Privacy Policy — Calorel
Last updated: October 23, 2026
Calorel ("the App", package ro.calorel.app) and the website calorel.ro are developed and operated by Cleoda Labs (Mihai Crisan), the data controller. The full policy, in Romanian, is at https://calorel.ro/confidentialitate; this page summarises it.
In Short
There is no account and we never ask for your name or e-mail. Your food journal, saved photos and daily goal stay on your phone. Photos are sent for analysis only after you agree, are processed in the European Union and are not kept on the server. There are no ads and no ad tracking. Anonymous usage statistics and crash reports are sent only if you say "Yes" in the App, and you can change that answer at any time in Settings.
What Stays on Your Phone
- Your journal: meals, foods, weights and the saved (downscaled) photos.
- Frequent meals and the products whose labels you photographed.
- Your daily goal and the data it is computed from (age, height, weight, sex, activity). The calculation runs on the phone.
We do not receive this data. You delete it by deleting meals in the App or uninstalling it.
What the App Sends to Our Server, and Why
Before the first photo is sent for analysis the App asks for your consent; with "Not now" it sends nothing. You can change the answer at any time in Settings → "AI analysis".
- Meal photos, when you choose to analyse them: to recognise the foods and portions. They go to Google Gemini (Vertex AI), processed in the EU, and are not stored after the answer.
- Written corrections the App cannot understand by itself are analysed by AI and not stored.
- Food names you search for that are not in our list, so we can estimate their values. We keep the name only, with nothing about who searched for it.
- Barcodes you scan, to look the product up in our shared product database.
- Label photos of products we do not know: Gemini reads the nutrition table. The photo is not kept; the values read (barcode, name, brand, weight, values per 100 g) join the shared product database. They describe the product, not you.
Legal basis: performance of the service you request (GDPR art. 6(1)(b)). Under the Google Cloud terms, data sent to Vertex AI is not used to train Google's models.
Subscription
- Payment is handled by Apple (App Store) or Google (Google Play). We never see your card details or your account name.
- Subscription status is kept for us by RevenueCat (RevenueCat, Inc., USA), using an anonymous identifier generated on your phone. RevenueCat receives from Apple or Google only what concerns the subscription (product, trial, renewals, cancellation).
- The first free plate: to make it a single one, we record the anonymous identifier and the time it was used, in Google Cloud (EU).
- App verification (Firebase App Check): Apple (App Attest) or Google (Play Integrity) confirms that the request comes from the Calorel app installed from the store. We receive only the confirmation.
Only If You Say "Yes" to Helping Us Improve
On first launch the App asks whether you want to help us improve. Only with "Yes" does it send anonymous usage statistics (Firebase Analytics, kept at most 14 months), crash reports (Firebase Crashlytics, kept 90 days) and the corrections you make to AI estimates (what the AI proposed and what you saved, without the photo). None of it includes your name, e-mail, photos or the phone's advertising identifier, and we never use it for ads. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time in Settings → "Anonymous statistics".
Technical Data
Like any server, ours sees the IP address a request comes from; we use it in memory only, to limit requests per minute. Google Cloud keeps the server's technical logs (time, IP address, request type — no photos or content) for 30 days, for security and troubleshooting (GDPR art. 6(1)(f)).
Where the Data Is
The server, the product database and the AI analysis run on Google Cloud in the European Union (Belgium and the EU multi-region). Google acts as our processor under the Google Cloud data processing terms. We do not sell or share your data with anyone else.
Permissions
- Camera: for meal photos and barcode scanning.
- Photo library: only when you choose an existing photo.
Your Rights
You may request access to your data, its correction or deletion, restriction of processing, portability, and you may object to processing. Because there is no account we usually cannot link any data to you; write to us and we will help with whatever we can identify. You may also complain to the Romanian data protection authority (dataprotection.ro) or to the UK Information Commissioner's Office (ico.org.uk).
Children
Calorel is not intended for children under 16. The daily goal calculation is for adults only.
Changes
If we change what data we use, we update this page and the full policy on calorel.ro before the change reaches the App.