Privacy Policy

kcaloriz is a calorie and macro tracking app. To work, it needs to store a small amount of personal data — your account credentials, body stats, and the food and weight entries you log. This policy explains exactly what we collect, why, and your rights over it.

We do not sell your data. We do not run ads. We do not share your data with third parties except where required to operate the service (listed below).

Account data — your email address and, if you register with email and password, a hashed password. If you sign in with Google, we receive your email and display name from Google's OAuth flow; we do not receive or store your Google password.

Profile data — the information you enter during onboarding and in Settings: your name, age, biological sex, height, weight, activity level, goal (lose / maintain / gain), and preferred units (metric or imperial).

Log data — food entries (food name, calories, macros, meal slot, date) and weight entries (date, value) that you create in the app.

Device locale and appearance — your device language and system theme, used to display the app in the right language and colour scheme. These are not stored on our servers.

We use your data solely to provide the kcaloriz service:

- Calculate your daily calorie and macro targets from your body stats and goal. - Store your food and weight logs and serve them back to you. - Authenticate your account and keep it secure. - Send transactional emails you request — password reset, email verification, account reactivation. We do not send marketing email.

Google OAuth — if you choose "Continue with Google", your login is handled by Google's OAuth 2.0 service. Google's privacy policy applies to that flow. We receive only your email and display name.

Google Mobile Ads (AdMob) — the app displays ads served by Google AdMob. AdMob may collect your device's Advertising Identifier (IDFA) and ad interaction data to serve relevant ads. On iOS, the app will ask for your permission before accessing the IDFA via Apple's App Tracking Transparency prompt. You can deny permission and ads will still appear, but they will be less personalised. Google's privacy policy governs how AdMob uses this data: https://policies.google.com/privacy

PayPal — the optional "Support kcaloriz" button in Settings links to a PayPal donation page. Tapping it opens PayPal in your browser; we do not receive any payment or card information.

Your data is stored for as long as your account is active.

If you delete your account, your profile, logs, and goals are marked for deletion immediately and purged within 30 days. During that window the account can be reactivated via an emailed link; after 30 days the data is gone permanently.

You can delete your account at any time from Settings → Delete account.

You can view and edit your profile data at any time in Settings. You can delete your account and all associated data from Settings → Delete account.

If you want a copy of the data we hold about you, or if you believe data is being processed unlawfully, contact us at the address below. We will respond within 30 days.

Passwords are stored as bcrypt hashes; we never store them in plaintext. All data is transmitted over HTTPS. Access tokens are short-lived; refresh tokens are stored in your device's secure enclave (iOS Secure Store / Android Keystore).

No system is perfectly secure. If you discover a vulnerability, please report it to us before disclosing publicly.

kcaloriz is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

If we make material changes — such as collecting new categories of data or sharing data with new parties — we will notify you in the app and update the "Last updated" date below. Continued use after notification constitutes acceptance.

Questions, requests, or concerns:

Email: privacy@kcaloriz.com Website: https://kcaloriz.com