Privacy Policy

This privacy policy applies to the CalcEat app (hereby referred to as "Application") for mobile devices that was created by Alphaborn (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you download and use it. This information is divided into data you provide, health data you grant access to, and data collected automatically.

Information You Provide:

For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information, including but not limited to:

• Account Information: First Name, Last Name, Email Address, User ID, Password.
• Profile & Goal Data: Height, weight, activity level, and dietary goals.
• Meal & Usage Data: Meal data (including timestamps and food items), food images (for AI analysis), favorite meal items, user preferences, and app settings.
• Authentication & Session Data: Authentication tokens and login history.

Health Data (With Your Explicit Permission):

The Application integrates with Apple HealthKit and Google Health Connect. With your explicit consent, we may:

• Read Data: Access data such as active/basal calories, steps, and workout information to provide a comprehensive health overview.
• Write Data: Write data you log in the Application, such as nutrition data, weight, and height, back to your health profile.

You maintain full control over these permissions and can grant or revoke them at any time through your device's operating system settings (in the Apple Health or Google Health Connect apps).

Automatically Collected Information:

The Application may collect certain information automatically, including, but not limited to:

• Device & Connection Information: Your device's Internet Protocol address (e.g., IP address), device identifiers (such as IDFA or Android ID), device hardware information, device token (for push notifications), device type, and the operating system you use.
• Usage & Analytics Data: The pages of the Application that you visit, the time and date of your visit, the time spent on those pages, app usage events, user behavior, and conversion tracking data.
• Performance Data: Crash reports and error logs to help us identify and fix bugs.
• Application Information: App version, platform, account status, account creation date, and last activity.
• Payment & Subscription Data: Subscription status, purchase history, and entitlements (managed primarily by our payment processor).

The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices, and marketing promotions.

The Application does not gather precise information about the location of your mobile device.

Third-Party Services and Data Sharing

The Application utilizes third-party services to provide its functionality. These services may access your data as described below and have their own Privacy Policies regarding handling data.

The Service Provider may share your information with third parties in the ways that are described in this privacy statement. We may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with our trusted services providers (such as our backend API) who work on our behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Below is a list of the third-party service providers used by the Application:

Analytics & Tracking Services:

• Mixpanel: Used for user behavior analytics and event tracking. (Privacy Policy)
• Facebook/Meta App Events: Used for install tracking, ad attribution, and conversion tracking. (Privacy Policy)

Payment Services:

• RevenueCat: Used for managing subscriptions, in-app purchases, and paywalls. (Privacy Policy)

Error Monitoring:

• Bugsnag: Used for crash reporting and error monitoring to improve app stability. (Privacy Policy)

Push Notifications:

• Firebase Cloud Messaging (FCM): Used to send push notifications to Android devices. (Privacy Policy)
• Apple Push Notification service (APNs): Used to send push notifications to iOS devices. (Privacy Policy)

Health Data Integration:

• Apple HealthKit: Used to read/write health data on iOS with your permission. (Privacy Policy)
• Google Health Connect: Used to read/write health data on Android with your permission. (Privacy Policy)

AI & Backend Services:

• CalcEat Backend API & AI: Our core server (built on Node.js/Express) processes your account data, meal entries, and food images for nutritional analysis.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

You also have the following rights to control your data:

• Account Deletion: You can request the deletion of your account and all associated User Provided Data at any time. The primary way to do this is by using the "Delete Account" feature, which can be found in your account settings within the Application.
• Health Data: You can manage or revoke data-sharing permissions for Apple HealthKit and Google Health Connect at any time through your device's settings.
• Notifications: You can manage push notification preferences within the Application's settings or through your device's notification settings.
• Ad Tracking: On iOS devices, you can manage permissions for ad tracking via the App Tracking Transparency (ATT) prompt.

Data Retention and Deletion Policy

The Service Provider will retain User Provided data for as long as you use the Application and maintain an account, and for a reasonable time thereafter.

If you choose to delete your account, you can initiate this process directly from within the Application's settings. Upon receiving your request, we will proceed to delete all User Provided Data associated with your account from our servers. This process will be completed in a reasonable time, and we will notify you once the deletion is complete.

If you are unable to access the Application and would like to request account deletion, you may also contact us at alphabornapps@gmail.com, and we will respond in a reasonable time.

Please note that we may be required to retain certain information as required by law (e.g., for security, fraud prevention, or regulatory compliance) or for legitimate business purposes, such as aggregated, anonymized data for analytics.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (alphabornapps@gmail.com) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. These measures include:

• Using HTTPS/TLS encryption for all network communications.
• Employing secure authentication mechanisms, such as JWT (JSON Web Tokens) with automatic refresh.
• Storing sensitive data, such as authentication tokens, in encrypted storage on your device (utilizing native Keychain on iOS and Keystore on Android via Flutter Secure Storage).

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2025-10-21

Your Consent

By using the Application, you are consenting to our processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at alphabornapps@gmail.com.