1. Scope and operator
This Privacy Policy applies to the Calvivo mobile application, its AI meal-analysis service, and the Calvivo support and legal website (together, the Service). Calvivo is the app and service covered by this policy. The developer or publisher identified on the applicable App Store or Google Play listing operates the Service and is referred to here as Calvivo, we, or us.
For privacy questions or requests, contact admin@codeapps.dev.
2. Information we process
| Category | Examples and source | Why it is used |
|---|---|---|
| Account identifiers | A Firebase anonymous user ID and authentication token generated when Firebase services are enabled. Calvivo does not require an email address or password for the anonymous account. | Authentication, cloud profile sync, abuse prevention, account security, and account deletion. |
| Profile and goals | Age or birth year, gender selection, height, weight, activity level, goal, nutrition preferences, unit preferences, and calculated calorie and macro targets that you provide or generate through onboarding. | Create and maintain your plan, targets, progress views, and personalized app experience. |
| Nutrition and progress | Foods, meal entries, portions, calories, macros, water, weight logs, fasting settings, streaks, and progress information that you enter. Day-to-day logs are primarily stored on your device; profile and target information may sync to Firebase when cloud features are enabled. | Food logging, progress tracking, fasting tools, reminders, and app functionality. |
| Meal photos and scan requests | A camera or library image you select, a compressed local copy, locale, and AI-generated nutrition result. The image and an authentication token are sent over HTTPS only when you request analysis. | Return an editable estimate of foods, portions, calories, protein, carbohydrates, and fat. |
| Barcode lookups | A barcode value scanned at your request and product information returned by the product-data provider. | Find packaged-food nutrition information. |
| Voice and speech | Microphone audio used when you choose voice meal entry. Depending on your device settings, Apple or Google speech-recognition services may process the audio and return text to Calvivo. | Convert your spoken meal description into editable text. |
| Optional health and fitness data | Steps, active energy, and weight accessed through Apple Health or Health Connect after your explicit permission; weight may be written when you request synchronization. | Show progress context and synchronize a user-requested weight entry. |
| Purchases | Product identifier, transaction or purchase status, entitlement, renewal or expiration status, and store account region supplied by Apple or Google. We do not receive your full payment-card number. | Process, restore, and support subscriptions and one-time purchases. |
| Diagnostics and configuration | Crash stack traces, device and operating-system information, app version, technical state related to a crash, installation identifier, and remote configuration values. | Security, troubleshooting, reliability, feature configuration, and abuse prevention. |
| Support communications | Your email address and the content you send if you contact support. | Respond to requests, resolve issues, and maintain necessary support records. |
Calvivo does not include an advertising SDK and does not intentionally collect contacts, precise location, payment-card details, or browsing history.
3. How and why we use information
We process information to provide the features you request; calculate and maintain your plan; authenticate and synchronize your account; operate purchases; answer support requests; protect the Service; diagnose crashes; comply with law; and communicate material service or policy changes.
Legal bases for UK and EEA users
- Performance of a contract: providing the app, account, requested AI analysis, purchases, and support.
- Consent: optional camera, photo library, microphone, speech recognition, notifications, and Apple Health or Health Connect access. You may withdraw device permission at any time.
- Legitimate interests: securing the Service, limiting abuse, fixing faults, and improving reliability, where those interests are not overridden by your rights.
- Legal obligations: responding to valid legal requests, tax or transaction record obligations, and protecting legal rights.
Where health information is treated as special-category or sensitive data, we rely on your explicit, feature-specific permission and process it only for the functionality you request.
4. AI meal scans and automated estimates
Calvivo sends a meal photo for AI analysis only after you choose the camera or photo library and submit the image. The app compresses the image, sends it with your locale and an authentication token to the secured Calvivo gateway, and receives a structured nutrition estimate. The gateway validates the request and applies usage limits before forwarding the image to the configured AI provider.
Calvivo does not intentionally store image bytes or raw AI output on its gateway after the request completes. OpenAI or Google Gemini may process and retain inputs for security, abuse prevention, and service operation under the API terms and data controls applicable to the configured provider. A compressed image may remain locally on your device as part of a saved or queued meal until you delete the entry, clear app data, delete your Calvivo account, or uninstall the app.
AI output is an estimate, may be inaccurate, and is not used to make legal or similarly significant decisions about you. You can review and edit a result before saving it.
5. Health and fitness data
Apple Health and Health Connect access is optional. If you connect it, Calvivo requests only the permissions needed to read steps, active energy, and weight, and to write weight when you choose that action. This data is used to display progress and provide the requested synchronization feature.
We do not sell health data, use it for advertising, combine it with advertising profiles, or disclose it to data brokers. Health-platform data is not sent to the AI meal-analysis provider. You can revoke access at any time in Apple Health, Health Connect, or your device settings. Revoking access stops future access but does not automatically remove Calvivo entries you previously created from that information.
6. When information is disclosed
We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising. We disclose limited information to processors and service providers only as needed to operate the Service:
- Apple and Google: app distribution, store purchases, device permissions, speech recognition when provided by the platform, and Apple Health or Health Connect integrations.
- Google Firebase: anonymous authentication, cloud profile and target storage, Remote Config, and crash diagnostics.
- Cloudflare: secured AI gateway, authentication validation support, rate limiting, and network security.
- OpenAI or Google Gemini: meal-photo analysis, depending on the provider configured for the Service.
- Open Food Facts: barcode and product lookup information when you request a scan.
Providers may process technical information such as IP address and request metadata as part of delivering and securing their services. They process information under their own terms and privacy commitments. We may also disclose information when reasonably necessary to comply with law, protect users or the Service, investigate fraud or abuse, establish legal claims, or complete a business transfer with appropriate notice and safeguards.
7. International processing
Calvivo and its providers may process information in countries other than the country where you live, including the United States. Those countries may have different data-protection laws. Where required, transfers rely on recognized legal mechanisms such as adequacy decisions, contractual safeguards, or another lawful transfer basis offered by the relevant provider.
8. Retention and deletion
- Local app data: kept on your device until you delete an entry, clear app data, delete your account, or uninstall Calvivo.
- Cloud profile and targets: kept while your Firebase-backed account is active and deleted through the in-app account-deletion flow or a verified deletion request.
- Meal photos: kept locally while needed for a saved or queued scan. The Calvivo AI gateway is designed for transient processing and does not intentionally retain image bytes after a completed request.
- Diagnostics, security, and purchase records: kept only for the period reasonably necessary for reliability, fraud prevention, store support, dispute resolution, or legal obligations, subject to provider settings and applicable law.
- Support messages: kept until the request is resolved and for a reasonable period afterward to maintain support and legal records.
Some information may remain temporarily in encrypted backups or processor systems until their ordinary deletion cycle completes. We may retain limited records when law requires it or when necessary to prevent fraud, resolve disputes, or enforce agreements.
To delete your account in the app, open Settings, choose Delete Account, and confirm. You can also follow the instructions on our account deletion page. Deleting a Calvivo account does not cancel an App Store or Google Play subscription.
9. Security
We use safeguards designed for the nature of the information, including HTTPS encryption in transit, authenticated AI requests, access-controlled cloud records, limited permissions, and usage controls. No storage or transmission method is completely secure, so we cannot promise absolute security. If we identify a breach requiring notice, we will provide notice as required by applicable law.
10. Your choices and privacy rights
You can edit food and profile entries, decline or revoke device permissions, disconnect health access, turn off notifications, and delete your account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or a copy of personal information; object to certain processing; withdraw consent; or appeal a denied privacy request.
Residents of jurisdictions with applicable US state privacy laws may request access, correction, or deletion and may not be discriminated against for exercising those rights. Calvivo does not sell personal information or share it for cross-context behavioral advertising, so no opt-out of those activities is necessary.
Users in the United Kingdom, EEA, Canada, and Australia may also contact their local privacy or data-protection regulator. We encourage you to contact us first so we can address the concern.
Submit a request to admin@codeapps.dev. State the right you want to exercise and your country or state. We may ask for limited information to verify that you control the relevant account. Authorized agents may submit requests where local law permits, subject to verification.
11. Children and teen users
Calvivo is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age of legal majority where you live, use Calvivo only with permission and supervision from a parent or legal guardian. Users who indicate they are under 18 receive a restricted experience that does not show weight-loss projections.
If you believe a child has provided information without appropriate permission, contact us so we can investigate and delete it.
12. Changes to this policy
We may update this policy when Calvivo, its providers, or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use information, we will provide additional notice when required.
13. Contact us
Service: Calvivo
Privacy contact: admin@codeapps.dev
Account deletion: codeapps.dev/privacy/calvivo-account-deletion.html