Privacy Notice

Last updated: October 2026

This Privacy Notice provides you with information about what personal data we collect about you, how and why we use it, with whom we share it, how we store it, and how you can control our processing of your data. This Privacy Notice is meant to be read together with our Terms of Service, which you can find at www.calodar.ai.

We at Calodar Ltd. ("us", "we", or "our") recognize and respect the importance of maintaining the privacy of our users. This Privacy Notice describes the types of information we collect from you when you visit our site, app and/or use our services thereon (such services, together with the site and app, the "services"). "You" means an individual using the services, and "personal data" means any information that refers, is related to, or is associated with an identified or identifiable individual or as otherwise may be defined by applicable law. This Privacy Notice details which personal data we collect when we provide the services to you.

1. Personal Data We Collect

1.1. Contact Information. When you request information from us or contact us for any other reason we collect any data you provide, such as your name, email, and the content of your message.

1.2. Account Data. When you first open the app, it creates an anonymous account. You do not give us a name or email address to create the account. The account credential is kept in your device's secure storage. You can add an optional display name, targets and layout preferences, which are stored with your profile in our journal database.

1.3. Payment Information. The app offers Free, Plus and Pro plans. Payments for subscriptions are made through Apple's App Store. We receive purchase status and signed subscription proof to confirm your plan, not payment card data. With each paid-plan scan the app sends this proof to our scan server. The subscription transaction identifier is used only in memory to count the daily limit, and the proof is not stored by our server.

1.4. Materials You Upload. We also collect any materials, including images and/or pictures and/or photos and/or text and/or voice recordings you may submit to the app. Photos, text and voice are sent to our scan server for analysis using third-party AI and speech-to-text services. Correction requests also send the correction text or voice and the current meal's food names, identifiers and weights for analysis. We store your meal records, including foods, quantities, nutrition values and corrections, and your water records in our journal database under your account identifier. Meal photos are not stored in your journal. We keep the submitted photo or text, voice transcript, analysis result and the technical details of the scan as scan records without your account identifier, for troubleshooting, improvement and training of our food recognition. Voice recordings are processed in memory by our scan server and are not stored there after transcription. Recent scan input is also cached on your device for Pro Retry and is sent again only if you choose a retry.

1.5. Activity and System Data. When you use the app, we collect usage and error events, including event name and time, a random session identifier, app version, operating system, language, screen, scan type and identifiers, error details and subscription events. These events are stored without your account identifier. Our scan server's request logs include IP address and user agent. We do not collect your location; scan requests carry a fixed placeholder coordinate. With your permission, the app reads Apple Health active and resting energy burned and writes dietary energy. Burned energy stays on your device; it is never sent to or stored on Calodar servers, included in scan records or usage events, or used for training, advertising, marketing or data mining.

1.6. You are under no legal obligation to provide us with any such personal data. It is your voluntary decision whether to provide us with any personal data, but if you refuse to provide such information, we may not be able to provide you with certain services.

2. How We Use Your Personal Data

2.1. General. We and any of our trusted third-party subcontractors and service providers use the personal data we collect from and about you for any of the following purposes: (1) to provide you with the services; (2) to respond to your inquiries or requests, contact and communicate with you; (3) to develop new products or services and conduct analyses to improve our current content, products, and services; (4) to review the usage and operations of our site, app and services; (5) to use your data in an aggregated, non-specific format for analytical purposes (as detailed below); (6) to prevent fraud, protect the security of our site, app and services, and address any problems with the site, app and/or services; and (7) to provide support.

2.2. Statistical Information and Analytics. We and/or our service providers use usage and error events to find and fix failures and understand how features are used. By analyzing the information we receive, we may compile statistical information across a variety of platforms and users. This helps us improve our services by allowing us to identify new trends and user needs, which in turn allows us to consider new products and services or tailor existing products and services accordingly.

3. Sharing the Personal Data We Collect. We share your information, including personal data, as follows:

3.1. Other Users. Your current and previous meal assessments are private to your account. We do not share your journal with other users, employers, clinics or coaches.

3.2. Service Providers and Subcontractors. We disclose information, including personal data we collect from and/or about you, to our trusted service providers and subcontractors, who use such information to help us provide you with the services and aid in our understanding of how users are using our services.

3.3. Such service providers and subcontractors provide us with IT and system administration services, data backup, security, storage and data analysis services. Trusted hosting providers provide our journal database, sign-in and scan log storage and host our scan service.

In addition, we use third-party artificial intelligence (AI) services to provide meal analysis and corrections and to transcribe voice recordings. Free, Plus and Pro use different AI models. These third-party services process submissions in accordance with their terms and policies.

3.4. International Transfers. By accepting this Privacy Notice, you acknowledge and agree that we may use subcontractors and service providers who are located in countries other than your own and may send them information we receive (including personal data).

3.5. Business Transfers. Your personal data may be disclosed as part of, or during negotiations of, any merger, sale of company assets or acquisition (including in cases of liquidation). In such case, your personal data shall continue being subject to the provisions of this Privacy Notice.

3.6. Law Enforcement Related Disclosure. We may share your personal data with third parties: (i) if we believe in good faith that disclosure is appropriate to protect our or a third party's rights, property, or safety (including the enforcement of the Terms and this Privacy Notice); (ii) as is necessary to comply with any legal and/or regulatory obligation; or (iii) when required by subpoena, court order or the order of another governmental or law enforcement authority.

3.7. Legal Uses. We may use your personal data as required or permitted by any applicable law, for example, to comply with audit and other legal requirements.

4. Security. We make efforts to follow generally accepted industry standards to protect the personal data submitted to and collected by us, both during transmission and once we receive it. However, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. As the security of information depends in part on the security of the device you use to communicate with us, please take appropriate measures to protect your device and account credential.

5. Your Rights. Subject to applicable law, you may request to see any personal data you have provided to us and request that such personal data be corrected, updated, or deleted by emailing us at info@calodar.ai. You may use "Delete account" in the app's menu to delete your account, profile, journal entries and water records from our servers and sign the app out on your device. Because the account is anonymous, it cannot be restored after deletion. Scan records are kept without your account identifier and are not deleted with your account. Deleting the app does not delete your account or data, and deleting the app or account does not cancel a subscription; cancel it in your Apple ID subscription settings.

6. Data Retention. Subject to applicable law, we retain personal data as necessary for the purposes set forth above and then delete account, profile, journal and water data upon account deletion. Scan records are kept for improvement and training and are not deleted when you delete your account. Recent scan input cached on your device for Pro Retry is usable for 24 hours and removed the next time the app starts or checks it; account deletion does not clear this cache. Unsent usage events are discarded after 24 hours. In some circumstances, however, we may store your personal data for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, audit, accounting requirements and so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your personal data or dealings.

7. Device Storage. The account credential is kept in your device's secure storage. Targets and layout preferences are also cached on your device, as is recent scan input for Pro Retry (Section 6). The app has no advertising or third-party tracking SDKs.

8. Third-Party Applications and Services. All use of third-party applications or services is at your own risk and subject to such third party's terms and privacy policies. We do not take any responsibility for the performance of other services.

9. Communications. We reserve the right to send you service-related communications, including service announcements and administrative messages, without offering you the opportunity to opt out of receiving them. Should you not wish to receive such communications, you may delete your account (Section 5). Service-related notices are given in the app.

10. Children. We do not knowingly collect personal data from children under the age of eighteen (18). The app is for users aged 18 or older. In the event that you become aware that an individual under the age of eighteen (18) is using the app, please advise us immediately.

11. Changes to the Privacy Notice. We may update this Privacy Notice from time to time to keep it up to date with legal requirements and the way we operate our business, and we will place any updates on this webpage. Please come back to this page every now and then to make sure you are familiar with the latest version. If we make material changes to this Privacy Notice, we will seek to inform you by notice on our site and/or app.

12. Comments and Questions. If you have any comments or questions about this Privacy Notice or if you wish to exercise any of your legal rights as set out herein, please contact us at info@calodar.ai.