Privacy Policy

Information We Collect

Depending on how you use CaloShape, we may collect or process the following information:

• Account information, such as email address, sign-in method, profile name, and account identifiers.
• Profile and goal information, such as age, height, gender, weight goals, nutrition goals, and activity preferences.
• Food and nutrition information, including food logs, saved foods, calories, macros, micronutrients, meal times, and nutrition history.
• Images you upload for food recognition, nutrition-label analysis, weight tracking, or related app features.
• Progress data, such as weight records, water records, workout records, fasting data, and daily summaries.
• Health Connect data, if you grant permission, such as steps, active calories burned, exercise sessions, and related history needed for activity and progress features.
• Subscription and entitlement information needed to verify premium access through Google Play.
• Technical information, such as device identifiers, app version, locale, network diagnostics, logs, and anti-abuse or security signals.

How We Use Information

• To provide calorie tracking, food logging, nutrition estimation, weight tracking, workout tracking, and related app features.
• To personalize nutrition goals, summaries, progress views, reminders, and app settings.
• To process food photos, labels, barcode data, or other inputs using AI-assisted recognition and nutrition analysis.
• To verify subscriptions, restore purchases, manage entitlements, and prevent abuse.
• To send account, verification, support, security, and service-related messages.
• To improve reliability, diagnose errors, protect the service, and comply with legal obligations.

Health Connect Data

If you choose to connect CaloShape with Health Connect, CaloShape may request permission to read health and fitness data such as steps, active calories burned, exercise sessions, and related history. We use this information to estimate daily activity burn, update your calorie dashboard, and provide workout and progress insights.

Health Connect access is optional. You can grant or revoke access at any time in Android Health Connect settings. CaloShape does not use Health Connect data for advertising. If CaloShape stores activity summaries or derived progress records from Health Connect data, those records are handled under this Privacy Policy and may be deleted through the account deletion process where applicable.

Third-Party Services

CaloShape may use trusted third-party services to operate the app, including:

• Google Play Billing for subscription purchase and entitlement verification.
• Google sign-in or authentication services when you choose to sign in with Google.
• Android Health Connect, if you grant permission, for reading selected health and fitness data from your device.
• AI and nutrition analysis providers for food recognition and nutrition-label parsing.
• Email providers for one-time passcodes, support, and service messages.
• Cloud hosting, database, cache, storage, monitoring, and security providers.

These providers process information only as needed to provide their services to CaloShape.

Health and Nutrition Information

CaloShape is a wellness and nutrition tracking tool. Nutrition estimates may be incomplete or inaccurate. CaloShape is not a medical device and does not provide medical diagnosis, treatment, or professional health advice.

Data Retention

We retain data only for the periods needed to provide CaloShape, meet legal obligations, resolve disputes, and prevent fraud or abuse. The main retention periods are:

• Account, profile, food, nutrition, weight, water, workout, fasting, notification, authentication-token, and local-cache data: deleted when an account deletion request is completed.
• Original images for food records that are not saved: retained for up to 72 hours.
• Original images for saved food records: retained for up to 360 hours (15 days).
• Pending food-recognition records and results: retained for up to 48 hours (2 days).
• Failed food-recognition records and results: retained for up to 168 hours (7 days).
• Draft food-recognition records and results: retained for up to 360 hours (15 days).
• Deleted food-record tombstones: retained for up to 240 hours (10 days) after entering the deleted state.
• Daily nutrition summaries: retained for up to 63 days.
• Saved nutrition entries and history are not automatically deleted when their original image expires. They remain until you delete the entry, delete your account, or another retention rule disclosed in this Policy applies.
• Google Play entitlement audit records: account identifiers are pseudonymized and the audit record is retained for five calendar years after the terminal subscription event.
• Encrypted Google Play purchase tokens: retained only for re-verification, acknowledgement, and refund handling, for up to 180 days after the terminal subscription event.
• Referral reward ledgers and terminal referral claims: the deleted party is pseudonymized and records are retained for five calendar years after the final outcome.
• Routine referral risk signals: hashed identifiers only, retained for 24 months. Denied referral risk signals: hashed identifiers only, retained for five calendar years.
• Completed account-deletion requests: account identifiers are pseudonymized and retained for three calendar years for compliance and support audit purposes.

A hash, purchase-token hash, or pseudonym is still personal data, not anonymous data. We restrict access to it and delete it when its retention period ends. A documented, approved, and time-bounded legal hold may delay deletion only where required by law.

Account and Data Deletion

You may request deletion of your CaloShape account and associated app data. For instructions, visit Delete your CaloShape account.

You may also delete specific food, weight, or saved-food data without deleting your account. The same page explains the available in-app controls and how to submit a verified request for specific data categories.

We may retain the limited pseudonymized records described in the Data Retention section for legal, security, fraud-prevention, payment, tax, dispute-resolution, or compliance purposes. Deleting your CaloShape account does not automatically cancel an active Google Play subscription; subscriptions must be managed through Google Play.

Security

We use reasonable administrative, technical, and organizational safeguards to protect information. No system can be guaranteed to be completely secure, but we work to protect your information against unauthorized access, loss, misuse, or alteration.

Children and Teen Users

CaloShape is intended for users age 13 and older. If you are under the age at which you can independently consent to the processing of personal data in your country or region, you may use CaloShape only with permission and supervision from a parent or legal guardian. The parent or legal guardian should review this Privacy Policy and the Terms and Conditions with you.

CaloShape processes a young user's profile, nutrition, health, activity, and uploaded-image data only for the purposes described in this Policy, including providing requested features, maintaining account security, and preventing abuse. We do not sell this information or use it for personalized advertising. A parent or legal guardian may contact support@caloshape.com to request access, correction, or deletion where permitted by applicable law. If we learn that information from a user under age 13 was collected, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, contact us at support@caloshape.com.