Privacy policy
Last updated September 15, 2026
Everything stays on the phone
The diary, meal photos, goals and body data live in the app's own storage. An account is optional: until you create one, nothing is uploaded to our servers and nothing syncs to other devices.
The backup
If you create an account (Profile → Backup), a copy of the diary goes to our server: dish names, portion weights, calories, macros, weigh-ins, body-fat scans and goals. Photos never leave — neither of meals nor of your body: they stay on the phone, so on a new phone the entries come back without pictures. About you we keep only the email address and a fingerprint of the password.
What does leave the phone
To count calories the photo is sent to a vision service — OpenRouter (USA), where a Google Gemini model looks at it — and the resulting description of the dish is counted by DeepSeek (China). Only the photo and that text are sent — no name, no email, no weight, no diary. We keep no copy of the photo ourselves.
What we do count
There are no ads and no third-party trackers in the app. We do keep marks of our own: the phone gets a random number, tied neither to you nor to the device's hardware — the server counts the day's free entries by it and remembers access opened with a code. The same number labels anonymous steps: launch, end of setup, first entry, opening the payment screen. What you eat is not in those marks.
Access codes
A code is checked by the server: on the phone there would be nothing to stop guessing. Only the code and the device number are sent — the partner who issued it does not learn who used it.
The waiting list
If you leave an email address on the payment screen, it goes into a separate list with a single purpose: to tell you when the subscription can be paid for. It creates no account and goes into no mailing list.
Deleting your data
«Erase all data» in the profile wipes the diary, photos and settings for good. Uninstalling the app does the same. The server copy survives both — «Delete account» on the backup screen removes it, together with the email and the password. An address on the waiting list we remove on a note to support@calsculator.com.
How long we keep it
The server copy of the diary lives as long as the account does and disappears with it the same second. Records of visits to the site are erased after six months, the note of an app download after a month, the day's free-entry counter after three days. Anonymous step marks live longer: they show whether people come back to the app, and they are not tied to the diary.
Your rights
You may ask what we hold about you, correct it, take a copy or demand its deletion. The diary exports straight from the app (Profile → «Export to CSV»), the account is removed there too, by «Delete account» on the backup screen; anything else we answer on a note to support@calsculator.com. You may also complain about our handling of your data to the supervisory authority in your country.
Children
The app is not meant for children under 13, and we deliberately collect no data about them. If an account was created by a child, write to us — we will delete it together with the copy of the diary.
Questions
Calsculator is made by the Calsculator team; write to support@calsculator.com — we reply in the language you write in.