Effective Date: October 9, 2026
Last Updated: October 11, 2026
App Name: CalorieDeck
Contact / Developer: CalorieDeck Team (mudit292005@gmail.com)
CalorieDeck ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when using the CalorieDeck mobile application and services.
Profile & Health Demographics: Age, biological sex, height, weight, target goal weight, weekly pace, and activity level.
Dietary & Nutrition Logs: Scanned food barcodes, meals logged via camera AI or text descriptions, water intake glasses, and weigh-in history.
Account Credentials: Email address and name via Google Sign-In or Supabase Auth.
City / Community Selection: Selected city name for local fitness and walking meetups (Beacons). We do not perform continuous background GPS location tracking.
Health Connect Activity Data (Optional): If you choose to connect Google Health Connect, we read your daily step count, active calories burned, total calories burned, and weight records to adjust your daily caloric allowance.
Camera & Photos: Used exclusively when you take a photo of a meal or select an existing photo for AI nutritional analysis.
App Usage Analytics (PostHog): Which screens you view and which features you use (for example, that a meal was logged), linked to your account ID and email, so we can find and fix problems and improve the app.
Advertising Measurement (Google Analytics for Firebase): A small set of in-app events (sign-up, finishing onboarding, logging your first meal, and subscription events such as starting a trial or purchasing) together with an app instance ID and basic device information. This lets us measure which of our ads lead to people using the app. No health, body or food-log data is sent to Firebase.
Push Notification Token: If you allow notifications, a device token and your chosen city, used to send reminders and community meetup updates.
We use your data solely to provide and improve the CalorieDeck service:
Calculating personalized basal metabolic rate (BMR), total daily energy expenditure (TDEE), and daily calorie/macronutrient targets.
Analyzing meal photos using AI computer vision.
Synchronizing wearable fitness activity through Google Health Connect.
Allowing you to discover and join community walk and fitness meetups in your city.
Understanding how the app is used and measuring the effectiveness of our advertising.
CalorieDeck's use of information received from Google Health Connect adheres to the Health Connect Permissions Policy, including the Limited Use requirements:
We do not sell, rent, or trade your health data to advertising platforms, data brokers, or information resellers.
We do not use health data for targeted advertising.
We only transfer health data to provide or improve our core calorie and activity tracking features.
We do not sell your personal data. We only share information with trusted infrastructure providers required to operate the app:
Supabase: Cloud database and authentication.
OpenRouter / Google Gemini: AI computer vision model for meal nutritional breakdown.
RevenueCat / Google Play: Secure in-app purchase and subscription verification. RevenueCat also forwards subscription events (trial started, purchase) to Google Analytics for Firebase for ad measurement.
PostHog: Product analytics and diagnostics.
Google Analytics for Firebase / Google Ads: Measurement of ad performance using the limited events described in Section 1. You can reset your advertising ID or opt out of ads personalization in your device's Google settings.
CalorieDeck retains your personal information only for as long as necessary to provide the services described in this policy, comply with our legal obligations, and maintain operational stability:
Account & Profile Data: Your account credentials, demographic details (age, biological sex, height, current and target weight), and goal metrics are retained for as long as you maintain an active CalorieDeck account.
Nutrition, Food Logs & Weight History: Your daily meal entries, calorie/macronutrient logs, water intake, and weigh-in records are retained during the lifetime of your active account so you can review your long-term progress, trends, and milestone streaks. Accounts that remain inactive for more than twenty-four (24) consecutive months are scheduled for automatic data purging.
Meal Photos & AI Computer Vision: Photos taken or uploaded for AI nutritional analysis are transmitted securely over TLS/HTTPS, processed ephemerally in-memory to calculate calorie and macronutrient estimates, and are not permanently retained or stored on external AI model inference servers.
Google Health Connect Data: Step counts, active calories, and total calories burned retrieved from Health Connect are stored in encrypted form only while your account is active to adjust your daily energy expenditure. Health Connect data is never retained for advertising or sold to third parties, in strict compliance with the Google Health Connect Limited Use Policy.
Usage Analytics (PostHog): Usage and diagnostic events are retained for a rolling period of up to ninety (90) days, after which they are automatically deleted.
Advertising Measurement (Firebase): Event data is retained according to our Google Analytics data-retention setting (no longer than fourteen (14) months).
In full compliance with Google Play Developer Policies and global data privacy standards (GDPR, CCPA), you have the absolute right to request the permanent deletion of your account and all associated personal data at any time:
In-App Instant Deletion: Open CalorieDeck → Go to Settings → Scroll to Account & Cloud Sync → Tap "Delete Account & Purge Data". This immediately and permanently erases your user profile, demographic records, daily food logs, weight entries, community meetup beacons, and cloud credentials from our active database.
Web / Email Deletion Request: Alternatively, email us at mudit292005@gmail.com with the subject "Account Deletion Request" from your registered email address. All user records will be permanently and irreversibly purged from our servers within forty-eight (48) hours.
No Residual Retention: Upon completion of an account deletion request, we do not store, retain, or monetize any residual personal or health data.
All communications between the CalorieDeck app and our backend servers are secured using industry-standard HTTPS / TLS encryption in transit.
If you have any questions or concerns regarding this Privacy Policy or your data, please contact us at:
Email: mudit292005@gmail.com
Developer: CalorieDeck Team