What we collect

Account: your email address and password (passwords are handled by our authentication provider and never stored by us in readable form).
Profile & goals: the details you enter during onboarding — name, biological sex, date of birth, height, weight, activity level, and goal — used only to calculate your calorie and macro targets.
Health & wellness logs: the meals you log (including food photos), and your water, weight, BMI, and mood entries.
Product usage: which parts of the app you use and how they perform, if you leave analytics on. See “Analytics” below for exactly what these carry.
Communication preferences: whether you agreed to receive product emails, and when you agreed, so we can honour and evidence that choice.

How your meal photos are used

When you scan a meal, the photo is sent to an AI service to identify the foods and estimate portions. We route these requests through OpenRouter, a gateway that passes them to the AI model providers we use — currently Google and OpenAI. The gateway is configured to disable prompt logging and to use providers that do not train on your content.

Photos are stored in your private, access-controlled account storage so your diary shows them across your devices. They are never public and no other user can reach them.

We use your scan data to evaluate and improve recognition accuracy only if you explicitly turn on “Improve AI with my scans”. It is off unless you choose it, we ask you once during onboarding, and you can change your answer any time in Profile → Privacy controls → Data controls. Turning it off stops that use going forward.

Analytics

We use PostHog to understand how the app is used — for example that a scan completed, how long it took, or that onboarding finished. PostHog processes this on our behalf on infrastructure in the United States.

These events are tied to your account identifier. They never carry your health or wellness data, meals, food names, notes, photos, or email. We do not use advertising identifiers and we do not track you across other apps or websites.

Analytics is on by default; you can turn it off at any time in Profile → Privacy controls → Data controls.

Our legal bases (EEA/UK)

Running the app for you — your account, profile, targets, diary, wellness logs and subscription: performance of our contract with you (Article 6(1)(b)).
Your health and wellness data — weight, BMI, mood, and the meals you log — is special category data. We process it on the basis of your explicit consent (Article 9(2)(a)), which you give when you create an account and accept these terms, and which you can withdraw at any time by deleting your account.
Using your scans to improve food recognition: your explicit consent (Articles 6(1)(a) and 9(2)(a)), given on the onboarding screen that asks, and withdrawable at any time in Profile → Privacy controls → Data controls.
Product analytics: our legitimate interest in operating and improving the app (Article 6(1)(f)). We rely on this only because these events carry no health data and no other personal content — see “Analytics” above. You can turn analytics off at any time, and you may object to this processing by contacting us.
Product emails: your consent (Article 6(1)(a)), given by ticking the box at sign-up and withdrawable from any such email.
Keeping the service secure and preventing abuse — for example the daily scan limit: our legitimate interest in protecting the service (Article 6(1)(f)).

International transfers

We are based in the United States and our service providers process data there. If you use Calvore from the EEA, the UK or Switzerland, your data is transferred to the United States.

Our hosting, authentication, storage, subscription and analytics providers each process your data under the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant, alongside the technical measures described in "How we protect your data".

The AI gateway that performs food recognition is configured for zero data retention: it does not store the photo you send, and it routes only to model providers that do not retain or train on it. You can request details of the safeguards for any specific provider by contacting us.

Emails & notifications

Service emails: we send the emails needed to operate your account — confirming your address, resetting your password, and important changes to the service. These are not marketing and you cannot opt out of them while you have an account.

Product emails: separate and entirely optional. We send them only if you opted in, we ask unticked so silence is never taken as a yes, and every one carries a one-click unsubscribe. Opting out is immediate and never affects your access to the app.

Notifications: reminders for meals, water and weigh-ins are generated on your device and scheduled by your operating system. They are not sent from our servers and reveal nothing to us about whether you saw or acted on them. You control them in your device settings and in Profile → Reminders.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either.

We share data only with service providers that run the app on our behalf — hosting and database, authentication, storage, the AI recognition gateway, subscription management, and (if enabled) analytics — each acting under contract and only as needed to provide the service.

Subscription management is handled by RevenueCat. It processes your account and subscription information on our behalf, so the app knows whether your subscription is active and so we can answer questions about a charge. It does not receive your health data, your meals, or your photos.

Your choices & rights

Access & export: your data is visible in the app on your device. For a machine-readable copy, email [email protected] and we will send one within 30 days.
Analytics opt-out: toggle product analytics off in Profile → Privacy controls → Data controls.
Scan-training opt-out: toggle “Improve AI with my scans” off in Profile → Privacy controls → Data controls.
Product emails: unsubscribe from any such email, or contact us — service emails about your account continue either way.
Delete your account: Account → Delete account removes your data from this device immediately and schedules permanent deletion of your cloud data after a 30-day recovery window. Signing back in during that window restores it. You can also request deletion without the app — see Delete your account.
Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent at any time without affecting what we did before you withdrew it. Contact [email protected] to exercise them — we will not charge you or degrade your service for asking.
If you are in the EEA or the UK, you also have the right to complain to your local data protection authority. We would rather you came to us first so we can put it right.

How long we keep it

Account, profile, diary, wellness logs and meal photos: kept while your account is active. When you delete your account, this data is permanently erased after the 30-day recovery window described above.
Scan records used to evaluate recognition accuracy: erased with the rest of your account data on deletion.
Analytics events: automatically deleted after 30 days. They are not erased the instant you delete your account, because they are stored separately from it — but they are linked only to an account identifier, never to your name, email, or any health data, and they age out within a month either way. If you want them removed sooner, email us.
Records we must keep for legal reasons — such as proof of your consent choices and purchase records required for tax and accounting — are kept for as long as the relevant law requires, and no longer.

How we protect your data

All traffic between the app and our servers is encrypted in transit, and your data is encrypted at rest by our hosting provider.

Every record is scoped to your account at the database level, so one account cannot read or modify another’s. Meal photos live in private storage reachable only through short-lived links issued to you.

No system is perfectly secure, but we work to protect your data and will notify you and the relevant regulator if a breach affecting it occurs, as the law requires.

Washington & Nevada residents

Washington’s My Health My Data Act and Nevada’s SB 370 give you specific rights over “consumer health data” — which includes your weight, BMI, meals, meal photos, wellness logs and health goals.

Those rights, the categories we collect, and everyone who receives them are set out in our separate Consumer Health Data Privacy Policy.

In short: we do not sell it, we never use it for advertising, and you can access, delete, or withdraw your consent to it at any time by emailing [email protected] or by deleting your account.

Age requirement

Calvore is intended for adults and is not directed to anyone under 18. You must be at least 18 years old to create an account, and we do not knowingly collect data from anyone younger.

Changes & contact

We’ll update this policy as the app evolves and revise the date above. Material changes will be surfaced in-app.

Questions or requests: [email protected]. Data controller: DA Digital LLC.