Privacy Policy.

01Scope

This policy applies to the CalPicture iPhone app, its Apple Watch app and the calpicture.com website. Apple Health, the App Store and the third-party services we use have their own privacy terms.

02Information kept on your iPhone

Your meal records are stored on your iPhone: photos, meal names, dates, portions, nutrition estimates, notes and edit history, together with your goals, body details such as weight and age, and other settings. CalPicture does not sync these records with iCloud. Conversations with the AI assistant are also kept only on your iPhone. The Apple Watch app gets its data directly from your iPhone.

03Account information

Friends, challenges and saved meals require an account created with Sign in with Apple. We store the account identifier from Apple and, if you share them, your name and email address (which may be an Apple relay address); the username, avatar, friend code and privacy settings you choose, such as whether others can find you or send you friend requests; and your sign-in sessions.

When you upload an avatar, the image is sent to Google's AI service to check that it is suitable to show to other users.

04Friends, sharing and challenges

Friendships, friend requests, blocks and reports are stored on our servers.

When you share a meal with friends, its content and photos are encrypted on your iPhone before upload, and only you and the friends you choose can decrypt them. Our servers can see who sent the share, who received it, when, and its size, but not its content. A friend who receives a meal sets their own portion first; nothing is added to their records until they save it.

Saved meals store food names, portions and nutrition. They do not include photos.

While you take part in a challenge, including a personal challenge, the app uploads your daily calories eaten, calories burned, net calories, whether you worked out, the nutrient values the challenge tracks and the estimated weight change, so results and badges can be calculated. In a team challenge, what other members can see depends on the sharing choices you make when you join. If you choose to share what you ate, that day's food names and the estimated calories of each meal are also uploaded.

Badges, coins, daily check-ins and notifications are stored on our servers.

05Information sent to AI

CalPicture's AI features use Google's Gemini API. Requests are forwarded through our servers, which run on Cloudflare. Content is sent in these cases:

Food and nutrition analysis: the photos you choose and the descriptions, notes or corrections you write. AI colour grading and AI retouch: the photo and your editing request. AI assistant: your messages, recent conversation, and that day's meals, health summary and challenges. Next-meal suggestions: that day's meals, what is left of your targets and the challenge you are following. Share images: the meal's photo and food list, so a new photo of the same food can be made; the result is then compared with your original photo to check that no food was added or removed. The share images you make are kept on your iPhone. Weekly report: when you tap to generate it, that week's daily calories and nutrients, energy burned, food names, meal times and challenges. Avatar check: the avatar you upload. Some notes and retouch requests are first checked by AI to make sure they can be handled.

Our servers do not store these photos or texts. For each request we record only the feature, time, number of images, billing usage, whether it succeeded, your account or installation identifier, and the country or region inferred from your network address, for allowances, billing and abuse prevention. CalPicture does not use this content to train models. Google processes these requests under its terms for the paid API, including limited retention for safety, abuse prevention and legal compliance.

06Apple Health

With your permission, the app reads resting energy, active energy and workouts to calculate how much energy you used each day. If you also allow writing, each meal you save writes its energy, protein, carbohydrates, fat and sugar to Apple Health; when you delete or change the meal, the app tries to remove the related data.

When you take part in a challenge, the daily energy burned calculated from Apple Health is uploaded as part of your challenge record (see section 4). Apple Health data is not used for advertising and is not sold. You can change these permissions at any time in the Health app or iPhone Settings.

07Service, security and purchase information

To manage allowances and credits, keep the service secure and understand how features are used, the app sends a hashed installation identifier, the app version, the platform, a small number of usage events (such as opening the app, a successful analysis or a completed purchase) and a device integrity check provided by Apple. Push notifications need your device's push token and language setting.

Subscriptions and credit purchases are processed by Apple. We receive the transaction and product status. We do not receive your payment card details.

08Who can see your information

Your friends and challenge members see what is described in section 4, according to your sharing choices. Other users can find you by username or friend code and see your username and avatar; you can turn off being found by search. Our staff can view account details and related records when handling reports, support requests and account issues.

Our service providers are Cloudflare (servers and storage), Google (AI processing) and Apple (sign-in, purchases and push notifications). We do not sell your personal information and the app shows no advertising.

09Where information is processed

Our servers and storage are provided by Cloudflare and AI processing by Google, so your information may be processed outside the country or region where you live.

10Retention and deletion

Deleting a meal or clearing local data in the app removes it from your iPhone. Deleting the app also removes the records stored on your iPhone.

When you delete your account in the app's Settings, we delete your account details, avatar, friendships, shares, saved meals, challenge records, badges, notifications and device records from our servers. Usage statistics keep only counts that are no longer linked to your account. The username you have at the time of deletion stays reserved so that no one else can register it.

Purchase, refund, credit and coin records are kept as required for accounting and legal purposes. AI request records, which contain no photos or text, are kept for billing and abuse prevention.

Depending on where you live, you may have the right to access, correct or delete your personal information. Email us and we will handle the request after verifying your identity.

11Children

CalPicture is not intended for children under 13. Users aged 13 to 17 should use the app only with the consent of a parent or guardian. If we learn that we have collected information from a child under 13, we will delete it.

12This website

calpicture.com does not use cookies or advertising, and has no account or sign-in. Your browser remembers the language and light or dark appearance you choose; this stays on your device. The site loads fonts from Google Fonts and animation code from cdnjs (run by Cloudflare) and unpkg, so these providers receive your network address and basic browser information when the files load. The site is hosted on Cloudflare, which may keep standard server logs for security.

If you join the waitlist, we store the email address you enter, the language the site was shown in, which button you used, the time, the country or region inferred from your network address, and a shortened one-way hash of that address used only to limit repeated sign-ups. We use your email only to tell you when CalPicture is available on the App Store and record whether we have sent that email. The list is stored on our Cloudflare servers, is not shared with anyone else and is not used for advertising. Your browser also remembers the email you joined with, so the site can show that you are already on the list; this stays on your device. To be removed from the list, email support@calpicture.com.

To count how many people visit, our own server records each visit after the page has been on screen for a few seconds or you scroll or tap: the page path, the site that linked you here, the language, the time on the page and how far you scrolled, the type of device and the country or region inferred from your network address. Your network address is not stored. Visits on the same day are grouped by a code made from your network address and browser with a secret key; the code changes every day and cannot be turned back into your address or used to follow you across days. Nothing is stored on your device for this, and the data is not shared or used for advertising.

13AI-generated images on this website

Unless a page says otherwise, the lifestyle and portrait images on this website are AI-generated illustrations. The people and scenes are fictional. They are not CalPicture users, customer reviews, endorsements or records of real events. Any resemblance to a real person is unintentional. If we later use a real person or their likeness, the page will say so, and this notice does not replace their consent.

14Changes and contact

When the app or the way we handle information changes, we will update this policy and post the new effective date here. For significant changes, the app will ask you to agree again. For privacy questions or requests, email support@calpicture.com.