Privacy Policy

1. Introduction

Calvin ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

Information You Provide

• Account Information: Email address, name, and authentication data when you create an account
• Profile Information: Weight history, calorie and macro targets, activity level, and wellness goals you set in the app
• Health Data: With your permission, we read activity data from Apple Health to calculate calorie needs and write nutrition data back to keep your health records synchronized
• Food Photos: Images you upload for nutritional analysis
• Text Food Entries: Descriptions of meals you type for AI parsing
• Barcode Scans: Product barcodes you scan for packaged food lookups
• Food Logs: Meal entries, nutritional data, and dietary notes
• Water Intake: Daily hydration logs you record in the app
• Referral Information: Referral codes you share or apply, and the relationship between referring and referred accounts
• Notification Preferences: Reminder times and the categories of notifications you opt into
• Payment Information: Processed securely through our payment provider (Stripe for web checkout, Apple for in-app purchases). We do not store your card details.

Information Collected Automatically

• Device Information: Device type, operating system, and unique device identifiers
• Usage Data: Features used, time spent, and interaction patterns
• Behavioral Analytics: We track how you interact with the app and website, including features used, actions taken (such as logging meals or viewing insights), and timing. On the web, third-party analytics tags (Google Analytics, Vercel Analytics) load only after you grant consent through our cookie banner.
• Push Notifications: Device tokens used to send notifications, plus delivery status

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Analyze food photos and provide nutritional estimates
• Calculate personalized calorie and macro targets
• Track your progress and provide insights
• Process payments and manage subscriptions
• Send important updates about the Service
• Improve our AI models and Service quality
• Respond to your requests and support inquiries
• Track email delivery status to ensure you receive important communications

4. AI Processing

When you upload food photos or submit text descriptions of meals, this content is processed by third-party AI providers to analyze nutritional content and produce estimates. Barcode scans are looked up against the Open Food Facts database. We may change AI providers from time to time. We do not use your photos or text entries to train AI models without your explicit consent.

AI Improvement: When you correct nutritional estimates, we store the original AI prediction and your correction to improve accuracy. Our team may review corrections for quality assurance.

5. Data Sharing

We share your information with the following categories of service providers, each acting as a data processor on our behalf:

• Hosting and Storage (Vercel): Application hosting and image storage (Vercel Blob)
• Authentication (Firebase, Google, Apple): Account sign-in via Firebase Authentication, including Sign in with Google and Sign in with Apple
• AI Analysis: Food photos and text entries are sent to third-party AI providers for nutritional estimates. We may change providers from time to time.
• Barcode Lookup (Open Food Facts): Scanned barcodes are queried against the public Open Food Facts product database
• Payment Processing (Stripe, Apple): Web subscriptions are processed by Stripe; in-app purchases on iOS are processed by Apple under their respective terms
• Transactional Email (Resend): Account, billing, and product emails, including delivery status tracking
• Crash and Error Monitoring (Sentry): Crash reports that may include device info, app state, and user identifiers to diagnose and fix issues
• Web Analytics (Google Analytics, Vercel Analytics): Loaded on our website only after you grant consent through the cookie banner
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, secure authentication, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your data as follows:

• Account, Food Logs, and Photos: Retained while your account is active; permanently deleted when you delete your account
• Payment Records: Retained for 7 years as required by tax law, even after account deletion

When you delete your account, a 30-day grace period begins. After this period, all personal data is permanently deleted, except for payment records we are legally required to retain.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and personal information
• Export your data in a portable format
• Opt out of certain data processing activities
• Withdraw consent where processing is based on consent
• Not be discriminated against for exercising any of these rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the rights listed above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. We do not sell or share your personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your privacy rights, and we will not deny you services, charge different prices, or provide a different level or quality of service because you exercised any of these rights. To submit a request, email privacy@calvin.vip. You may also designate an authorized agent to act on your behalf, subject to verification of the agent's authority.

Data Export

You can request a copy of all your data through the app settings. Your export will include your profile, food logs, photos, and goals in JSON format. Export files are available for download for 7 days after generation.

Account Deletion

You can request account deletion through the app or by contacting us. When you request deletion:

• A 30-day grace period begins during which you can cancel the request
• During this period, you will not be able to access your account
• After 30 days, all data is permanently deleted including photos, food logs, and account information
• To cancel a deletion request, contact us before the grace period ends

To exercise these rights, contact us at privacy@calvin.vip.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@calvin.vip.