Privacy Policy

Effective Date: February 11, 2026

Last Updated: October 8, 2026

Calorie Vita Privacy Policy

We respect your privacy. This App may access health and fitness data (such as steps, calories, and activity) through Apple HealthKit and Google Health Connect with your permission.

• Health data is used only to provide insights and analytics.
• We do not sell or share your personal or health data with third parties for advertising.
• Your data is stored securely and used to provide the App and the limited emails described in Section 3.3.

Users can request account deletion anytime from within the App.

For any questions, contact: [email protected].

1. Introduction

Welcome to Calorie Vita ("we," "our," or "us"), developed and operated by Moonwidth LLC. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Calorie Vita mobile application (the "App") available on the Apple App Store and Google Play Store, and our related website, emails and services (collectively, the "Services").

By downloading, installing, or using the App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to these terms, please do not use the App.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you register for and use the App:

• Account Information: Name, email address, and password (encrypted). If you use Google Sign-In or Sign in with Apple, we receive your name, email address, and profile photo from those services. If you choose Apple's "Hide My Email," we receive a private relay address instead of your real email address.
• Health Profile Data: Height, weight, age, gender, date of birth, body measurements, fitness goals, target weight, and BMI.
• Dietary Information: Food preferences, dietary restrictions, allergies, country of residence (for regional food recommendations), and nutritional goals (calorie and macronutrient targets).
• Food Logs & Photos: Meal entries, food photographs captured or selected from your device for AI-powered nutrition analysis, barcode scan results, and manual food log entries.
• Exercise Data: Exercise type, duration, and calorie burn information that you manually log.
• Intermittent Fasting Data: Fasting protocol selection, timer data, and fasting history.
• Weight Tracking Data: Weight entries and measurement history.
• AI Chat Conversations: Messages sent to and received from the "Trainer Sisir" AI coaching feature, stored securely to maintain conversation context and history.
• Subscription Information: Whether you have a free trial or Premium subscription, its plan, start and end dates, and renewal status. We do not receive your payment card details (see Section 2.4).
• Support Communications: Information you provide when contacting us for customer support or feedback.

2.2 Apple HealthKit & Google Health Connect Data

Important: Calorie Vita integrates with Apple HealthKit (iOS) and Google Health Connect (Android) to provide a comprehensive health tracking experience. This integration is entirely optional and requires your explicit consent.

If you grant permission, we access the following health data in read-only mode:

• Step count
• Active calories burned
• Total calories burned
• Workout/exercise sessions and duration

How HealthKit/Health Connect Data Is Used:

• This data is used solely within the App to display your fitness activity, calculate net calorie balance, and provide personalized AI coaching insights.
• HealthKit and Health Connect data is not sold, shared with third parties for advertising or marketing purposes, used in emails, or used for any purpose other than providing App functionality to you.
• HealthKit data is not stored on external servers. It is cached locally on your device via secure local storage and synced only as aggregated daily summaries to your personal Firebase account for cross-device access.
• You can revoke HealthKit/Health Connect access at any time through your device's system settings, and the App will continue to function without this data.

2.3 Automatically Collected Information

When you use the App, certain information is collected automatically:

• Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
• Language and Time Zone: Your App language and your device's time zone, so that the App and our emails are shown in your language and sent at a reasonable local time.
• Usage Data: Features accessed, interaction patterns, session duration, screen views, and navigation paths (collected via Firebase Analytics).
• Crash & Performance Data: Crash reports, error logs, and diagnostic information (collected via Firebase Crashlytics) to improve App stability.
• Camera & Photo Library Access: Photos captured or selected for food logging are processed for AI analysis. We access your camera and photo library only when you actively initiate food scanning.

2.4 Information We Do NOT Collect

• We do not collect precise GPS location on iOS. On Android, location permissions are declared only for Health Connect integration requirements.
• We do not track users across other apps or websites (NSPrivacyTracking is set to false).
• We do not collect or store payment card or bank details. Calorie Vita is free to download and offers an optional Premium subscription. All purchases are processed by Apple (App Store) or Google (Google Play) under their own terms; we receive only the subscription status described in Section 2.1.
• We do not access your contacts, call logs, or SMS messages.

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 Core App Functionality

• Provide food tracking, calorie counting, macronutrient analysis, and progress monitoring.
• Process food photographs through AI services to identify foods and estimate nutritional content.
• Facilitate barcode scanning to retrieve packaged food nutrition data from public food databases.
• Synchronize your data across devices via your Firebase account.
• Maintain your account and authenticate your identity.
• Provide and manage your free trial or Premium subscription.
• Enable data export (CSV, PDF) and sharing features.

3.2 AI-Powered Personalization

• Food images are sent through our secure server to Google's Gemini API for automated food recognition and calorie estimation. Images are processed to answer your request and are not stored by us with the AI provider.
• The "Trainer Sisir" AI coaching feature uses your profile data (age, weight, height, goals, dietary preferences, allergies), daily calorie/macro intake, exercise data, and health metrics to provide personalized nutrition coaching. This information is sent to Google's Gemini API through our secure server to generate replies.
• AI chat conversations are stored in your Firebase account to maintain context and conversation history.
• AI requests are made only from our server; AI service keys are never included in the App.

3.3 Communications

Push notifications. We send push notifications about meal reminders, water intake reminders, goal progress, and achievements (with your consent via device settings).

Emails we send. If you create an account, we may send you a small number of emails about your use of Calorie Vita:

• A summary of your progress during a free trial.
• A tip during your first week.
• A message when a free trial or subscription ends.

How these emails work:

• We send at most 2 of these emails in a week, and they stop once you subscribe to Premium.
• They are personalized with information from your account, such as your first name, goal, meals logged and weight trend. They never include Apple HealthKit or Google Health Connect data.
• Every email includes an unsubscribe link, and opting out takes effect immediately. You can also email [email protected].
• Emails are sent from [email protected] and delivered by Amazon Web Services (Amazon SES), which processes your email address only to deliver them.
• If you use Apple's "Hide My Email," we email you through Apple's private relay, and Apple forwards our emails to you.
• We do not use tracking pixels to see whether you open our emails. Links in our emails include simple campaign labels, so we can tell which email brought you back to the App.
• We do not sell or share your email address with anyone.

We also respond to customer support inquiries and send important account and service-related notices.

3.4 Analytics & Improvement

• Analyze usage patterns via Firebase Analytics to improve App features and user experience.
• Measure whether our emails are helpful, for example whether people who received an email went on to use the App or start a subscription, compared with a small group who received no emails.
• Monitor and resolve crashes and technical issues via Firebase Crashlytics.
• Generate anonymized, aggregated data for internal research and development.

4. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising. We share information only with the following essential service providers:

All service providers process data only according to our instructions and for the specified purposes. They are bound by their respective privacy policies and applicable data protection laws.

Other Disclosure Scenarios

• Legal Requirements: We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of our users or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. You will be notified of any such change, and your privacy rights will continue to be protected.

5. Apple HealthKit Compliance

Apple HealthKit Specific Disclosures: In compliance with Apple's HealthKit guidelines and App Store Review Guidelines, we confirm the following:

• Data obtained through HealthKit APIs is not used for advertising, marketing (including emails), or data mining purposes.
• HealthKit data is not sold to advertising platforms, data brokers, or information resellers.
• HealthKit data is not shared with third parties without your explicit consent, except as required to provide core App functionality.
• HealthKit data is not used to build user profiles for purposes unrelated to health and fitness.
• HealthKit data is used exclusively to provide health and fitness features within the App, including displaying activity data, calculating calorie balance, and powering AI coaching insights.
• The App does not write any data back to HealthKit; access is read-only.

6. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your device and our servers uses industry-standard TLS/SSL encryption. Our emails are sent with TLS and are signed (DKIM) so email providers can verify they really come from us.
• Encryption at Rest: Personal information stored in Firebase is encrypted using AES-256 encryption on Google Cloud Platform.
• Secure Authentication: Passwords are hashed and never stored in plain text. OAuth 2.0 is used for Google and Apple Sign-In.
• API Security: AI service keys are stored only on our server and are never hardcoded or exposed in the client application.
• Access Controls: Role-based access control and principle of least privilege for all system access.
• Infrastructure: Hosted on Google Cloud Platform (Firebase) with SOC 2, ISO 27001, and GDPR compliance certifications.
• Local Security: Sensitive data cached on your device is stored in secure local storage (SharedPreferences, SQLite with system-level encryption).

While we implement robust security measures, no method of electronic storage or transmission is 100% secure. You acknowledge and accept the inherent security risks of internet-based services.

7. Data Retention and Deletion

7.1 Retention Periods

• Account Data: Retained as long as your account is active.
• Health & Fitness Data: Retained to maintain your history unless you request deletion.
• Analytics Data: Aggregated analytics retained for 26 months (Firebase default).
• Crash Logs: Retained for 90 days for debugging.
• AI-Processed Images: Not stored by us with the AI provider; processed to answer your request only.
• Email Records: Delivery records for our emails (whether an email was delivered, bounced or reported as spam) are deleted automatically after about 13 months. Your unsubscribe choice and the list of emails sent to you are kept while your account exists, so that we keep respecting your choice and never send the same email twice.

7.2 Your Right to Delete Data

• You can delete your account at any time through the App (Settings → Account → Delete Account).
• Upon account deletion, all personal data, including your email preferences and email history, is permanently deleted within 30 days, and we stop sending you emails immediately. If an email to your address ever bounced or was reported as spam, we keep only a one-way scrambled (hashed) form of that address, which cannot be turned back into your email address, so that it is never emailed again.
• Backup copies are deleted within 30 days following our backup retention schedule.
• Some data may be retained for legal compliance (e.g., fraud prevention) for up to 7 years as required by applicable law.
• Anonymized, aggregated data that cannot identify you may be retained for analytics purposes.

7.3 How to Request Data Deletion

• Delete your account through the App settings (recommended, immediate).
• Email us at [email protected] with the subject "Data Deletion Request."
• We will confirm receipt within 72 hours and complete the deletion within 30 days.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 All Users

• Access: View and review the personal information we hold about you.
• Correction: Update or correct inaccurate information through your profile settings.
• Deletion: Delete your account and all associated data at any time.
• Data Export: Export your food logs, nutrition data, and health summaries in CSV or PDF format from within the App.
• Email Choices: Unsubscribe from our emails at any time with the link in any email, or by emailing [email protected]. Unsubscribing does not affect your account or subscription.
• Notification Controls: Manage push notification preferences through your device settings and within the App.
• HealthKit/Health Connect: Revoke health data access at any time through your device's system settings.
• Camera & Photo Library: Revoke camera/photo permissions through your device settings.

8.2 European Users (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you additionally have the right to:

• Request restriction of processing of your personal data.
• Object to processing of your personal data, including objecting to our emails at any time.
• Data portability: receive your data in a structured, commonly used, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local Data Protection Authority.

8.3 California Users (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell your personal information.
• Non-discrimination for exercising your privacy rights.

9. Children's Privacy

Calorie Vita is intended for users aged 18 years and older. We do not knowingly collect personal information from individuals under 18, and we do not send our emails to anyone whose profile shows they are under 18.

• Users under 18 must have parental or guardian consent and supervision to use the App.
• If we discover that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.
• Parents or guardians who believe their child has provided personal information should contact us immediately at [email protected].

Note: Health and nutrition tracking apps may not be appropriate for minors without professional guidance. We recommend consulting with a healthcare provider before allowing minors to use calorie tracking applications.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, primarily the United States (where Firebase/Google Cloud Platform and Amazon Web Services process data). We ensure appropriate safeguards are in place:

• Standard contractual clauses for cross-border data transfers.
• Adequacy decisions by relevant data protection authorities.
• Compliance with applicable data protection regulations including GDPR.
• All transfers are protected by the same security measures described in this policy.

11. Tracking and Advertising

Calorie Vita does not track users across third-party apps or websites for advertising purposes. We do not display third-party advertisements in the App. Our App's Apple Privacy Nutrition Label confirms:

• NSPrivacyTracking: False; we do not track users.
• No tracking domains are contacted by the App.
• Firebase Analytics is used solely for internal analytics to improve the App experience and is not shared with advertisers.
• Our emails do not contain tracking pixels.

12. Data Collected: Summary Table

In accordance with Apple App Store and Google Play Store requirements, the following table summarizes the data we collect:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• We will notify you through the App or via email for significant changes.
• Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
• If you disagree with the changes, you may delete your account at any time.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Developer: Moonwidth LLC

Address: 30 N Gould St Ste N, Sheridan, WY 82801, USA

Website: https://calorievita.com

We handle the following types of inquiries:

• General privacy questions and concerns
• Data subject rights requests (access, deletion, portability)
• Email unsubscribe requests
• Privacy complaints
• GDPR/CCPA compliance questions

Response Timeframes:

• General privacy inquiries: Within 48–72 business hours
• Data access requests: Within 30 days (as required by GDPR/CCPA)
• Data deletion requests: Within 30 days of identity verification
• Privacy complaints: Acknowledged within 48 hours, resolved within 30 days

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or supervisory authority.