Privacy Policy

Calx — Effective June 11, 2026

1. What we collect

• Account information — email address, name, and profile photo, handled by our authentication provider (Clerk).
• Health & fitness information you provide — height, weight, date of birth, gender, activity level, dietary preference, weight-loss/gain goals, and the meals you log (including calories and macronutrients).
• Photos — pictures of food you take or select for AI analysis. We do not access your photo library beyond images you explicitly submit.
• Purchase information — subscription status and product identifiers, processed by Google Play and RevenueCat. We never see your payment card details.
• Usage data — feature usage counts (e.g. daily scan counts) used to enforce plan limits.

2. How we use your data

• To analyze your food photos and estimate nutrition (photos are sent to OpenAI for processing and matched against the USDA FoodData Central database).
• To calculate your personal calorie and macro targets and show your progress.
• To operate your subscription and enforce free-tier limits.

We do not sell your personal data or use it for third-party advertising.

3. Health data

Your health and fitness data (weight, goals, meal logs) is used solely to provide the app's tracking features. We do not share it with advertisers or data brokers. Where required by law (including the Washington My Health My Data Act), we treat this as consumer health data and apply the protections described in this policy.

4. Service providers

We share data only with processors needed to run the service: Clerk (authentication), OpenAI (food photo analysis), Vercel (image storage), Neon (database hosting), RevenueCat (subscription management), Google Play (billing), and Northflank (server hosting). Each receives only what it needs to perform its function.

5. Retention & deletion

Your data is kept while your account is active. You can delete your account and all associated data at any time from Settings → Delete account in the app, or by following the steps at our account deletion page. Deletion removes your profile, meal logs, photos, and weight history from our systems.

After deletion we retain a one-way cryptographic hash of your email address (which cannot be reversed to identify you) together with your free-trial start date, solely to prevent abuse of the free trial through repeated account creation.

6. Security

All data is encrypted in transit (TLS). Access to production systems is restricted to the developer.

7. Children

Calx is not intended for children under 13, and we do not knowingly collect data from them.

8. Changes

We will update this page when this policy changes and note the new effective date above.

Questions? Contact hexarlabs@gmail.com