Privacy policy

Who we are

Caly is made by Xhem Zeqiri, based in Switzerland. He is the person responsible for the data described here.

For anything in this policy — a copy of your data, a correction, a deletion — write to support@mycaly.app. That address reaches a person, not a queue.

Where your data lives

Your journal is written on your iPhone first. Every meal, weigh-in and goal is stored locally, and the app works from that copy — so it keeps working offline.

Because Caly needs an account to get started, that local copy is also synced to your account, so your journal survives a new phone. What syncs is listed below.

Your account

You can sign in with Apple, with Google, or with an email address and a password. Signing in lets your journal follow you to a new phone.

• Sign in with Apple gives us an identifier and an email address. If you choose Apple's private relay, we never see your real address.
• Sign in with Google gives us your name and email address.
• Email and password gives us your email address. The password is handled by our sign-in provider and stored only in hashed form — nobody can read it, including us.

Once you have an account, these are synced to our database so they survive a reinstall: your profile (sex, date of birth, height, weight, weekly workouts, goal, target weight, daily nutrition targets), your meals, and your weigh-ins.

The database is Supabase, hosted in the European Union (Ireland). Access is restricted per user at the database level: your rows can only be read by your own account.

Meal photos

When you photograph a meal, the picture goes to our server, which passes it to OpenAI to be read. That is what turns a plate into calories and macros.

We do not keep the photo. It is not stored on our server and it is not put in your account.

What we do keep, for each reading, is one short record: the date, whether it worked, the name of the food that was recognised, how long it took, and which model answered. We use it to enforce the daily limit of twenty readings and to see when the reading fails.

The photo you took stays in your phone's own photo library if you saved it there — that copy is yours, and Caly does not manage it.

Barcodes and food search

When you scan a barcode or search for a food by name, the barcode or the words you typed are sent to Open Food Facts, a public food database, to get the nutrition values back. Nothing about you is attached to that request.

Apple Health

If you allow it, Caly reads your step count from Apple Health to show it on the home screen, and asks to read your weight. What Caly reads from Health stays on your phone and is never uploaded.

Caly also writes into Health the weight you enter in the app, so your other health apps see it too. You can turn either permission off at any time in the Health app.

Speaking instead of typing

If you dictate a meal, iOS turns your speech into text. Depending on your device and language, iOS may send the audio to Apple for that — it is Apple's speech recognition, governed by Apple's privacy policy. Caly does not record or keep the audio; it only receives the text.

Analytics

We use PostHog, on its European servers, to see which screens people reach and where the app fails. These events are not attached to your account: they sit against an anonymous device identifier, and we never link that identifier to your name, your email or your journal.

Knowing which ad brought you

We use AppsFlyer to know which advertisement or link led to an install, so we stop paying for the ones that do not work. If you decline the iOS tracking prompt, no advertising identifier is used. Your meals and your weight are never sent to AppsFlyer.

Subscriptions

The subscription screens and the record of whether you are subscribed are handled by Superwall. The payment itself is handled by Apple. We never see your card, and we never receive it.

Deleting everything

In the app: Settings → Account → Delete Account. This erases your profile, your meals and your weigh-ins from our database, permanently and without a waiting period.

Deleting the app alone does not delete an account — delete the account first, or write to support@mycaly.app and we will do it for you.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. One email is enough: support@mycaly.app. We answer within thirty days, and there is nothing to pay.

Children

You must be at least 13 years old to use Caly. If you live in the European Economic Area, Switzerland or the United Kingdom, you must be at least 18.

We do not knowingly collect anything from someone younger. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

If we start collecting something new, this page changes and the date at the top changes with it. Anything material will also be said inside the app.