Privacy policy

This policy explains how Invikta Technology Ltd (“Calorix”, “we” or “us”) collects, uses and shares information when you use the Calorix app, the calorix.ai website and our other services (the “Services”), and the choices you have. If you have questions, email us at [email protected].

1. Information we collect

The information we collect depends on how you use the Services.

1.1 Information you give us

• Profile details: for example your age or year of birth, sex, height, weight, goal weight, activity level, goal and pace, diet preferences and allergies, units and language. A name is optional.
• What you log: food photos, text descriptions, voice recordings and their transcripts, barcodes and nutrition labels you scan, notes and the corrections you make to AI estimates, plus water, weight, fasting, exercise entries and progress photos.
• Companion and game data: your mascot’s name and voice, outfits, coins, challenges and streaks.
• Account details, if you sign in: the email address and name shared by Sign in with Apple or Google (Apple may give us a private relay address), and the identifier from that provider.
• Messages and feedback: support emails, feature requests and votes, survey answers and ratings you send us.
• Referrals: invite codes you share or redeem.

1.2 Information collected automatically

• Device and app information: device model, operating system and app version, language, time zone and settings.
• Identifiers: an install identifier, the anonymous account identifier created when you first open the app, and identifiers used by our service providers for analytics, crash reporting and subscriptions.
• Usage and diagnostics: how you use features (for example which logging method you choose), crash reports and performance data.
• Approximate location: derived from your IP address and time zone. We don’t collect precise location.
• Push token: if you allow notifications, so we can send the reminders you choose.
• Advertising identifier: only if you allow tracking when iOS asks you.

1.3 Apple Health data

If you connect Apple Health, Calorix can read data you allow, such as steps, workouts, active energy and weight, and write data back, such as the calories, macronutrients, water and body weight you log. You choose which data types to share in the Health app, and you can change this at any time in Settings.

Data from Apple Health is used only to provide Calorix features to you. We never sell it, never use it for advertising or marketing, and never share it with advertising partners or data brokers.

1.4 Information from other sources

• Apple and our subscription provider: your purchase and subscription status, such as trial start, renewals and cancellations. Payment card details are handled by Apple and never reach us.
• Sign-in providers: the account details described above when you choose Sign in with Apple or Google.
• Attribution partners: information about the campaign or link that led to your install.

1.5 Our website

The calorix.ai website doesn’t use advertising or tracking cookies and doesn’t ask you to create an account. Your theme choice and the details you type into our calculators are stored only in your own browser (local storage) and are never sent to us. Our hosting and security provider processes technical data such as IP addresses and request logs to deliver the site and protect it from abuse.

2. How we use information

We use information to:

• Provide the Services: log your meals, calculate your targets, run the companion, streaks and challenges, send the reminders you enable, back up and sync your data if you sign in, and handle your subscription.
• Analyze meals with AI: see section 3.
• Keep estimates accurate and improve Calorix: the corrections you make to AI estimates help us measure and improve accuracy; usage and crash data help us fix problems and decide what to build.
• Communicate with you: answer support requests and send service messages. We only send marketing messages if you’ve agreed to receive them, and you can opt out at any time.
• Run referrals and prevent abuse: apply invite rewards and detect fraud and misuse.
• Meet legal obligations and protect our rights.

Legal bases (EEA and UK). We rely on the performance of our contract with you to provide the Services; on your explicit consent for health data, such as body measurements, food logs and Apple Health data, and for any optional tracking; on our legitimate interests to secure, analyze and improve the Services; and on legal obligations where they apply. You can withdraw consent at any time, which doesn’t affect processing that already happened.

3. How AI analysis works

When you scan a photo, describe a meal in text, record a voice note, scan a nutrition label or ask the AI to correct an estimate, the content you submit is sent securely to our servers and to our AI provider, OpenAI, which processes it on our behalf to identify foods, estimate portions and nutrition, and transcribe voice notes. We don’t send your name or email address with these requests.

We store the photos, recordings and estimates linked to your account so you can review a meal later, re-analyze it, and keep your history across devices. We may also review samples of AI results, including corrections, to measure and improve accuracy.

AI estimates can be wrong. Calorix shows each ingredient and a confidence level so you can check and correct them, and the app is not a medical device.

4. How we share information

We don’t sell your personal information. We share information only as described here.

4.1 Service providers

We use trusted providers who process information on our instructions, under contracts that require them to protect it:

Each provider’s privacy policy explains how it handles data: Apple, Google, RevenueCat, Mixpanel, AppsFlyer, OpenAI and Cloudflare.

4.2 Other situations

• When you choose to share: for example a share card or progress image you post yourself.
• Business transfers: if we’re involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• Legal requirements: if required by law, or in the good-faith belief that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.

Health data, including Apple Health data, is never shared with advertising partners under any circumstances.

5. International transfers

We and our providers may process information in countries other than yours, including the United States. Where the law requires it, we use appropriate safeguards, such as the European Commission’s standard contractual clauses.

6. How long we keep information

We keep information for as long as your account is active and as needed to provide the Services. If you delete your account, we delete your data from our servers within 24 hours of the request being processed, except information we must keep for legal, tax or accounting reasons. Copies in our backups are overwritten on a rolling basis, currently within 14 days. Data stored only on your device is deleted when you delete it or remove the app.

7. Your rights and choices

• Access, correction and export: you can see and edit your profile and logs in the app, and export your data from Settings. You can also ask us for a copy.
• Deletion: delete your account and data in the app under Settings. We also ask our subscription and analytics providers to delete the data they hold about you, and revoke Sign in with Apple. Deleting the app alone doesn’t delete data stored on our servers.
• Apple Health: change or revoke access at any time in the Health app or iOS Settings.
• Notifications and tracking: turn notifications or tracking permission off in iOS Settings.
• Objection, restriction and portability (EEA and UK): you can object to processing based on legitimate interests, ask us to restrict processing, and receive your data in a portable format.
• Complaints: you can lodge a complaint with your local data protection authority. We’d appreciate the chance to help first.

California residents. You have the right to know what personal information we collect, use and disclose; to delete and correct it; to opt out of the sale or sharing of personal information; and not to be discriminated against for using these rights. We don’t sell personal information. You or an authorized agent can make a request by emailing [email protected]; we’ll verify the request before acting on it.

To exercise any right, email [email protected].

8. Children

Calorix isn’t intended for anyone under 16, and we don’t knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we’ll delete it.

9. Security

We use technical and organizational measures to protect information, including encryption in transit, access controls and monitoring. No system is completely secure, so we can’t guarantee absolute security. If a breach affects your information, we’ll notify you and the authorities as the law requires.

10. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the date at the top, and if the changes are significant we’ll let you know in the app or by email before they take effect.

11. Contact

Questions, requests or concerns about privacy? Email [email protected].