Your nutrition data belongs to you.

1. Who this policy covers

Calori AI is a nutrition and general wellness application for adults aged 18 and over. The data controller and publisher is Orkun HACILAR, Bahçelievler Mahallesi, Günsazak Bulvarı No: 30, Daire: 10, Kat: 5, Dostlar Apartmanı, İzmir 35000, Türkiye. Contact: bohacilar@gmail.com or +90 546 605 80 86.

2. Data we process

• Account and profile: Firebase user identifier, email when you protect an account, display name, language, age confirmation, height, weight, activity level, nutrition preferences, goals, and target settings.
• Nutrition and health-related records: meals, calories, macros, food entries, meal photos, water, steps, weight history, fasting sessions, reminders, and progress summaries.
• AI interactions: the question or photo needed to provide a scan, coach response, calorie target, or weekly nutrition plan; generated results; safety and accuracy reports you choose to submit.
• Purchases: product identifiers, entitlement state, purchase and refund events, coin balance, and fraud-prevention references. We do not receive or store payment-card details.
• Technical and analytics data: app version, locale, operating system, feature events, performance, error type, security validation, and privacy-safe diagnostic identifiers.

3. Why we use data

We use data to provide meal analysis and progress tracking; personalize goals and plans; deliver AI features; preserve account access; verify Premium and coin purchases; prevent abuse and duplicate charges; handle support, safety reports, refunds, and deletion requests; and improve reliability. We do not sell personal data or use health-related data for advertising.

4. Services that process data

• Google Firebase: authentication, database, file storage, server functions, integrity protection, and operational analytics.
• OpenAI: after your separate in-app permission, processes the minimum prompt, profile or nutrition preferences, or meal image required to produce the AI result you request. Direct payment details are not sent, and this data is not used by Calori AI for advertising.
• RevenueCat, Apple App Store, and Google Play: subscription and in-app purchase verification, entitlement recovery, refunds, and fraud prevention.
• Operational providers: hosting, security, and crash/performance services used only to operate and protect Calori AI.

These providers may process data in other countries under their contractual safeguards and applicable law.

5. Photos and AI safety reports

Meal photos are private to your account and are used to perform the scan and show recent results. They are not placed in a public catalog. An AI-content report contains only the result type and identifier, an allowlisted reason, locale, and time; it does not copy your raw photo, health profile, prompt, or full AI response.

6. Retention

Profile, meal, progress, and AI-result records remain while your account is active or until you delete eligible records. Meal photos remain while needed for your saved scan history. After account deletion is confirmed in the app, eligible account data and meal photos are scheduled for deletion; encrypted disaster-recovery copies may take up to 90 additional days to expire. Purchase, refund, fraud-prevention, and legal records may be retained only where required by law or to establish and defend legal claims. Apple, Google Play, RevenueCat, Firebase, and OpenAI apply their own documented retention duties.

7. Your choices and rights

You may access and correct profile information in the app, disable reminders in device settings, withdraw future OpenAI data permission in Privacy & app data, manage or cancel subscriptions in your App Store or Google Play settings, and delete your account from inside the app. The account deletion page explains the scope and retained legal records.

8. Security

Calori AI uses authenticated access rules, integrity checks, least-privilege server functions, transport encryption, private storage paths, idempotent purchase and coin ledgers, and limited operational logging. No online service can guarantee absolute security; report suspected misuse to bohacilar@gmail.com.

9. Children

Calori AI is not directed to anyone under 18. We do not knowingly create personalized calorie targets for children. Contact us if you believe a minor supplied personal data.

10. Changes and contact

We may update this policy as features, providers, or legal duties change. Material changes will be reflected by the updated date and, where appropriate, an in-app notice. Privacy questions and requests: bohacilar@gmail.com or +90 546 605 80 86.