Privacy Policy

1. Data Stored On Your Device

All of the personal tracking data you enter into the App — including food logs, weight, goals, and preferences — is stored locally on your device. We do not operate a server that stores this data in a database, and we cannot browse, export, or recover your food/weight history. If you delete the App or your device, this data is lost unless you have your own device backups enabled (such as an iCloud or iTunes backup).

We also use privacy-focused analytics software to help us understand how the App is used and to improve it over time. This is not used for advertising, is not sold, and is not used for any financial purpose — it's used only to help us make the App better. See Section 2 below for more detail.

2. Product Analytics, Session Replay, and Error Tracking

We use PostHog, a product analytics service, to help us understand how the App is used, identify bugs, and improve the product. PostHog is configured to store data exclusively on EU servers (Frankfurt, Germany).

This includes three types of data:

• Usage analytics: which screens you view and app open/close events, associated with an anonymous, device-generated identifier (not your name, email, or App Store account).

• Session replay: visual recordings of your on-screen activity within the App, used to diagnose bugs and understand user experience. PostHog masks text and images in these recordings by default, replacing on-screen text (such as calorie counts, weight entries, and food names) and images with placeholders before anything leaves your device.

• Error and crash reports: technical diagnostic information (device model, OS version, app version, and stack traces) captured automatically when the App crashes or encounters an unexpected error.

This data is associated only with an anonymous identifier generated by PostHog on your device — we do not link it to your name, email address, or any account, because CalorieKit does not have user accounts. PostHog acts as our data processor for this purpose. You can review PostHog's own privacy practices at posthog.com/privacy.

3. Data Processed for Subscriptions

To offer optional auto-renewing subscriptions, the App uses RevenueCat, Inc. as a subscription management and payments infrastructure provider. When you make or manage a purchase, RevenueCat processes information such as an anonymous app user identifier, your device's App Store transaction and receipt data, subscription status, and purchase history, on our behalf.

This information is used solely to validate purchases, manage your subscription entitlements, and provide customer support related to billing. RevenueCat acts as our data processor for this purpose. You can review RevenueCat's own privacy practices at revenuecat.com/privacy.

Your purchases are made through the Apple App Store, and Apple separately processes payment information (such as your Apple ID and payment method) in accordance with Apple's own privacy policy. We do not receive or store your payment card details.

4. What We Do Not Collect

We do not collect your name, email address, contact list, precise location, or photos on our servers, because we do not operate servers for that purpose. We do not require you to create an account to use the App.

5. Legal Basis and Your Rights (EEA/UK Users)

Where applicable data protection law (such as the GDPR) applies, our processing of subscription-related data described in Section 3 is based on the necessity to perform our contract with you. Our use of product analytics, session replay, and error tracking as described in Section 2 is based on our legitimate interest in maintaining, debugging, and improving the App.

You have the right to request access to, correction of, or deletion of any personal data processed on our behalf by RevenueCat or PostHog, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. Because your tracking data never leaves your device, most of your personal information can simply be deleted by removing the App. Note that PostHog data is tied to an anonymous, device-generated identifier rather than an account, so we may not always be able to locate specific records from a request alone. To exercise your rights, contact us at timpelser@outlook.com.

6. International Data Transfers

RevenueCat may process data on servers located outside your country of residence, including in the United States. Where required, such transfers are safeguarded by appropriate mechanisms, such as Standard Contractual Clauses, as implemented by RevenueCat. PostHog data is processed on servers located in the EU (Frankfurt, Germany) and is not transferred outside the EU by us.

7. Data Retention

Subscription and transaction data processed via RevenueCat is retained for as long as needed to manage your subscription, comply with legal and tax obligations, and resolve billing disputes. Analytics, session replay, and error data processed via PostHog is retained in line with our PostHog project's data retention settings. Data stored locally on your device remains there until you delete it or uninstall the App.

8. Children's Privacy

CalorieKit is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us through a third-party service such as RevenueCat, please contact us so we can address it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. If we make material changes, we will update the "Last updated" date above. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at timpelser@outlook.com.