Privacy Policy

1. Who is responsible for your data

CalDefiq is operated by Muhammad Hassan Adnan, an individual developer based in the United Arab Emirates (“CalDefiq”, “we”, “us”). We decide how your personal data is used, which makes us the data controller.

Privacy contact: caldefiq@gmail.com. Use this address for any privacy question, request or complaint.

2. Summary

3. Information we collect and why

“Your account” means our database and private file storage, hosted by Supabase (see Service providers and third parties).

3.1 Account information

3.2 Body and health information you enter

Sex, age (stored as birth year), height, weight, activity level, goal (lose, maintain or gain), target weight, calorie and macro targets, weight history, optional body measurements (waist, hips, chest, arm, thigh, neck, body-fat percentage) and notes, and whether you told us you are pregnant, breastfeeding or have a health condition that affects what you eat.

Why: to calculate your targets, apply safety limits and show your progress. This is health information. We use it only to provide CalDefiq to you.

3.3 Food, water and fitness logs

Meals and foods you log (name, portion, calories, protein, carbs, fat), saved meals and recipes, custom foods and corrections, water intake, workouts (type, duration, sets, reps, weights, distances, estimated calories burned) and your step goal. Why: this is the core of the app.

3.4 Steps and recorded walks (GPS)

• Steps: with your permission (“Motion & Fitness”), CalDefiq reads your iPhone’s daily step count and stores one total per day in your account, so it follows you to a new phone.
• Recorded walks: only after you tap Start on a walk, CalDefiq uses your location to draw your route and measure distance and calories. If you allow it, tracking continues while your phone is locked, until you tap Finish. Nothing is recorded before Start or after Finish.
• What is stored where: your account stores the walk’s summary (start and end time, distance, steps and calorie estimate). The detailed route (GPS points) stays only on the phone that recorded it: it is not uploaded to our servers, does not move to a new phone, and is lost if CalDefiq is removed from that phone.
• Deleting a walk deletes its summary and its route. Deleting your account also deletes the routes stored on the phone you delete it from.

3.5 Country detection

If you tap the button to detect your country, CalDefiq asks for your location once, at the lowest accuracy, and converts it to a country on your phone using Apple’s location service. The coordinates are discarded; only the country you confirm is saved. You can also choose your country manually.

3.6 Region and preferences

Country, region, language, time zone, currency, units, favourite cuisines, reminder settings and other app preferences. Why: to show the right units, local dishes and prices, and to reset daily limits at midnight in your own time zone.

3.7 Photos

• Meal photos for AI scanning: when you scan a meal (or a “Before & After” photo), the photo is sent securely from your phone to our server, and from there to OpenAI for analysis. We store the result (foods, portions and nutrition estimates) in your scan history.
• Saved meal photos: when you log a meal from a normal scan, CalDefiq saves that photo (resized, plus a small thumbnail) in a private storage area of your account, so you can see it in your Diary, the meal’s details and Scan History. Only your account can access these photos; they are shown only through short-lived private links and are never public. Photos of meals you don’t log, and Before & After photos, are not saved.
• Turning it off: Save meal photos is on by default. You can turn it off in Profile: photos are then still analysed by OpenAI but not saved. Photos already saved stay until you delete them.
• Deleting saved meal photos: a photo is deleted when you delete it, when you delete the last diary item of that meal, when you delete the scan from Scan History, when you use Profile → Data & Privacy → Delete all meal photos, or when you delete your account. If an upload fails (for example offline), the photo waits on your phone for up to 7 days and is retried automatically.
• Progress photos: kept in a private storage area that only your account can access, shown only through short-lived links, and never public.
• Saving images to Photos: if you save an image (for example a share card), CalDefiq asks only for permission to add to your library. It does not read your library.

3.8 AI scan records

For each AI scan we keep the date and time, status, the AI’s result, the result you confirmed, and technical usage data (AI “tokens” used and estimated cost). If you delete a scan, its content and saved photo are erased and the scan is hidden, but a bare record (time, status, tokens, cost) is kept so daily limits and cost controls cannot be bypassed. That bare record is deleted when you delete your account.

3.9 CalDefiq AI assistant

• Messages: we store your messages and the assistant’s replies so you can see the conversation. Messages about sensitive topics (for example medical conditions, eating disorders or self-harm) are labelled so the assistant can respond carefully.
• Clear chat: erases the text of your messages and replies, their safety labels and any suggested actions. Only a usage record without any text is kept for each message (time, whether it was yours or a reply, the AI model, token count, estimated cost and whether the AI call failed), because daily limits and cost controls depend on it. Usage records older than 62 days are deleted the next time you clear the chat, and all of them when you delete your account.
• Your records (optional, off by default): only if you turn on Use my CalDefiq records does the assistant read a summary of your last 7 days (meals, water, daily step totals, workouts, walks, weigh-ins and goals), read-only. The same applies to the optional weekly progress report.
• How replies are written: your message, and the 7-day summary only if you turned it on, are sent to OpenAI to write the reply. Some simple questions (such as “how many calories do I have left?”) are answered by CalDefiq itself without AI. We never send your name, email or account ID. The assistant can suggest adding water or a food, but nothing is added unless you confirm.

See also the AI Disclaimer.

3.10 Food budget and shopping

If you use the Budget Planner or What’s in My Fridge?, we store your budget, the food spending you enter (amount, currency, category, note), ingredient prices, pantry items and shopping list.

3.11 Food search and barcodes

Search words and barcode numbers go to our server, which looks them up in USDA FoodData Central and Open Food Facts. We do not send your name, email or account ID to them. We count lookups per day (for daily limits) but do not keep a history of your searches.

3.12 Premium and usage records

• Daily (and, for Premium, monthly) counts of AI scans, barcode lookups and assistant messages, to apply plan limits.
• If you subscribe to Premium: plan (monthly or yearly), status, renewal and expiry dates, and the App Store product and transaction identifiers. Payment is handled entirely by Apple. We never see or store your card or bank details. See the Subscription & Cancellation Policy.
• If we give you complimentary Premium access (for example as a tester), we record the level, period and the reason we gave it.

3.13 Reminders

Reminders are local notifications scheduled on your phone and are off by default. We store only your reminder settings. We do not send marketing notifications.

3.14 Support emails

If you email caldefiq@gmail.com, we receive your email address, your name as it appears in your email, your message, any attachments, and the app version and phone system if you used the pre-filled email in the app. How we handle support email is explained in Support emails and our private support inbox.

3.15 What we do not collect

• No advertising identifiers (IDFA), ad networks, ad tracking or data brokers.
• No analytics, tracking or crash-reporting software.
• No contacts, microphone, browsing history or data from other apps.
• No payment card details.

4. Apple Health

Connecting Apple Health is optional. If you connect it, CalDefiq reads (never writes) steps, walking and running distance, workouts and active energy. You can turn access off at any time in iPhone Settings → Health → Data Access & Devices → CalDefiq.

As Apple requires, data from Apple Health:

• is used only to show your activity and calorie information in CalDefiq;
• is never used for advertising or marketing;
• is never sold, or shared with advertisers, data brokers or information resellers.

What is saved to your account, so your history is the same on every device: one step total per day (the higher of your iPhone’s count and Apple Health’s total, never added together), and a summary of each imported workout (type, start and end time, duration, distance, active calories, and the name of the recording app or device). Duplicate workouts are not counted twice, and a workout you delete in Apple Health stops counting.

You can disconnect Apple Health and delete everything CalDefiq imported from it at any time in Profile → Apple Health. This does not change anything in Apple Health itself. If you turn on Use my CalDefiq records for the assistant, your daily step totals (which may include Apple Health steps) are part of the 7-day summary; imported workouts are not sent to the assistant.

5. Home Screen widgets

CalDefiq widgets show today’s summary (calories left, protein, carbs, fat, steps and water). The app shares this summary with the widget on your phone only (through an iOS “App Group”). Anyone who can see your screen may see it. When you log out, the widget stops showing your data.

6. How we use your information

• To provide the app: your diary, targets, progress, AI scans, assistant, walks and Premium features.
• To apply fair-use limits, prevent abuse and keep AI costs under control.
• To answer your support requests.
• To keep CalDefiq secure, investigate problems and comply with the law.

We do not use your information for advertising, we do not sell it, and we do not build marketing profiles.

Automated processing: CalDefiq calculates calorie targets and AI estimates automatically, and applies plan limits automatically. These produce suggestions and limits inside the app; they do not make decisions that have legal or similarly significant effects on you.

7. Support emails and our private support inbox

Support email to caldefiq@gmail.com is received by Gmail (Google). To answer you, we use our private Command Center, an internal tool that only the CalDefiq owner can open, protected by two-step verification. It connects to the support mailbox through Google’s official Gmail API.

• What our database stores about a support conversation: the sender and recipient addresses, the sender’s display name, the subject, Gmail’s short preview of the message, dates, whether it is read, whether it has attachments, and our own ticket information (status, priority and internal notes).
• What it does not store: the full text of emails and their attachments stay in Gmail. They are fetched from Gmail only when we open the conversation, and are not saved in our database.
• Linking to your account: if the email comes from the same verified email address as a CalDefiq account, the conversation is linked to that account automatically, so we can see your plan and account status while helping you. We can also link or unlink a conversation by hand (for example if you wrote from another address); each manual change is recorded with a reason.
• Replies are sent from caldefiq@gmail.com through Gmail and are kept in that mailbox.
• Retention: support emails are kept in the Gmail mailbox, and conversation details in our support inbox, for as long as we need them to answer you, follow up on your request and keep a record of our support history. We review them periodically and delete those we no longer need; we have not set a fixed period. You can ask us to delete your support correspondence at any time.

Please don’t send passwords, verification codes or medical records by email.

8. Who at CalDefiq can see your information

CalDefiq is run by one person. The owner can use the private Command Center to look after accounts. It can show account and plan information (email, name, country, time zone, language, currency, sign-up date, email verification, last activity, Premium or complimentary status, daily usage counts and estimated AI cost).

The Command Center does not show your meals, weights, measurements, photos, walking routes, health data or assistant conversations.

Administrative actions (for example giving complimentary access, changing a limit for an account, suspending an account, linking a support conversation, or sending a support email) require a typed reason and two-step verification. They are recorded in an append-only audit log that cannot be edited.

9. Service providers and third parties

We use these providers to run CalDefiq. They process data on our behalf, only to provide their service.

We do not sell, rent or trade your personal data, and we do not share it for advertising. We may disclose information if the law requires it, to protect people’s safety, or to protect CalDefiq against fraud or abuse.

10. International transfers

Your data is stored in South Korea (Supabase) and processed in the United States (OpenAI, Google, USDA) and other countries where our providers operate. These may have different data-protection laws from where you live. Where the law requires, we rely on our providers’ contractual safeguards (such as Standard Contractual Clauses in their data-processing terms) for these transfers.

11. Legal bases (EU, UK and similar laws)

Where these laws apply, we process:

• your account and logs to provide the service you asked for (contract);
• health information you enter or connect with your explicit consent, which you can withdraw at any time by deleting that data, disconnecting Apple Health or deleting your account;
• usage and cost records (for example scan counters), support records and the administrative audit log for our legitimate interests in preventing abuse, keeping the service affordable, helping you and keeping CalDefiq secure;
• records we must keep to comply with the law.

12. How long we keep data

What happens when you delete your account, and the few things that remain, is explained on the Account & Data Deletion page.

13. Your rights and choices

• Access and export: Profile → Data & Privacy → Export my data gives you a copy in JSON format (including the walking routes stored on the phone you export from). Your saved photos can be viewed in the app.
• Correct: edit your information in the app.
• Delete: delete single entries in the app, or everything with Profile → Data & Privacy → Delete account. See Account & Data Deletion.
• Withdraw consent: turn off Save meal photos, Apple Health, Use my CalDefiq records, location, motion, camera, photos or notifications at any time, in the app or in iPhone Settings.
• Other requests: email caldefiq@gmail.com. We may need to confirm that the request comes from the account owner, for example by asking you to write from your account email.

Regional rights

• EU, EEA and UK: you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to complain to your local data-protection authority.
• California and other US states with privacy laws: you may have the right to know, access, correct and delete personal information, and not to be discriminated against for using these rights. We do not sell or “share” personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.
• United Arab Emirates and other countries: you can use the rights your local data-protection law gives you by contacting us.

We respond to requests within the time your local law requires.

14. Children

CalDefiq is not intended for children. You must be at least 13 years old to use it, or older if the law where you live requires it. Users under 18 cannot set a weight-loss goal. If you believe a child has given us personal data, contact us and we will delete it.

15. Security

• Database access rules allow only your signed-in account to read or change your data.
• Connections between the app, our servers and our providers use HTTPS encryption.
• Progress photos and saved meal photos are stored privately and shown only through short-lived links.
• Secret keys stay on our servers, never in the app.
• The owner-only Command Center requires two-step verification, and its administrative actions are logged.

No system is perfectly secure, but we take reasonable measures to protect your data. If a breach affects your personal data, we will notify you and the authorities where the law requires it.

16. Health information is not medical advice

CalDefiq provides estimates and general wellness information, not medical advice. See the Health Disclaimer and the AI Disclaimer.

17. Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, tell you in the app before they take effect.

18. Contact

Privacy questions, requests or complaints: caldefiq@gmail.com. We aim to reply within 3–5 business days. See Support & Contact for other help.