Privacy policy

How Caloor treats what you share with it.

Last updated 4 September 2026

Caloor is a nutrition app for Kurdistan and Iraq. It works by keeping a diary of what you eat, so it necessarily holds personal information. This page says exactly what it holds, what it does with it, who else sees any of it, and how you get rid of it. It is written to be read, not skimmed past.

What we collect

Your account. Your email address and a sign-in identifier, managed by our sign-in provider, Clerk. There is no password; you sign in with a code sent to your email.
Your profile. What you enter during setup and later in Settings: sex, year of birth, height, weight, activity level, goal, dietary preferences, allergens, the diet plan you chose, your language and time zone, and a display name if you set one.
Your food diary. Every entry you log — the food, the portion, the nutrition figures, the meal it belongs to and when — together with corrections you make, favourites, recipes, water, weigh-ins, and the questions you ask the coach.
Meal photos. When you scan a meal, the photo is uploaded once so it can be analysed, and kept with the entry so your history stays recognisable. Full-size photos are deleted after 90 days; a small thumbnail stays with the entry until you delete the entry or your account.
Steps. If you allow it, the app reads your daily step count from your phone's motion sensor and stores the daily total with your diary. It does not read anything else from the sensor.
Purchases. Premium is sold through Apple. We receive a transaction identifier and the subscription's status from Apple so we know what you are entitled to. We never see your card or your Apple ID password.
Technical records. Server logs with the time of each request, the account it came from, and, for a scan, how long the analysis took and what it cost us. These are used to run the service and are not linked to advertising.

We do not collect your contacts, your location, your other apps, or anything from your photo library beyond the single photo you choose.

Usage measurement. The app sends a small number of usage events to Google Analytics for Firebase so we can see how many people finish setting up, log their first food, and subscribe, and which of our advertising brought them. These events carry only the step reached and, for a subscription, the plan name; they never include what you ate, your weight, your targets, a photo, or a question you asked. The app does not read your device's advertising identifier and does not track you across other apps or websites. Google's own privacy policy applies to how it processes these events on our behalf.

What we do with it

Work out your calorie and nutrient targets and show your progress against them.
Recognise the food in a photo, look up a barcode, answer your questions to the coach, and build a meal plan if you ask for one.
Send reminders you turned on. Reminders are scheduled on your phone; we do not run a notification server.
Improve recognition, only if you switch on “Help improve recognition” in Settings. When it is on, the corrections you make to a photo scan are kept so future scans do better. Off means off: nothing of yours is used for that purpose.

We do not sell personal information, and we do not use it for advertising.

Who else sees any of it

Some of the work is done by companies we send data to for that purpose only. Each receives the minimum needed:

Clerk (sign-in): your email address.
OpenAI and, where configured, Google (food recognition): the meal photo and your language. Not your name or email.
Anthropic and OpenAI (the coach and the meal planner): your recent diary, your targets, your dietary preferences and allergens, and your question. Not your name or email.
FatSecret and Open Food Facts (barcodes): the barcode number.
Apple (payments): handled entirely by Apple under Apple's terms.

None of these providers is permitted to use what we send for anything other than answering the request. Under the agreements we use, they do not train their models on your data.

Invitations. If you share your invite code, the friend who uses it receives a day of Premium; you receive a day once they have set up their account and logged a first meal, and a week if they go on to pay for a subscription (withdrawn if that purchase is refunded). One code per account, never your own, and not from a phone that already used one. There is a ceiling on days earned this way in a month. We record which code was used to join, and nothing else about the friend is shown to you.

Community catalogue. If you add a product or a dish to the catalogue, its name, brand, nutrition figures, ingredients and photo become visible to other users, marked as unverified until we review it. Your name and email are not shown. A verified contribution earns you a day of Premium.

Where it lives and how it is protected

Your data is stored on servers we operate. Traffic between the app and the servers is encrypted. Meal photos are encrypted at rest with a key held separately from the storage. Access to the database is limited to the people who run the service, and every administrative action on an account is logged with who did it and why.

How long we keep it

Your diary and profile: for as long as you have an account.
Full-size meal photos: 90 days. Thumbnails: with the entry.
Server logs: 30 days.

Deleting your data

Settings → Delete account removes your account, your diary, your photos, your recipes and your coach history at once. Purchases are managed by Apple; a deleted account does not cancel a subscription, so cancel it in your Apple settings too. Products and dishes you contributed to the catalogue stay, without any link to you.

You can also export your whole diary as a spreadsheet from Settings at any time.

Age

Caloor is for people aged 16 and over. The setup asks for your year of birth and does not create a plan for anyone younger. If you believe a younger person has an account, tell us and we will remove it.

Health information

What you log is health-related, and we treat it that way: it is used only to do what the app does for you, and it is never shared for marketing. Caloor is not a medical service and the coach is not a clinician. It will tell you when something is a question for a doctor.

Changes

If this policy changes in a way that matters, the app will say so the next time you open it, and the date at the top of this page will move.

Contact

Questions or requests about your data: bzharmail@gmail.com.