Calibreta privacy policy

Last updated 4 November 2026

Calibreta is a food and weight tracking app. This page says what the app collects, where it goes, and how to delete it. It is written to match what the app actually does; if we change the app, we change this page.

In short. We store what you log so the app can show it back to you. Meal descriptions, meal photos and nutrition-label photos are sent to OpenAI to be turned into food entries; the photos are not stored by us. Barcodes are sent to Open Food Facts. We do not show ads, we do not sell data, and the app contains no analytics or advertising trackers. You can delete everything from inside the app.

What we collect

WhatWhy
Your profile — sex, birth year, height, weight, goal weight, activity level, goal, diet preference, country, language and units To calculate your calorie and protein targets and tailor meal plans
Food logs — the food name, amount, meal, date, calories and macros, and the text you typed or spoke to create the entry; plus any favourites, saved meals, custom foods and recipes you keep To show your diary and totals, and to log repeat foods faster
Weight, water and exercise logs To show your progress and adjust your targets
Meal plans and weekly summaries generated for you So you can open them again
Nutrition labels you photograph — the barcode, the values read from the label, the values you confirm, and a fingerprint (hash) of the photo. Not the photo itself. The product you confirm is saved as your own food To show that product's numbers when you scan it again, and to tell a re-sent photo from a new one
Estimate reports — when you tap "Report this estimate": the item, the reason you pick and any note you write To find and correct wrong estimates
Email address and password, only if you create an account. The password is stored as a hash; we cannot read it To sign you in on another device
An anonymous account ID, created on first launch if you do not make an accountTo keep your logs yours without asking for an email
Usage counts — how many AI actions you used today, and your trial or subscription statusTo apply the free and trial limits
Friends, if you use that feature — your handle, display name, friend connections and blocksTo connect you with people you choose
Server logs — request time, the barcode scanned, errors To find and fix faults
Food names we could not match, without your account ID To add missing foods to the database

What stays on your phone

What we do not collect

We do not collect your precise location, contacts, advertising ID, or browsing activity. Your country is taken from your phone's region setting or chosen by you.

Who else receives data

ServiceWhat it receives
OpenAIThe meal description you type or dictate; a meal photo when you log by photo; a nutrition-label photo when you photograph a label; and, for the assistant, meal plans and weekly summaries, your goal, targets, weight and recent food logs. We do not send your name, email or account ID. We do not keep any photo after the reply. OpenAI states that it does not use API data to train its models and may retain it for up to 30 days to monitor for abuse.
Open Food FactsThe barcode number you scan, to look up the product. Nothing about you.
SupabaseHosts our database and sign-in. Everything listed under "What we collect" is stored here.
RenderHosts our server. Requests pass through it and its logs hold the server log lines described above.
Google, through your phoneYour voice while you dictate, if you use the microphone: it goes to your phone's speech service (Google's on most Android phones, under Google's own terms), which may process it on Google's servers; we receive only the text. Barcode-scanner usage statistics (see above). If the app asks you to rate it, the rating is handled by Google Play.

We do not sell your data or share it for advertising.

How long we keep it

Until you delete it. Deleting your account removes your profile, every food, weight, water and exercise log, your favourites, saved meals, custom foods and recipes, your plans and summaries, usage counts and friend connections, permanently. Server logs expire on the hosting provider's schedule.

If you used the app without creating an account and then uninstall it or clear its data, the anonymous ID is lost with it and we can no longer tell which logs were yours. Delete your account from inside the app first if you want them removed.

Deleting your data

In the app: Settings → Delete account. Details and an email fallback are on the account deletion page.

Security

Data travels over HTTPS. Database rules restrict each account to its own rows. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

Not medical advice

Calibreta gives estimates for general wellness. It does not diagnose or treat any condition. Talk to a doctor or dietitian before making significant changes to your diet, particularly if you are pregnant or have a medical condition.

Children

Calibreta is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes we will update the date at the top, and tell you in the app when the change is significant.

Contact

Questions or requests about your data: afitscan@gmail.com