Privacy Policy

Calorist — AI Calorie Tracker  ·  Effective date: July 22, 2026

This Privacy Policy describes how the Calorist mobile application ("Calorist", "the app", "we") handles your information. Calorist is designed to be private by default: it has no user accounts, no analytics or tracking SDKs of its own, and no servers of its own, and we never sell your data. The app may display advertising served by Google AdMob and offers optional in-app purchases processed by Google Play — both are described below.

1. Data stored on your device

The following information is saved in the app's private storage on your device and is never transmitted to the developer:

• Profile: gender, birth year, height, weight, activity level, goal, target weight, calorie and macro targets, water goal, and selected motivations.
• Diary data: logged meals and foods, water intake, weight history, favorites, recent foods, and custom foods you create.
• Settings: theme, language, dark-mode preference, and reminder settings.

This includes health-related information (such as weight and goals). It remains on your device under your control.

2. Data shared with third parties

Calorist sends data to third-party services only when you actively use a feature that requires it:

• Google Gemini API (Google LLC). When you use the AI photo scan or "describe your meal" features, the photo and/or text you provide (together with the app's display language) is sent over an encrypted connection to Google's Gemini API to generate nutrition estimates. Google processes this data under the Gemini API Terms of Service and the Google Privacy Policy. Depending on the API tier in use, Google may retain and use submitted content to improve its services. Please avoid including people, faces, documents, or anything personal in meal photos.
• Open Food Facts. When you scan a product barcode, only the barcode number is sent to the Open Food Facts public database to retrieve product and nutrition information. No personal data is included.
• Google Play services (ML Kit barcode scanner). Barcode scanning itself is performed on your device by Google Play services.
• Firebase Analytics (Google LLC). We record anonymous product events — such as finishing onboarding, completing a scan, logging food, opening the upgrade screen, or subscribing — together with the technical information Firebase collects automatically (a randomly generated app instance ID, device model, operating system version, approximate country, and app version). This tells us which features people use so we can improve the app. The content of your meals, photos, descriptions, weight and diary entries is never included.
• Firebase Crashlytics (Google LLC). If the app crashes, a report is sent containing the technical cause of the crash (stack trace), device model, operating system version, app version, and a randomly generated installation identifier. This is used only to find and fix bugs.
• Firebase Cloud Messaging (Google LLC). Used to deliver the optional "News & tips" notifications. Your device registers an anonymous messaging token with Google so notifications can reach it. Turning the option off in Settings unsubscribes your device.

These services are provided by Google and are governed by the Google Privacy Policy and the Firebase privacy documentation. Apart from advertising and in-app purchases (sections 3 and 4), these are the only network communications the app makes. If you never use the AI or barcode features, the app tracks food offline with its built-in database.

3. Advertising (Google AdMob)

Calorist may display ads served by Google AdMob (Google LLC). To serve and measure ads and to prevent fraud, AdMob may automatically collect certain data from your device, including your advertising ID, IP address, device and app information, and general (coarse) location derived from your IP address. This data is processed by Google under the Google Privacy Policy (see also how Google uses data from apps that use its services).

• Where required by law (for example in the EEA and the UK), you will be asked for consent before personalized ads are shown, and you can choose non-personalized ads instead.
• You can reset or delete your advertising ID and opt out of ad personalization at any time in your device settings (Settings → Google → Ads).

4. In-app purchases (Google Play Billing)

Calorist offers optional in-app purchases (such as Calorist Pro) processed entirely by Google Play. Your payment details (card number, billing address, and so on) are handled by Google and are never shared with or visible to us. The app only receives a confirmation from Google Play that a purchase was made, which is used to unlock the purchased features on your device. Purchases and refunds are managed through your Google Play account under Google Play's terms.

5. Photos

Photos are taken with your device's camera app or chosen from your gallery. A temporary copy is kept in the app's private storage on your device. A photo is only transmitted — to Google's Gemini API — when you request AI analysis of it. The developer never receives your photos.

6. Permissions

• Internet: used for the AI analysis and barcode lookup features, and to serve ads and process in-app purchases.
• Notifications (optional): used for local meal reminders (scheduled on your device — no data leaves it) and for the optional "News & tips" messages we send through Firebase Cloud Messaging. Both can be switched on or off independently in Settings, and meal reminders are off by default.
• Calorist does not request the camera permission itself — photo capture is handled by your device's own camera app.

7. Data retention and deletion

• Your data stays on your device until you delete it. You can remove individual entries in the app, and uninstalling the app deletes all locally stored data.
• If Android device backup is enabled on your phone, the app's local data may be included in your device's backup to your own Google account. You can manage this in your device's backup settings.
• Data sent to Google or Open Food Facts is retained according to their respective privacy policies; we have no access to it and cannot delete it on your behalf.
• Advertising-related data is retained by Google under its policies, and purchase records are kept in your Google Play account.
• Analytics events and crash reports are retained by Google for a limited period under Firebase's data-retention policies. Uninstalling the app stops all further collection.

8. Children

Calorist is not directed at children under 13, and we do not knowingly collect any personal information from children. The app has no accounts, and its ads are not directed at children.

9. Child safety standards (CSAE)

Our application has a strict zero-tolerance policy regarding Child Sexual Abuse and Exploitation (CSAE). Any content that exploits or harms children is strictly prohibited and will be removed immediately. If you encounter any such content or have any concern related to child safety in connection with the app, please report it to us at tikdown.co@gmail.com and we will take appropriate action, including reporting to the relevant authorities where required.

10. Security

All network communication uses encrypted HTTPS connections. Local data is stored in the app's private storage area, which other apps on your device cannot access on a standard (non-rooted) device.

11. Your rights

Because the developer does not collect, store, or process your personal data on any server, there is no developer-held data to request, correct, or delete. For data processed by Google or Open Food Facts, please refer to their privacy policies linked above. If you have any questions about your privacy in Calorist, contact us and we will help.

12. Changes to this policy

If we change how the app handles data (for example, by adding new features), we will update this policy and revise the effective date at the top of this page.

13. Contact