Back to home

Privacy policy

Last updated: July 2026 · Version 1.1

Calobee is committed to protecting your privacy. This policy explains in full how your data is collected, used, and protected. Please read it carefully.

Not medical software. Calobee provides general nutritional information for tracking purposes only. It is not a medical device, does not provide medical advice, and should not replace professional dietary or medical guidance.

1. Who we are

Calobee ("we", "our", "us") is a personal nutrition and calorie tracking application developed for informational and lifestyle purposes. Our contact address for privacy matters is: support@calobee.com

For users in the European Economic Area (EEA), Calobee acts as the data controller as defined under the General Data Protection Regulation (GDPR).

2. What data we collect

2.1 Data you provide directly

  • Full name and display name
  • Email address
  • Date of birth
  • Biological sex
  • Height and body weight
  • Weight goal and target weight
  • Activity level
  • Dietary preferences and food restrictions
  • Foods and meals you log, including estimated quantities and times
  • Motivation text and personal notes

2.2 Data generated automatically

  • App usage events (screens visited, features used) — only if analytics is enabled
  • Device type, operating system version and app version — for crash reporting only
  • Timestamps of log entries and account activity

2.3 Photos and camera

If you use the food photo or nutrition-label recognition feature, the image is sent to a third-party AI analysis provider to identify the food. This analysis copy is processed in real time and is not retained by that provider. If you choose to save the meal, the photo is stored on your device and, if you have an account, kept in encrypted cloud backup so it can be restored on a new device. Your photos are never sold, shared with advertisers, or used to train AI models without your explicit consent.

2.4 Health and fitness data

If you connect Apple Health, the App reads — only with your permission, and only the categories you allow — data such as workouts, active energy, body weight and steps, to include them in your daily totals. This data is used solely to provide the App's features. It is never used for advertising and never shared with third parties, and you can revoke access at any time in iOS Settings or Apple Health.

2.5 Data we do NOT collect

  • We do not collect payment or financial data.
  • We do not access your contacts, messages or other apps.
  • We do not track your location.
  • We do not read your clipboard content.

3. Legal basis for processing (GDPR)

We process your personal data on the following legal grounds:

  • Contract performance: to provide the core functionality of the App (food logging, calorie calculation).
  • Legitimate interest: to improve the App through anonymous crash reports and usage analytics (where enabled).
  • Consent: for optional features such as personalised recommendations and analytics. You can withdraw consent at any time via Privacy settings.

4. How we use your data

Your data is used exclusively to:

  • Calculate your daily calorie goal using the Mifflin-St Jeor formula based on your personal metrics.
  • Display your food log, nutritional summaries, and progress over time.
  • Personalise goal suggestions and dietary insights within the App.
  • Synchronise your data across devices when you are signed in.
  • Diagnose technical issues and improve App stability (anonymous data only, if analytics is enabled).

We do not use your data for advertising. We do not build advertising profiles. We do not sell, rent or trade your personal data to any third party.

5. Data storage and security

5.1 Local storage

All your food logs, profile data and preferences are stored locally on your device using encrypted device storage. This data is accessible only to the Calobee app.

5.2 Cloud storage

If you create an account, your data is synchronised with our secure servers to enable multi-device access and data backup. All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256.

5.3 Security measures

  • JWT-based authentication with token refresh and expiry.
  • Row-level access controls so users can only access their own data.
  • Regular security reviews and dependency updates.

5.4 Data breach

In the event of a personal data breach, we will notify affected users and, where required by law, the relevant supervisory authority, within 72 hours of becoming aware of the breach.

6. Data sharing and third parties

We only share data with third-party services where strictly necessary to operate the App. All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

Categories of processors we use

  • AI food and label recognition: the food photo or label image you submit is sent to a third-party AI analysis provider solely to identify the food. No profile data is shared, and the image is not retained by the provider after analysis.
  • Nutrition and barcode databases: the food name or barcode you enter is sent to third-party nutrition-data providers to retrieve nutritional values. No personal data is shared.
  • Hosting, cloud storage and backup: our servers and your encrypted data and photo backups run on secure third-party cloud infrastructure that processes data only on our instructions.
  • Subscription management: to offer and validate optional in-app subscriptions, purchase and device identifiers are processed by a third-party subscription platform. Your payment details are handled by Apple and are never received by us.
  • Transactional email: if you request a password reset, your email address is processed by an email delivery service solely to send that message.

We will never share your data with law enforcement unless required by a valid legal order. Where legally permitted, we will notify you before complying with such requests.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all associated personal data is permanently deleted from our servers within 30 days. Local data stored on your device is removed when you uninstall the App.

Anonymous, aggregated analytics data (if enabled) may be retained for up to 24 months for the purpose of App improvement.

8. Your rights under GDPR

If you are located in the EEA, you have the following rights:

  • Right of access: you can request a copy of all personal data we hold about you.
  • Right to rectification: you can correct inaccurate data at any time via your profile settings.
  • Right to erasure ("right to be forgotten"): you can delete your account and all data via Manage Account.
  • Right to restriction: you can request we restrict processing of your data in certain circumstances.
  • Right to data portability: you can request an export of your data in a machine-readable format.
  • Right to object: you can object to processing based on legitimate interest at any time.
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at support@calobee.com. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority.

9. Children's privacy

Calobee is not directed at children under the age of 13 (or 16 in the EEA where applicable). We do not knowingly collect personal data from children. If we become aware that a child under the applicable age has provided us with personal data, we will delete it immediately. Parents or guardians who believe their child has submitted personal data should contact us at support@calobee.com.

10. International data transfers

Your data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA — for example to AI analysis or cloud storage providers — we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Automated decision-making

Calobee uses automated calculations (such as the Mifflin-St Jeor formula) to estimate your calorie needs. These calculations are based solely on the data you provide and are presented as estimates only. They do not produce legal effects or similarly significant consequences. You are free to manually adjust any suggested goals.

12. Cookies and tracking

The mobile App does not use browser cookies. The App may use local device storage (AsyncStorage / SQLite) to store your preferences and data locally. This storage is entirely under your control and cannot be accessed by third parties.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notice or, where required by law, request your renewed consent. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the App after notification of changes constitutes acceptance of the updated policy.

14. Contact and complaints

For privacy-related questions, data requests, or complaints, please contact us:

  • Email: support@calobee.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or the supervisory authority in your country of residence.