Privacy Policy

Account & Profile: Your name, email address, and the details you enter during setup (date of birth, sex, height, weight, goal, activity level and eating pattern), used to calculate your personal targets.

What You Log: Meals, ingredients and nutrition values, water intake, weight, workouts and activities, fasting sessions, your goals and your reminder settings.

Steps (optional): If you connect Apple Health or Health Connect, ZCAL reads your daily step count only, to estimate the calories you burn walking. We never read any other health data and never write anything to these services.

Photos & Voice: Meal photos and voice recordings, only when you use the scanner or the voice log. Progress photos you take stay on your device.

Purchases: If you subscribe, Apple or Google processes the payment. We receive your subscription status and purchase details (product, price and date) through our subscription provider, RevenueCat. We never receive your card details.

Support & Feedback: Messages you send through in-app Support, and the feature requests and votes you submit.

We do not use advertising or analytics SDKs, and we do not track you across other apps or websites.

To calculate your metabolic rate, daily calorie target and nutrient targets using published scientific formulas.

To analyse a meal photo, nutrition label, voice note or workout description that you submit, so we can identify the food or activity and estimate its nutrition or calories.

To show your progress charts, streaks, badges and fasting timer, and to schedule the reminders you turn on (reminders are scheduled on your device).

To manage your subscription and answer your support requests.

We do not use your data for advertising, and we do not use your health data, nutrition data, photos or voice recordings to train AI models.

We use a small number of service providers, each only for the purpose listed and under their data protection terms:

Supabase hosts our database and sign-in, and stores your account, profile and logs.

Google (Gemini API) analyses a photo, label, voice note or workout description when you ask it to. Each item is sent once, only to answer that request, and is not used to train Google’s models.

RevenueCat, the Apple App Store and Google Play process subscriptions and payments.

Apple Health and Health Connect supply your step count on your device, only if you choose to connect them.

We never sell, rent or trade your personal, health or dietary data, and we never share it with advertisers or data brokers.

Account, profile and logs are kept for as long as your account exists, so your history is there when you come back. Nothing is deleted automatically because of inactivity.

When you delete your account (Settings → Delete Account), your sign-in, profile and all of your logs are erased from our live database immediately. Copies held in our hosting provider’s encrypted backups are overwritten within 30 days.

Reset Data (Settings → Reset Data) erases all of your logs immediately but keeps your account.

Meal photos and voice recordings are never stored on our servers. Meal photos are kept only on your device. A voice recording is deleted from your device as soon as the meal is saved.

Progress photos are stored only on your device and are never uploaded. They are deleted when you delete them or uninstall the app.

Step counts are stored with that day’s log and are deleted with it.

Support tickets and feature requests are kept until you delete them or delete your account.

Purchase records (subscription and transaction details) are kept for as long as tax and accounting law requires, generally up to 7 years, even after your account is deleted. They are linked only to an anonymous identifier and contain no health or nutrition data.

Server logs (such as IP address and request time) are kept by our hosting provider for security purposes for no more than 7 days.

All data is encrypted in transit (TLS) and encrypted at rest by our hosting provider.

Database-level Row Level Security ensures that only you can read or change your logs.

Access to our systems is limited to the people who run ZCAL, and only for operating and supporting the service.

Access & Update: Review and change your details and goals at any time in Settings.

Export: Create a PDF summary of your nutrition history in Settings.

Reset: Erase all of your logs in Settings → Reset Data.

Delete: Permanently delete your account and all of its data in Settings → Delete Account. If you cannot use the app, email us at z.cal.ai.app@gmail.com from your account’s email address and we will delete your account and data within 30 days.

Depending on where you live (for example under the GDPR or the CCPA), you may also have the right to access, correct, port, restrict or object to the processing of your data. Contact us to exercise these rights.

ZCAL is intended for users who are at least 13 years old (or 16 where local law requires).

We do not knowingly collect personal information from children without verified parental consent. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy when the app or the law changes. The date at the top of this page shows the latest version.

We will tell you about significant changes in the app or by email.