Effective date: October 22, 2026
CalorieBuddy ("we," "our," or "us") operates the CalorieBuddy mobile application (the "App"). This Privacy Policy explains the information we handle, why we use it, where it is stored, and the choices available to you.
When you create an account, we collect your email address and password. Passwords are hashed before database storage. We also maintain an account identifier and security information needed for sign-in, session management and password resets. Password reset emails are sent to the address associated with your account.
Information you submit or choose to save can include meal descriptions, meal dates, notes, serving quantities, calories, macronutrients, optional nutrients, saved foods and meal history. Reusing a food can create another meal entry. If you use packaged-food features, saved information can also include a barcode, product name, brand, package size, nutrition panel, ingredient and allergen declarations, your corrections, and the source or review information associated with those facts.
Meal history and saved product information are associated with your signed-in account. Package ingredient names and formulation-level counts may also be used to maintain our reviewed ingredient information. That review queue does not include your account identifier, meal identifier, meal date or complete raw OCR panel.
When you choose a meal image from your camera or photo library for analysis, the selected image is sent through our backend to our AI processing provider. This processing can occur before you decide whether to save the meal.
When you save a meal with a photo, the App keeps an app-owned local copy and uploads a compressed copy to private Cloudflare R2 storage associated with your account. This allows synchronized meal history to retrieve the photo after reinstalling the App or signing into the same account on another device. Stored meal photos are accessed through authenticated CalorieBuddy services and are not published by us. Uploads and retrieval may wait or retry when a connection or service is unavailable.
The App can recover a previously logged meal photo when the old associated local file remains available. A missing historical file cannot be reconstructed from an unavailable local reference alone. We do not search your entire photo library to find replacements. The App does not delete the original image from your photo library when you remove an app-owned copy or meal.
Images used solely for package, Nutrition Facts or ingredient reading are processed on the device and are not retained as durable meal photos by that scanning flow. Where ingredient text assistance is used, OCR text can be sent to our backend and AI provider to extract the ingredient and allergen declarations. Facts and corrections you choose to save can become part of your account's product or meal information. Temporary device files and an AI provider's processing records have different retention from saved meal photos.
Our photo-processing steps remove image metadata that is not needed for the feature. The visible contents of an image can still reveal personal information; do not submit material you do not want processed.
Goals and Weight can save your calculator profile, manually entered weights, accepted calorie and macro targets, dated target history, weight plans, plan status, target weight, units and check-in state with your signed-in CalorieBuddy account. The calculator profile consists of birth year, calculation-sex choice, height and activity category. These inputs support personalized starting targets and progress features.
On a new installation, goal records synchronize with your signed-in account. If an earlier version kept a device-only journal and the account has no goal journal, the App offers a one-time choice to save that older data to the account. Until you make that choice, that journal and changes to it remain on the device. If the account already has a journal, the account journal is used instead of automatically combining a separate old device-only journal with it.
The App also keeps a local journal so changes can wait for a connection. On iPhone, this journal uses iOS file protection and is excluded from device backups, including iCloud backup. Unsynchronized changes or an unadopted older journal can be lost if the installation is removed. Signing out hides the account's information but does not delete its synchronized records. Synchronized records can be restored when you sign into the same account after reinstalling or on another device. Concurrent changes are checked before saving; a conflicting local copy may be retained for review rather than silently overwriting the account.
The general-wellness eligibility confirmation used by the calculator stays on the device. It is not part of the synchronized calculator profile.