Privacy Policy

1. Introduction

Welcome to Calzy ("we," "our," or "us"). Calzy is operated by Mitologic Sp. z o.o. (NIP: 5833537382), a company registered in Poland. Calzy is an AI-powered calorie tracking application designed to help you monitor your nutritional intake and achieve your health goals. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. By using Calzy, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.

2. Information We Collect

2.1 Account Information

When you create an account using Sign in with Apple or Google Sign-In, we collect:

• Email address (provided by Apple or Google)
• Name (if provided during sign-in)
• Unique user identifier

2.2 Profile Information

To personalize your experience and calculate nutritional goals, you may provide:

• First name and last name
• Date of birth
• Gender
• Height
• Current weight and goal weight
• Activity level
• Dietary preferences (classic, vegetarian, vegan, pescatarian)

2.3 Health and Fitness Data

We collect health-related information to provide our services:

• Weight measurements and history
• Daily calorie, protein, carbohydrate, and fat intake
• Water consumption
• Nutritional goals and progress
• Streak data (consecutive days of logging)

2.4 Food Logging Data

When you log meals, we collect:

• Food entries with nutritional information (calories, protein, carbs, fat, fiber, sugar, sodium)
• Meal type (breakfast, lunch, dinner, snack)
• Timestamps of entries
• Notes you add to entries
• Photos of meals (if you choose to use the AI photo analysis feature)
• Saved foods and recipes for quick logging

2.5 Apple HealthKit Data

With your explicit permission, Calzy integrates with Apple HealthKit to read and write the following data types:

• Dietary energy consumed
• Dietary protein, carbohydrates, and fat
• Step count
• Active energy burned

HealthKit data is stored locally on your device and is only synced to our servers if you enable cloud sync. You can revoke HealthKit access at any time through your device's Settings app.

2.6 Progress Photos

If you choose to use the progress photo feature, photos you take are stored locally on your device and optionally synced to secure cloud storage for backup purposes.

2.7 Usage Data

We automatically collect certain information about how you use the app:

• App interactions and feature usage
• Onboarding completion status
• Subscription status

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Calzy service
• Calculate personalized nutritional goals based on your profile
• Analyze meal photos using AI to estimate nutritional content
• Sync your data across multiple devices
• Track your progress toward health goals
• Send you streak reminders and notifications (if enabled)
• Process subscription payments through Apple App Store
• Provide customer support
• Improve our AI analysis accuracy

4. Third-Party Services

We use trusted third-party services to provide Calzy. These services have their own privacy policies governing the use of your information:

4.1 Supabase

We use Supabase for user authentication, database storage, and file storage. Your account data, food entries, and synced photos are stored on Supabase servers. Supabase employs industry-standard security measures including encryption at rest and in transit.

4.2 RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes your subscription status and purchase history. Payment information is handled directly by Apple and is not accessible to us.

4.3 AI Services (OpenRouter / Google Gemini)

When you use the photo analysis feature, your meal photos are sent to AI services (currently Google Gemini via OpenRouter) to analyze and estimate nutritional content. These images are processed for analysis purposes and are not stored permanently by these services.

4.4 Apple Sign-In / Google Sign-In

We use Apple and Google authentication services. These services provide us with basic profile information you authorize during sign-in. We do not have access to your Apple ID or Google account passwords.

4.5 Open Food Facts

We use the Open Food Facts database for product lookups by barcode and food searches. Search queries are sent to their servers but are not associated with your identity.

5. Data Storage and Security

5.1 Local Storage

Your data is stored locally on your device using Apple's SwiftData framework. This allows the app to function offline and provides fast access to your information.

5.2 Cloud Storage

When you sign in with an account, your data is synchronized to secure cloud servers (Supabase) to enable backup and multi-device access. Cloud data is:

• Encrypted in transit using TLS/SSL
• Stored with row-level security ensuring only you can access your data
• Backed up regularly to prevent data loss

5.3 Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data will be permanently removed from our servers within 30 days.

6. Your Rights and Choices

6.1 Access Your Data

You can view all your data within the Calzy app at any time, including your profile, food entries, weight history, and progress photos.

6.2 Delete Your Data

You can delete your account and all associated data from within the app settings. This action is permanent and cannot be undone. To delete your account:

1. Open Calzy and go to Settings
2. Scroll down and tap "Delete Account"
3. Confirm the deletion

6.3 Manage Notifications

You can enable or disable push notifications and reminders in the app settings or through your device's system settings.

6.4 HealthKit Permissions

You can manage HealthKit permissions at any time through your device's Settings > Privacy > Health > Calzy.

6.5 Data Portability

If you wish to export your data, please contact us at support@calzy-app.com and we will provide your data in a machine-readable format.

7. Children's Privacy

Calzy is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@calzy-app.com, and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using Calzy, you consent to the transfer of your information to these countries.

9. Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Mitologic Sp. z o.o. is the data controller responsible for your personal data.

9.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with the Calzy service
• Legitimate Interests: Processing for service improvement and security
• Consent: Processing of health data and HealthKit integration (you can withdraw consent at any time)

9.2 Your GDPR Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time for consent-based processing

9.3 Data Protection Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

9.4 International Transfers

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. Your Rights Under CCPA (California)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

10.1 Your California Privacy Rights

You have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt out of the sale or sharing of personal information
• Non-Discrimination: Not be discriminated against for exercising your rights

10.2 Sale of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Your data is used solely to provide and improve the Calzy service.

10.3 Sensitive Personal Information

We collect sensitive personal information (health data) only with your explicit consent and solely for the purpose of providing nutrition tracking services. We do not use sensitive personal information for purposes other than those disclosed.

10.4 Exercising Your Rights

To exercise any of these rights, please contact us at support@calzy-app.com. We will respond to your request within 45 days. You may also delete your account directly within the app.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: