Privacy policy

1. Controller

Marián Fabian
Place of business: Gorkého 769/8, 962 31 Sliač, Slovenská republika
IČO: 47 340 860 · DIČ: 1086305902
Trade register of the District Office Banská Bystrica
E-mail: fabianmarian8@gmail.com

We have not appointed a data protection officer; send privacy questions to the e-mail above.

2. What we process and why

• Meal photo and analysis result. We send the photo through our server to Anthropic for analysis by Claude and return an estimate of the dish, ingredients and nutrition. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Without an account we do not keep the photo in our permanent storage. The preview stays in the browser tab's storage. We store only the analysis result (without the photo) under a random link.
  • With an account we keep the photo in your private history until you delete it or your account.
  • After you sign in we automatically add anonymous scans made in the same browser to your account and save any photos still available in the tab to your history. On a shared device, make sure the scans in the browser are yours before signing in.
• A shared result link can be opened by anyone you send it to. It contains neither the photo nor your name.
• Account and Google sign-in: name, e-mail address, profile picture link and Google account identifier. To sign you in and secure the account we also store authentication tokens and sign-in records including IP address, browser details and expiry times. Basis: contract and legitimate interest in security (Art. 6(1)(b) and (f)).
• Profile (sex, year of birth, height, weight, activity, goal, allergies, diet, cooking time, number of people, foods you avoid). Used for your daily target, allergen warnings and meal plans. We process profile data on the basis of consent (Art. 6(1)(a) GDPR) and, for health data including allergies, also on the basis of explicit consent (Art. 9(2)(a)). We record when you consented and to which version. Withdraw consent any time with “Delete profile data and meal plans”: we stop personalisation and erase the profile and the meal plans created from it. A meal plan being built at that moment will not be saved.
• Diary, meal plans, favourites and estimate ratings: contract. Ratings (thumbs up/down) are stored by us to improve accuracy (legitimate interest, Art. 6(1)(f)) and are not sent to Anthropic.
• Abuse protection: for scans without an account we store a one-way hash of the IP address and the date so the free scan cannot be repeated endlessly. Cloudflare Turnstile checks that you are not a bot. Basis: legitimate interest.
• Technical logs of our hosting provider for operation and security. Basis: legitimate interest.
• Premium payments are not live yet. Once launched, Polar will be the seller. When a customer record is created it receives your name, e-mail and account identifier. We will keep the subscription identifier, status and validity dates. Card data never reaches us.

3. Recipients

• Cloudflare, Inc. (USA): hosting, database including backups, photo storage and Turnstile. Illustrative meal-plan photos are generated by Cloudflare Workers AI. We send it a text description of the suggested dish, never your photo or account identifier. PDF exports (Premium) are produced by Cloudflare Browser Rendering from the data you export; we do not store the file, it is sent straight to you.
• Anthropic PBC (USA): analysis of photos and text by Claude. When building or swapping meal-plan meals we also send your allergies, diet, foods you avoid, cooking time, number of people and calculated calorie and macro targets, without your name or e-mail. On the commercial API, Anthropic does not use inputs and outputs to train models by default and deletes them within 30 days. Exceptions: if its automated safety systems flag a usage policy violation, content may be kept for up to 2 years and safety classification scores for up to 7 years, and longer where the law requires.
• Google LLC (USA): Google sign-in.
• Polar Software Inc. (USA): Premium sales and payments, once launched. It also processes payment and legally required records under its own privacy policy.

We do not sell your data or use it for advertising.

4. Transfers outside the EU

These providers are based in the USA. Transfers rely on the EU–US Data Privacy Framework (where the provider participates) or the European Commission's standard contractual clauses in the data processing agreements (Cloudflare DPA, Anthropic DPA). Information about the safeguards and a copy are available at the contact e-mail.

5. Retention

• Scan results without an account: available for 90 days, then removed at the next daily clean-up. Once added to an account, the account's retention applies.
• IP address hash: 30 days, then removed at the next daily clean-up.
• Sign-in records: a sign-in lasts 7 days and is extended while you use the app. Expired sign-ins are deleted within two days. The link to your Google account and its tokens are kept while you have an account.
• Account, photos, history, profile, diary and meal plans: until you delete them or your account. Deleting a scan removes the result and its stored photo; separate diary entries stay until you delete them.
• Expired data is deleted automatically once a day. Database backups allow restoring the last 30 days, so deleted data disappears from backups within 30 days.
• Hosting logs: according to the provider's settings, usually days to weeks.

6. Cookies and browser storage

Only strictly necessary means: the sign-in cookie, Turnstile protection data and browser storage. There we keep the secret key to your anonymous scan, whether the anonymous scan was used, a temporary photo preview and ticked shopping-list items. Local data without an expiry stays until the app removes it or you clear the site data in your browser. No analytics or advertising cookies, so no cookie consent is needed.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, to object to processing based on legitimate interest and to withdraw consent at any time. Most of it is in the app (Profile → Delete profile data and meal plans, Delete account, delete a scan). Otherwise e-mail us. We will respond without undue delay and within one month at the latest; if the law lets us extend that period, we will tell you why within the first month.

You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk, or with the authority in your EU country.

8. Automated estimates

Nutrition values, allergens and meal plans are estimated by AI. This is not a decision with legal effects on you, and you can correct any estimate.

9. Age

Calorio is intended for people aged 16 and over.

10. Changes

We may update this policy and will announce material changes in the app. The date of the last update is shown above.