Effective date: November 3, 2026
Caloist is a nutrition tracking app operated by Harsh Vardhan. This policy explains how we handle information when you use the app, caloist.com, or contact support.
Information you provide
- Account information: Firebase Authentication manages your account identifier and sign-in information. If your sign-in provider supplies a name or email address, we receive that information. Guest use also creates an account identifier; guest records are not anonymous to our systems.
- Nutrition and health records: We store the food, servings, calories, nutrients, water, weight, dates, nutrition targets and target weight you save, along with custom foods, favorites, recipes, meal plans, schedules, preferences and weekly reviews. These records are associated with your account in Firebase Firestore.
- Goal calculator: Age, sex, height, weight, activity level and goal inputs are used on your device to calculate targets. The calculator saves the resulting nutrition targets and target weight, rather than uploading all of these calculator inputs. Weight entries you separately log are stored as described above.
- Content you submit: We process meal descriptions, submitted voice transcripts, selected photos, recipe text or links, and meal-planning preferences to provide the features you request.
- Support: When you email us, we receive your email address and the message or attachments you choose to send, and use them to respond and resolve your request.
AI features and OpenAI
When you choose an AI feature, the relevant information passes through our server to OpenAI. The information depends on the feature:
- Food analysis: The meal description or submitted transcript, or a processed food or nutrition-label photo, plus your requested output language.
- Recipe import: Pasted recipe text, recipe content extracted from a link you submit, or a processed recipe photo.
- Meal planning: Calorie and protein targets, dietary preferences, foods to avoid, budget, cooking time and number of meals. A retry may include the previous generated plan and its nutrition totals.
- Weekly reviews: The date range, number of logged days, nutrition goals, daily calorie and protein totals, nutrient averages, and a summary of that week.
We do not automatically include your name, email address, account identifier or sign-in credentials in the content sent to OpenAI. Text and images you submit can nevertheless contain personal information. AI requests are authenticated by our server, and their results and request fingerprints are saved under your Caloist account; these features should not be considered anonymous.
Before sending photos to OpenAI, our server resizes and re-encodes them, removing embedded metadata such as EXIF location information. Visible personal information within the image is not removed. We do not save the original photo in our application database, but retain the generated result and a digital fingerprint used to recognize repeated requests.
OpenAI states that API inputs and outputs are not used to train its models by default, unless the API account opts into data sharing. OpenAI may retain content for processing and abuse monitoring, normally up to 30 days for abuse logs, with longer retention for legal or safety reasons. Its data controls and any applicable account settings govern this processing; this policy does not promise zero retention.
You can use manual food logging without using AI features. Only submit content you want processed for the requested feature.
Voice input and photos
Dictation uses your device’s speech recognition service, which may process microphone audio online under the platform provider’s terms. Caloist does not upload the raw dictation audio to our server or OpenAI. You can edit the recognized text before submitting it for AI analysis.
Camera, photo and speech permissions are optional. You can manage them in your device settings. Photos are sent for AI analysis when you submit them; allowing photo access does not upload your entire library.
Apple Health
With your permission, Caloist can read nutrition, water, weight and active-energy information from Apple Health and write nutrition, water and weight entries you log. We use this access for health displays and syncing your entries. Active-energy readings used in the dashboard and history stay on your device. Health records you save in Caloist are stored with your account as described above.
We do not use Apple Health information for advertising. You can change Health permissions in Apple Health or device settings. Revoking access does not itself delete records previously saved in Caloist or Apple Health.
Purchases, usage and diagnostics
Apple processes App Store payments. RevenueCat receives purchase and subscription records, entitlement status, and your Caloist account identifier to manage and restore access. We do not receive your full payment-card details.
Firebase Analytics collects app interactions, screens, session and device identifiers, app and operating-system information, and purchase-related events. IP addresses may be used to derive approximate location. Authentication services may also process IP addresses and device or SDK information for security. Caloist does not request precise device location.
Firebase Crashlytics and related Firebase services process crash reports, stack traces, device and app information, and diagnostic or session identifiers to help us troubleshoot. Our custom analytics events exclude meal text, photos, transcripts, recipes and health measurements; custom crash reports omit raw exception messages.
We use usage data to understand and improve the app, and diagnostics to maintain reliability. Account records are linked to your user identifier; analytics may be linked to an app installation or device even without a name or email. Caloist does not display advertising or implement cross-app advertising tracking.
Service providers and sharing
We use Firebase for authentication, cloud storage, analytics, diagnostics and website hosting; Apple for platform services and payments; RevenueCat for subscriptions; and OpenAI for the AI features described above. These providers process information needed for their services.
Food searches and barcode lookups send search terms or barcodes through our server to FatSecret, USDA FoodData Central or Open Food Facts, depending on the lookup. We do not attach your Caloist account identifier to these provider queries. Importing a recipe link causes our server to request the linked website.
Website hosting and other network services receive technical request information such as IP addresses, browser or device details, and requested URLs. Providers may process information in countries other than where you live under their applicable terms and privacy practices.
We may also disclose information when required by law or when necessary to address fraud, security incidents or threats to people’s safety.
Provider privacy information:
Retention and deletion
We keep account records and saved content so you can continue using them. You can delete entries in the app. The in-app account deletion option removes your authentication account and stored diary, custom foods, favorites, recipes, plans, schedules, weekly reviews and saved AI results.
Some service records are separate: AI usage counters used to enforce feature limits are not automatically removed by in-app account deletion. Provider transaction, security, analytics and diagnostic records may remain subject to the provider’s retention practices or legal requirements. Contact us for help with a broader deletion request.
Uninstalling Caloist does not delete your account or previously stored data. Account deletion does not cancel an App Store subscription or erase entries already written to Apple Health; manage those separately through Apple.
Your choices and privacy requests
You can choose manual logging, decline optional permissions, and edit or delete supported records in the app. Contact support@copyistai.com to request access, correction or deletion of your information, or to ask about portability, restrictions or objections where available under applicable law. We may need to verify your account before acting on a request. You may also contact your local privacy regulator.
Security and children
We use encrypted network connections, authentication and access controls to protect information. No system can guarantee absolute security.
Caloist is not intended for children under 13. We do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and remove it.
Changes and contact
We will post policy updates on this page and revise the effective date. For privacy questions or requests, contact Harsh Vardhan at support@copyistai.com.