CaloDaily (“CaloDaily - Tracker”) · Last updated 27 October 2026
CaloDaily is a calorie, meal-plan and workout tracker, run as a personal project rather than a company. It shows no adverts, and what you log is never sold, rented, or used to target ads. The phone apps use Google’s Firebase Analytics to count installs and a few steps, such as finishing sign-up, so CaloDaily can tell which of its own ads bring people who use the app; you can switch that off in You.
This policy covers the website at calodaily.com and any app that uses the same account. If you have questions, email privacy@calodaily.com.
“Continue with Google” is used only to identify you. CaloDaily asks Google for your name, email address and a basic account ID (the openid, email and profile permissions), and nothing else.
CaloDaily does not access your Gmail, contacts, calendar, files, location, Google Fit, Google Health, Fitbit or any other Google data, and does not keep any Google access token after you sign in.
On iPhone, “Continue with Apple” is used only to identify you. Apple gives CaloDaily an account identifier, an email address, and - at the first authorisation only - your name. Nothing else, and no Apple token is kept after you sign in.
If you choose “Hide My Email”, Apple gives a private relay address instead of your own. CaloDaily works the same way with it and never sees your real address. Apple sends your name only at that first authorisation, so an account created later has none until you set one yourself in You.
You can withdraw access at any time on the iPhone: Settings → your name → Sign in with Apple → CaloDaily. That stops the sign-in; to remove what is stored, delete your account in the app.
In the phone apps you can bring in your daily step count from the phone’s health store: Apple Health on iPhone, Health Connect on Android. CaloDaily reads the daily step count and nothing else, never writes to either, and starts only after you tap “Sync from Apple Health” or “Sync from Health Connect” and allow it; after that it refreshes the last week of step counts when you open the app. Those step counts are stored with your CaloDaily account, marked as coming from the health store, used only to show your steps and move targets, never used for advertising, never sold and never shared.
Turn it off at any time: on iPhone in Settings → Privacy & Security → Health → CaloDaily; on Android in Health Connect → App permissions → CaloDaily. Steps already brought in stay in your diary until you delete them or your account.
When you tap the microphone on Add, your phone’s own speech recognition - Apple’s on iPhone, Google’s on Android, or your browser’s on the website - turns what you say into text, under that company’s privacy policy; depending on the phone and language it may do this on the device or on its own servers. CaloDaily never receives or keeps the recording. The text is sent to CaloDaily, which passes it to Anthropic to work out the foods and amounts you mentioned; you check that list and nothing is logged until you confirm it. The same goes for the pantry: a list you say on Plan, or type as one run of words with no commas, is passed to Anthropic as text to split it into ingredients, which you see before they are added. The microphone is used only while you are speaking to CaloDaily, and you can type instead at any time.
Apart from the name and email your sign-in provides, everything below is information you enter yourself. It is kept in CaloDaily’s database and linked to your account.
| Account your name and email address from Google or Apple sign-in, and the account ID that provider uses to recognise you |
| Profile sex, age, height, optional weight override, activity level, goal, water, step and daily burn targets, goal weight if given, coach style |
| Food diary foods and meals you log, with time, meal, calories and macros |
| Saved meals names and nutrition of meals you chose to save |
| Water amounts you log, with time |
| Weight readings you enter, with their dates |
| Steps daily totals you type in, import from Apple Health or add from a logged walk, with which of those each came from |
| Workouts activity, minutes, intensity, optional note, calorie estimate, and which planned workouts you marked done |
| Pantry and plans pantry items, planner rules, equipment, workout limitations (such as neck- or lower-back-friendly) and the weekly meal and workout plans made from them, and what you tick off or add to a week's shopping list |
| Schedule not offered in this version. Anything saved before - title, optional note, date, time, repeats, reminders and the days ticked off - is kept for your account until you delete it |
| Care answers not offered in this version. Answers saved before - skin and hair type, concerns, sun exposure, beard, and, only if you chose to answer it, whether you were pregnant or trying - are kept for your account until you delete it |
| Subscription if you subscribe to Premium: the plan, when it renews or ends, which store it was bought through, and the store's notices about it (purchase, renewal, cancellation, refund). Card and payment details stay with Apple or Google and never reach CaloDaily |
| Usage counts how many food searches, barcode lookups and plans you have run recently, so daily limits can be applied; and, by day, which features you used and how often - logging, planning, reports and so on - kept for 180 days so CaloDaily can see what is worth improving. Never shared or used for advertising |
Weight, food, workout limitations and pregnancy status can be sensitive. They are only used to show you your own numbers, plans and routines, and are never shared.
| Sign-in cookie signed, HTTP-only, expires after 60 days, removed when you sign out |
| Water reminder settings and Care tab ticks kept in your browser’s local storage on that device |
| A saved copy of your Today page kept by the browser or app so it opens instantly; replaced each time it refreshes, and deleted when you sign out |
| Reminders waiting to appear in the Android app, the next month of water and schedule reminders is queued on the phone itself, so they arrive without CaloDaily running. Uninstalling removes them. |
| Invites your invite code, and if you join with a friend’s code, that they invited you. Your friend sees only how many of the people they invited have joined and are logging - never who, and nothing you log. Deleted with your account |
| Notification token if you allow notifications in the phone apps: the address Google and Apple give your phone for them, with its time zone, so a note arrives in your evening. Removed when you sign out on that phone or switch notifications off in You |
Barcode scanning runs on your device - camera images are not uploaded or stored.
Only to run the app for you:
Nothing you log is used for advertising, profiling, or training AI models, and there is no automated decision-making with legal or similarly significant effects.
There are no adverts in CaloDaily and no advertising network in it. Nothing you log is used to target advertising, here or anywhere else.
CaloDaily advertises itself on Google. To see which of those ads bring people who actually use the app, the phone apps - not the website - use Google’s Firebase Analytics. It records that the app was installed and opened, and a few steps: finishing sign-up, logging a first food, and logging by voice. With them go the phone model, system and app version, whether it is the test or the store version of the app, a rough location worked out from the internet address (country and city), and on Android the phone’s advertising ID. It never receives your name, email, diary, weight or anything about your health. Google may use it to measure CaloDaily’s ads and to show CaloDaily’s own ads to people likely to use it.
You can turn this off in You, under “Share usage stats”, and nothing more is sent from that phone. On Android you can also reset or delete the advertising ID in the phone’s settings (Privacy, then Ads). There is no other analytics or advertising kit - no Google Analytics on the website, no Facebook SDK. When something breaks, an error report goes to Sentry, as listed above, without your name, email or diary.
CaloDaily does count how often its own features are used - food searches, barcode lookups, plans generated - on its own servers and against your account. That is what applies the daily limits, and what tells a one-person project which parts are worth the effort. Those counts are never sold, never shared, and never used for advertising.
If any of this changes again, this policy and the App Store and Play Store privacy labels are updated in the same release that changes it, and the change is announced in the app.
| Google sign-in only: confirms your name, email and account ID |
| Vercel hosts the app; like any web host it keeps short-lived request logs (time, address, status) |
| Supabase the database that stores the information listed above |
| RevenueCat only if you subscribe: checks App Store and Google Play purchases and tells CaloDaily whether your subscription is active. It receives your CaloDaily account ID and the store’s purchase records - never your name, email or diary |
| Apple and Google take payment for Premium through the App Store or Google Play, under their own privacy policies |
| Google (Firebase Analytics) in the phone apps only, unless you switch it off in You: receives that the app was installed and opened and a few steps such as finishing sign-up, with the phone model, app version, rough location and, on Android, the advertising ID - never your name, email, diary, weight or health data. Used to measure CaloDaily’s own Google ads |
| Google (Firebase Cloud Messaging) and Apple (push notifications) in the phone apps only, if you allow notifications: deliver CaloDaily’s notes to your phone, so they receive your phone’s notification token and the text of the note - never your diary, weight or health data |
| Resend sends CaloDaily’s account emails, such as the one confirming a deletion request. It receives your email address and that message - never your diary |
| Sentry receives error reports when something breaks: what failed, where in the code, and the browser or phone version - never your name, email, diary or anything you typed |
| Anthropic only if you log by voice or read a pantry list into items: receives that text, to work out the foods and amounts or the ingredients - never the recording, your name, email or diary. Anthropic does not use it to train its models |
| Open Food Facts receives food search words and scanned barcode numbers so it can return packaged-food nutrition - never your name, email or diary. (USDA nutrition data is kept in CaloDaily’s own database, so USDA receives nothing.) |
These providers process data on CaloDaily’s behalf under their own security and privacy terms, and may store it in the United States or other countries.
CaloDaily’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google name, email and account ID are used only to sign you in and show who is signed in; they are not used for advertising, not sold, and not transferred to others except as needed to run the app (the hosting and database providers above) or as required by law.
Your information is kept while you have an account so your history and plans are there when you come back. Entries you delete in the app are removed straight away.
When you delete your account, it is closed at once - you are signed out, and nothing in it is shown or used - and everything linked to it is permanently deleted 14 days later. We email you to confirm the request; until those 14 days are up you can cancel it from the link in that email, or by signing in again and choosing to keep the account. Deletion requests sent by email are answered within 30 days and then follow the same 14 days. Encrypted backups are kept for 30 days, so the account leaves the last of them within 30 days of being permanently deleted.
Deleting your account does not cancel a Premium subscription bought through the App Store or Google Play. Cancel it in the store’s subscription settings.
CaloDaily is run by an individual developer in the United States, who decides how your information is used (the “controller” under the GDPR and UK GDPR). Contact: privacy@calodaily.com.
Why your information is used. To provide the app you signed up for - your account, diary, targets and plans (performance of a contract). With your consent, for anything you choose to add that concerns your health, such as weight, food, workouts and limitations, and for Apple Health steps; you can withdraw that consent at any time by deleting the entries, turning off Health access or deleting your account. For CaloDaily’s legitimate interests in keeping the service secure, preventing abuse and applying daily limits, using the usage counts described above.
Where it is kept. Your information is stored and processed in the United States by the providers listed above. Those transfers rely on the providers’ data processing terms, which include the European Commission’s Standard Contractual Clauses and the UK addendum to them.
Your rights. You can ask to access, correct, delete or restrict your information, to object to its use, and to receive it in a portable form (the CSV download in Progress → Your data does this for everything you have logged). Email privacy@calodaily.com; requests are answered within 30 days. CaloDaily makes no decisions about you by automated means that have legal or similarly significant effects - plans and targets are suggestions you can change. If you are unhappy with how your information is handled, you can complain to the data protection authority where you live or work, or in the UK to the Information Commissioner’s Office (ico.org.uk).
Connections use HTTPS. The database is not reachable from the browser: only the app’s server can read it, and every request is limited to the signed-in account. Access to the app can be restricted to approved accounts. No system is perfectly secure, but reasonable care is taken to protect your information.
CaloDaily gives general guidance on food, exercise and self-care. It is not a medical device and not medical advice - talk to a doctor, dietitian, physiotherapist or dermatologist about your own health.
CaloDaily is not intended for children under 13 and does not knowingly collect their information. If you believe a child has used it, email privacy@calodaily.com and the account will be deleted.
Before 14 September 2026, CaloDaily could connect to Google Health to read activity, sleep and heart data and to save food and water there. That connection has been removed. Food, water and weight entries you had saved through it were copied into CaloDaily’s own database, and all stored Google access tokens were deleted. You can also remove the old access at myaccount.google.com/connections.
If this policy changes, the updated version is posted on this page with a new date at the top. Significant changes are also announced in the app.
privacy@calodaily.com for anything in this policy, or support@calodaily.com for anything else.