Privacy Policy
This policy explains how the CaloFlash app and cloud services handle data, and describes your choices and rights.
On-device records and Apple Health
Food, weight, extra activity, goals, and preferences are stored on your device by default. The app reads or writes only the Apple Health data types you select and authorize. Apple Health data is not sent to the AI service.
AI photo data and purpose
Only after you consent and submit a photo does the app upload the compressed photo, language, and necessary installation and request identifiers for AI estimation, usage counting, and security. Requests and results can be linked to your installation or purchase account; they are not anonymous. The server infers a broad country or region from the network to choose a route. It does not separately retrieve your name, GPS location, or Apple Health records. Photos may themselves contain personal information; avoid faces, identity documents, and similar content.
Providers and international processing
Cloudflare provides cloud access, storage, and security, and may process necessary data through its global network. Alibaba Cloud Model Studio performs AI recognition. Requests outside mainland China enter through Tokyo. The deployment scope is Global, so inference may run in Japan, mainland China, or other overseas locations. The mainland China route uses Beijing when enabled. Your submitted data may therefore be processed outside your country or region.
Cloud provider retention
Alibaba Cloud retains call data, including photos, to provide the service, perform security checks, and meet legal obligations. Its published service agreement limits conversation data retention to the shortest time necessary for the service and prohibits model training without authorization. Deleting local records or withdrawing consent does not automatically delete data already received by providers. Contact us below with privacy requests. We will review and respond, assist with provider-related requests, and explain any legal or backup restriction that temporarily prevents deletion.
Consent and the effect of refusal
You may refuse or withdraw consent for AI photo processing in the app’s settings. Refusing or withdrawing disables only AI photo estimation; manual logging, trends, progress reports, and local data remain available. The app will ask again before a later AI use.
Purchases, quotas, and security
To verify purchases, restore entitlements, calculate remaining AI uses, and prevent abuse, the server processes a random installation ID, App Store transaction IDs, purchase status, quota activity, and short-lived network security data. We do not receive payment card numbers or Apple ID passwords.
Feedback and diagnostics
If you submit feedback, we process its content, optional contact details, and any diagnostics you choose to attach. Feedback is kept for up to 90 days. Necessary operational logs exclude original photos and are used for security, troubleshooting, and reliability.
Retention, export, deletion, and rights
Our server does not persist original photos. To prevent duplicate charges on retries, results without the original image are kept by request ID for up to 7 days, then deleted automatically. With photo library permission, photos taken in this app are saved to your library. The app keeps only small thumbnails of the last 30 recognition records. Purchase and quota records are kept as needed to provide entitlements, prevent fraud, and meet legal obligations. You can export or delete local records under Settings → Data, and use feedback or the email below to request access to, correction of, or deletion of applicable server data.
Advertising, tracking, and children
We do not sell this data or use it for third-party advertising or cross-app tracking. The service is not directed specifically to children. A guardian should decide whether a user below the local age of independent consent may use features involving cloud processing.