Privacy Policy

Updated 2026-10-21. Calomin operates Calomin. Contact for privacy requests: info@fitresol.com.

Information we process

We process account name and email, securely hashed passwords, session identifiers, session IP address and browser/device information; age, sex, height, weight, activity level, goals, dietary preferences and allergies; food diary entries, descriptions, corrections, saved meals, nutrition targets, water logs and progress history. These records are linked to your account to provide your diary, recommendations and data export.

We also process feature interactions, scan timings and error/performance reports to operate and improve the service. These can be linked to your account. We do not use advertising identifiers, sell personal data, or track you across other companies’ apps or websites for advertising.

AI processing is optional

We ask before your first AI request. Meal photographs, typed meal descriptions, or meal-planning preferences are sent securely to OpenAI to identify food or generate meal suggestions. Planning inputs can include dietary preferences, allergies, avoided foods, recent food habits, and remaining calorie and protein budgets. Manual search, barcode lookup and manual logging remain available without AI sharing. Reset AI sharing consent under Profile → Privacy to require permission again.

Calomin processes meal images in memory and does not store the photographs in its database or diary. We retain descriptions, generated food estimates, and corrections with your account. OpenAI’s processing and retention are governed by its API terms; this policy does not promise that images are never retained by the processor. See OpenAI privacy information and API data controls.

Other service providers

Hosting/database providers process account and diary records to operate Calomin. The configured email delivery provider processes your email address and verification or password-reset messages. If you choose Sign in with Apple or Google, that provider confirms your identity and shares your name and email address (or an Apple private relay address) with Calomin; Calomin never receives your Apple or Google password. Food names or barcodes may be sent to USDA FoodData Central or Open Food Facts for nutrition lookup. No meal photo is sent to those nutrition databases. Barcode recognition on iOS uses Google ML Kit on the device; its SDK may process operational diagnostics under its own terms. Providers’ processing must be limited to delivering and protecting the service under applicable agreements.

Device permissions and health data

The camera is used only when you choose meal photography or barcode scanning. The photo picker receives the meal image you select. You can refuse access and use text or manual logging instead, and revoke permissions in device Settings. This iOS release does not read Apple Health or HealthKit. Manual weight, nutrition and hydration entries are still health-related data.

On Android, optional Health Connect can import weight, steps, active energy, workouts, sleep and resting heart rate after permission. Imported health information is stored with your account for progress, recovery context and target suggestions. Disconnect stops future sync; Delete imported health data removes imported Calomin records without deleting source data. Previously imported records may be visible when you sign into the same account on iOS. Health data is not sold or used for advertising.

Retention, deletion and your choices

We keep account and diary records while your account is active so your history remains available. Profile → Privacy → Download my data exports account records. Delete my account permanently removes your active account and its associated diary/profile records. Some operational records may remain without an account identifier. Backups and provider logs can remain until their operational retention periods expire; they are not used to restore a deleted account for normal use. Ask us for details or help through the contact above.

Depending on your location, you may request access, correction, portability, deletion, restriction or objection to processing, withdraw consent, and complain to your local data protection authority. Contact us to exercise these rights. Service delivery, optional consent, and legitimate service/security needs provide the applicable bases for processing. Our providers may process information outside your country; applicable transfer protections must be in place.

Security, age and changes

We use HTTPS, access controls and password hashing. No service can guarantee absolute security. Calomin is intended for adults and is not directed to children. It provides general wellness information, not medical care. Material privacy changes will be reflected here with a new update date and additional notice or consent where required.