Privacy policy
What we store, why we store it and how to delete it.
Last updated 15 October 2026
1 · What information do we store?
Account information. Your email address, name and a technical login ID. Clerk handles login and any password. If you sign in with Google, we receive your name and email from Google.
Food data. Meals you log: descriptions, calories, macros, your calorie goal, meal plans, favourite recipes and saved dishes. If you use the relevant features, we also store macro goals, report preferences, cookware and its weight, exercise entries (type, duration, start time and any calorie value you enter), custom foods, serving sizes and an import history (filename, time and row count; the file itself is not retained). If you enable water tracking, we store your water entries and the dashboard cards you have selected.
Foods you share. If you contribute a food for other users, we store its values and any packaging photo you include so an administrator can check them. If approved, other users can find the food but cannot see your name or email. You can withdraw the contribution and photo; they are also deleted with your account.
Reminders. If you allow app reminders, we store a technical device ID to deliver them. Reminders and the optional weekly-report notification contain no food or weight values. On logout, the app attempts to unregister the ID; a network failure may delay this. The ID is deleted with your account. After uninstallation, it is removed when the push service reports it as invalid.
Review invitations. When review invitations are enabled and you have logged meals on seven different days, the dashboard can invite you to review Calorie.one on Trustpilot. We store when the invitation appeared and whether you clicked, chose ‘Not now’ or ‘Do not ask again’, but not whether you wrote a review. Trustpilot is a separate service with its own privacy policy.
Visit statistics. We count page visits to understand what people read. We store your IP address, page path, visit time and whether the visit came from web, iOS or Android. This uses no analytics cookies and the information is not shared. One record is stored per IP address, page, platform and day, so repeat visits to the same page are not counted again. The basis is our legitimate interest in operating and improving the site (GDPR Article 6(1)(f)).
Retention. Visit records containing IP addresses are automatically deleted after 90 days. Completed days are aggregated into visitor and page-view counts that do not identify individuals. Account information, food data and coach messages are retained while you have an account, as they form the content of the service. Confirmed account deletion removes them from the active database. Older backups are described below.
Operational logs. We store technical errors, administrative events, and AI token counts and estimated costs. Logs do not contain AI prompts or unencrypted health values. Account deletion removes the link to your account and personal details in its events; usage totals and technical history are retained.
2 · Weight and journal — health data
Optional calculation profile: With your separate explicit consent, we store your age at calculation, equation variant, height, weight, activity level, goal adjustment and calculation date so you can calculate and reopen your calorie estimate. The profile is encrypted with user- and purpose-bound encryption. It is not sent to AI or used in admin statistics. It does not read weight history or create weight entries. You can edit, export and delete it under Weight → Calorie needs. Deletion or withdrawal removes the profile and its consent; an existing calorie goal remains as an ordinary setting. Account deletion and deletion of all health data also include the profile.
What we store. If you use weight tracking, we store your weight in kilograms and each measurement date. A weight plan also stores starting weight, target weight, target date and milestones, plus height and waist measurements if you enter them. The journal stores what you write or upload: daily notes, mood, motivation, mantra, custom measurements such as sleep, and private photos. Photos are resized and stored without location or camera metadata. If you separately choose to import weight from Apple Health or Health Connect, the source and source ID are also stored encrypted so later imports can update the same measurement. Weight is read only when you start the import. Body weight, body measurements and journal content are health data under GDPR Article 9. We process them only with your explicit consent under Article 9(2)(a). The feature is disabled until you consent.
Purpose. Only to show your own progress, plan, BMI, journal and an uncertain projection based on your measurements. Weight values and journal content are not used in the food coach or general statistics, and the app never changes your plan automatically. Administrators see only aggregate consent and measurement counts, without individual values.
Who can see it. Weight data and journal content are not displayed to administrators or sent to OpenAI or another AI model. Where sharing is available, you can choose to share a limited selection with a practitioner through time-limited access for the selected recipient's account. You can revoke access, although the recipient may have retained information already provided. Our database provider stores the encrypted form.
Security. Each measurement, journal entry and photo is encrypted with AES-256 before storage. The encryption key is kept outside the database and separately from database backups.
Retention. While your consent remains active. On withdrawal, confirmed server deletion removes your measurements, plan, body measurements, calculation profile and entire journal including photos from the active database. Confirmed account deletion does the same. Older backups may still contain the information; see backups below. We retain consent and withdrawal timestamps without weight values to document consent history.
Your choices. Under Settings → Health data, you can withdraw consent at any time and download measurements as JSON or CSV and the entire journal with photos as a ZIP file (GDPR Article 20, data portability).
Read more. The process from saving a value to encrypted storage, including who can see what, is explained on How we protect your weight data.
Health apps. In the native app, you can choose to retrieve workouts from Apple Health or Health Connect. Type, time, duration, source ID and any active energy are used in your exercise overview. You review and confirm the import first. Access can be removed in your phone's health settings. You can also choose to share a reviewed daily calorie total with the health app; this does not share weight, journal content or meal descriptions. Export occurs only after confirmation and must be updated after changes to your meals.
3 · How do we use AI?
When you analyse a meal using text or a photo, the content is sent to OpenAI to identify foods and quantities. Nutrient values are matched to the local USDA database where possible; AI estimates are labelled. Images are used for analysis. Do not submit images containing sensitive personal information. Searching the food database, repeating a meal, logging a saved dish and importing a file do not send content to AI.
4 · Where is your data stored?
In our database. We never sell your information. Services used to operate the app include Clerk for login (email and name), OpenAI for food analysis and the food coach (these features do not retrieve weight history or journal content), Google Firebase for native reminders (device ID and message text), Web3Forms for forwarding contact submissions (name, email and message), our email provider and database provider. Contact us for information about processors and transfers outside the EU.
Backups. Deleting data in the app does not automatically change existing backups. These may contain older account and food data and encrypted health data. The encryption key is stored separately; encryption does not replace deletion. Contact us about specific retention periods and deletion requests concerning backups.
6 · Your rights
You can request access, correction or deletion of your information, a machine-readable copy, and object to processing based on legitimate interests, including visit statistics. To request deletion of your account and all data, contact us — we will respond as soon as possible. You can also delete your account under Settings.
Download your data. Under Settings → Your data, download meals with nutrient sources and your water log as CSV or JSON, and goals as JSON. Export saved dishes and cookware under My dishes.
Complaints. If you are dissatisfied with how we process your information, you can complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark — datatilsynet.dk.
7 · Contact
Questions about this policy or our data processing: contact page or [email protected].