Apple when selected, and Apple Health through HealthKit when you grant access.
Android: Google Play Billing for subscription purchase and entitlement verification, and Health Connect when you grant access.
Google sign-in or authentication services when you choose to sign in with Google.
A third-party AI service for food recognition and nutrition-label analysis, as explained below.
Email providers for one-time passcodes, support, and service messages.
Cloud hosting, database, cache, storage, monitoring, and security providers.

These providers process information only as needed to provide their services to CaloShape.

AI Photo Analysis and Your Choice

When you choose Scan Foods, an album photo, or Label analysis, CaloShape sends the selected photo through our servers to a third-party AI service, together with instructions to identify food or read nutrition labels and estimate nutrition. The photo may contain personal information visible within the image. Avoid including unrelated personal information.

In app versions that support AI photo permission, CaloShape asks for your explicit permission before enabling these photo-analysis features. Permission is remembered on that device for your current login and can be withdrawn in Settings under Photo analysis permission. Signing out, changing accounts, or reinstalling the app may require permission again. A change to the AI provider or the disclosed purpose requires renewed permission.

In these versions, if you decline or withdraw permission, the app does not start new AI photo uploads or user-requested AI analysis retries. Your membership and existing records remain available. Withdrawal does not recall photos already sent or stop analysis already submitted. Existing records and images remain subject to the retention and deletion rules below.

Barcode lookup sends the barcode to Open Food Facts for product information; it does not send a photo to the AI provider. In versions that support AI photo permission, switching from barcode lookup to Label or photo analysis requires that permission.

AI photo permission is separate from your device's Camera or Photos permission and from your subscription. App Store subscriptions on iOS and Google Play subscriptions on Android remain separate; declining or withdrawing AI photo permission does not cancel either subscription.

Health and Nutrition Information

CaloShape is a wellness and nutrition tracking tool. Nutrition estimates may be incomplete or inaccurate. CaloShape is not a medical device and does not provide medical diagnosis, treatment, or professional health advice.

Data Retention

We retain data only for the periods needed to provide CaloShape, meet legal obligations, resolve disputes, and prevent fraud or abuse. The main retention periods are:

Account, profile, food, nutrition, weight, water, workout, fasting, notification, authentication-token, and local-cache data: deleted when an account deletion request is completed.
Original images for food records that are not saved: retained for up to 72 hours.
Original images for saved food records: retained for up to 360 hours (15 days).
Pending food-recognition records and results: retained for up to 48 hours (2 days).
Failed food-recognition records and results: retained for up to 168 hours (7 days).
Draft food-recognition records and results: retained for up to 360 hours (15 days).
Deleted food-record tombstones: retained for up to 240 hours (10 days) after entering the deleted state.
Daily nutrition summaries: retained for up to 63 days.
Saved nutrition entries and history are not automatically deleted when their original image expires. They remain until you delete the entry, delete your account, or another retention rule disclosed in this Policy applies.
Completed account-deletion requests: account identifiers are pseudonymized and retained for three calendar years for compliance and support audit purposes.

iOS / App Store

After account deletion, App Store subscription audit records are retained for five calendar years from the verified end of the subscription, including a verified refund or revocation that ends it. The period does not start when you delete your account. We remove the purchase-account link and replace the deleted account’s identifier with a pseudonymous identifier.

iOS referral records are handled separately from Google Play records. The deleted party’s account identifier is pseudonymized; support details and unused reward-code secrets linked to the deleted account are removed. Records involving another active account may remain to support that account’s referral outcome.

We periodically remove eligible records after this period. Active subscriptions, billing retry, and grace periods are not treated as ended. If Apple’s current status cannot be verified or a related referral record still requires the purchase evidence, removal is deferred until those checks or dependencies are resolved. Google Play’s separate purchase-token retention rule does not apply to App Store records.

For deletion confirmation, a secure receipt is kept on your device until you acknowledge completion or it is found to have expired. It can check completion for up to 90 days. The server stores only its hash, which expires after 90 days and is then removed by periodic cleanup. This receipt cannot sign in to your account.

Android / Google Play

Google Play entitlement audit records: account identifiers are pseudonymized and the audit record is retained for five calendar years after the terminal subscription event.
Encrypted Google Play purchase tokens: retained only for re-verification, acknowledgement, and refund handling, for up to 180 days after the terminal subscription event.
Referral reward ledgers and terminal referral claims: the deleted party is pseudonymized and records are retained for five calendar years after the final outcome.
Routine referral risk signals: hashed identifiers only, retained for 24 months. Denied referral risk signals: hashed identifiers only, retained for five calendar years.

A hash, purchase-token hash, or pseudonym is still personal data, not anonymous data. We restrict access to retained records. Where a retention period is specified above, records are removed when that period ends. A documented, approved, and time-bounded legal hold may delay deletion only where required by law.

Account and Data Deletion

You may request deletion of your CaloShape account and associated app data. For instructions, visit Delete your CaloShape account.

You may also delete specific food, weight, or saved-food data without deleting your account. The same page explains the available in-app controls and how to submit a verified request for specific data categories.

We may retain the limited pseudonymized records described in the Data Retention section for legal, security, fraud-prevention, payment, tax, dispute-resolution, or compliance purposes.

iOS / App Store: Account deletion does not cancel an App Store subscription or trial. Manage it in Apple subscription settings.
Android / Google Play: Account deletion does not automatically cancel an active Google Play subscription. Manage it in Google Play subscription settings.

Security

We use reasonable administrative, technical, and organizational safeguards to protect information. No system can be guaranteed to be completely secure, but we work to protect your information against unauthorized access, loss, misuse, or alteration.

Children and Teen Users

CaloShape is intended for users age 13 and older. If you are under the age at which you can independently consent to the processing of personal data in your country or region, you may use CaloShape only with permission and supervision from a parent or legal guardian. The parent or legal guardian should review this Privacy Policy and the Terms and Conditions with you.

CaloShape processes a young user's profile, nutrition, health, activity, and uploaded-image data only for the purposes described in this Policy, including providing requested features, maintaining account security, and preventing abuse. We do not sell this information or use it for personalized advertising. A parent or legal guardian may contact support@caloshape.com to request access, correction, or deletion where permitted by applicable law. If we learn that information from a user under age 13 was collected, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, contact us at support@caloshape.com.