Privacy Policy
Last updated: 1 October 2026
The short version
- No account. We never ask for your name or email.
- Our server knows the app only by a random ID created on your phone.
- Meal photos you scan, and meals you describe, go through our server to Google's Gemini AI for analysis. Our server doesn't store them. Only a small thumbnail of a photo stays on your phone. Spoken descriptions are turned into text on your phone; the audio never leaves it.
- Your food diary, water, fasts, weight, goals and profile stay on your phone.
- Apple Health sync is optional. Its data stays on your phone and in Apple Health, and never goes to our server.
- No ads, no tracking, no selling of data, and no analytics or advertising SDKs in the app.
- You can delete your data at any time in the app: Me → Delete my data.
1. Who we are
CalWiz is published by Anas Alradhwan, an individual developer based in the State of Kuwait (“we”, “us”), who is the seller shown on its App Store page and is responsible for the data described here. This policy covers the CalWiz iPhone app, its widgets and Apple Watch app, this website and the server the app talks to. Questions: use the contact form on our Support page.
2. What we collect and why
An anonymous app ID
When you first open CalWiz, the app creates a random ID and keeps it in your iPhone's Keychain, so it survives reinstalling the app. It isn't linked to your name, email, phone number or Apple ID. The app sends it with each request so our server can count your free scans, apply your subscription and fair-use limits, and stop abuse. RevenueCat (see “Purchases”) uses the same ID.
Meal photos you scan
Before your first AI scan, the app asks for your permission. When you then snap or pick a meal photo, the app sends a downscaled copy over an encrypted connection to our server, which runs on Cloudflare. Our server passes it to Google's Gemini API (Google LLC, USA), which estimates the foods, portions, calories and macros, and sends the answer back to your phone. Our server doesn't store the photo or the answer and doesn't log them. Google receives the photo from our server, not from your phone, so Google doesn't see your IP address.
We use Google's paid Gemini API. Under Google's terms for paid services, Google doesn't use the photos, descriptions or answers to improve its products; it logs them for a limited time only to detect abuse and meet legal obligations. Our server sends Google the photo or the words, our instructions and your optional note, never your app ID.
On your phone, CalWiz keeps only a small thumbnail of the meal next to your diary entry. Please photograph only your food: no people, documents or anything private.
Meals you describe (typed or spoken)
When you describe a meal in words, the app sends that text, never audio, to our server and on to Google's Gemini API in the same way as a photo, with the same permission step and the same handling. If you speak instead of typing, Apple's speech recognition turns your words into text on your iPhone. CalWiz uses voice only where your iPhone can do this on the device, so the audio never leaves your phone.
Food search
When you search for a food, the words you type go (a) from your phone directly to the Open Food Facts search service, which sees your IP address as any website would, and (b) to our server, which asks USDA FoodData Central (the U.S. Department of Agriculture's public food database) for matches. Our server sends USDA only the search words, never your app ID. To answer faster and send fewer requests, it keeps the USDA results for up to 7 days, stored under a scrambled (hashed) form of the search words and not linked to you.
Nutrition labels
When you scan a nutrition label, Apple's text recognition reads it on your iPhone. The label photo isn't sent anywhere.
Barcodes
When you scan a barcode, the app looks up that product number directly at Open Food Facts, a non-profit food database based in France. Your phone connects to Open Food Facts itself, so it sees your IP address, as any website would. No photo is sent for a barcode lookup.
Purchases
Subscriptions are sold and billed by Apple. We never see your payment details. RevenueCat, Inc. (USA) receives purchase and receipt data from Apple, together with your anonymous app ID, so it can manage your subscription and tell our server whether you have CalWiz Pro. RevenueCat also gives us combined subscription reports (for example, how many trials turn into paid plans), made from these purchase records.
App integrity
CalWiz uses Apple's App Attest to check that requests come from the genuine app. This uses a security key created on your device and contains no personal information.
Apple Health (optional)
Only if you turn on Sync with Apple Health and allow access, CalWiz saves the meals (energy, protein, carbohydrates, fat, fibre, sugar and sodium), water and weight you log to Apple Health, and reads weight entries from your other apps and today's active energy. This data stays on your iPhone and in Apple Health. CalWiz never sends Apple Health data to its server, never uses it for advertising, and never shares it. You can turn syncing off in the app, and manage or delete the data in the Health app.
Location
CalWiz doesn't collect your location.
Reminders, widgets, Siri and Apple Watch
Reminders are scheduled on your iPhone. Widgets, Siri and Shortcuts, and the Apple Watch app show a small summary of today (energy, macros, water, a running fast and your recent meals) that stays on your devices. The Watch gets it directly from your iPhone through Apple's WatchConnectivity, not through our server.
The contact form
When you write to us with the form on our Support page, our server stores the topic you pick, your message and, only if you choose to give them, your email address (so we can reply) and your app version. It doesn't store your IP address with the message; Cloudflare processes it briefly to apply a rate limit against spam. Messages are deleted automatically after 12 months. Please don't put health details or anything private in a message.
Statistics from Apple
If you have chosen to share analytics with app developers in your iPhone's settings, Apple may give us anonymous, combined statistics about app usage and crashes.
3. What stays on your phone
Your profile and plan (goal, birth year, sex, height, weight, activity level and daily targets), your food diary, favourites and meal thumbnails, your water and fasting logs, your weight log, your reminder choices, and your progress (streaks, XP and levels) are stored only on your phone. We don't receive them. If you back up your iPhone to iCloud or a computer, that backup includes your profile answers and plan (goal, birth year, sex, activity level, pace and daily targets), your diary, favourites and meal thumbnails, water and fasting logs, settings and progress, under Apple's terms. Your height, weight, goal weight, weight log and weekly check-ins are left out of every backup, so they stay only on this iPhone. On a new iPhone, CalWiz asks you to enter them again, and if you sync with Apple Health it reads your weight entries back from Apple Health.
4. What our server keeps, and for how long
Our server never stores photos, meal descriptions, your diary, your Apple Health data or IP addresses. Apart from the records below, the only things it keeps from a request are the food search cache, which isn't linked to you, and messages you send us with the contact form. Cloudflare processes IP addresses briefly to protect the service and to apply rate limits (counters that last about a minute).
| Data | Why | How long |
|---|---|---|
| Anonymous app ID | Connects the records below | As long as those records exist |
| Subscription status (Pro or not, plan, trial, expiry date) | Unlock CalWiz Pro | While relevant, and up to 180 days after it ends |
| Scan counts | The free scans and fair-use limits | Hourly and daily counts: about 2 days. Total count: until you delete your data |
| App Attest key and counter | Keep fake apps and bots out | Until unused for 180 days |
| One-time security codes | Set up App Attest | 5 minutes |
| Subscription update IDs from RevenueCat | Apply each update only once | 60 days |
| Food search results from USDA, stored under a hashed form of the search words (no app ID) | Faster answers, fewer requests to USDA | Up to 7 days |
| Contact form messages: topic, message, and your email and app version if you give them (no IP address) | Answer your question | 12 months |
| Technical log lines: error codes, response statuses and the AI provider's name (no photos, words, app IDs or IP addresses) | Find and fix problems | Up to 7 days |
5. What we don't do
- No advertising and no advertising SDKs.
- No tracking across other companies' apps or websites.
- No selling or sharing of personal information.
- No analytics or advertising SDKs. RevenueCat’s subscription reports (see “Purchases”) are the only statistics we get from a service provider.
6. Legal bases
Where laws such as the EU or UK GDPR apply, we process data to provide the service you ask for (meal analysis and your subscription), with your consent for sending meal photos or descriptions to the AI, for our legitimate interests in keeping the service secure and free of abuse, and to meet legal obligations. You can withdraw your consent by not using AI scans; barcode and manual logging keep working.
7. Where data is processed
Our service providers process data in the United States (Cloudflare, Google, RevenueCat) and the European Union (Open Food Facts), and Cloudflare's and Google's networks operate worldwide. Where required, these transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
8. Your choices and rights
- Delete my data. In the app, open the Me tab and tap Delete my data. This erases the records our server keeps for your app ID (scan counts, subscription status and App Attest keys) and the data on your phone. Photos are never kept on our server, so there are none to delete there.
- Subscriptions. Deleting your data doesn't cancel a subscription. To manage or cancel it, open Settings on your iPhone, tap your name, then Subscriptions. Apple and RevenueCat keep purchase records under their own policies.
- Your rights. Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict its use, to withdraw consent, and to complain to your data protection authority. Because we don't know who you are, “Delete my data” is the quickest route. For anything else, use the contact form.
9. Children
CalWiz is for people 18 and over only, and it is rated 18+ on the App Store. It isn't directed to children or teenagers, and we don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has sent us personal information, contact us and we will delete it.
10. Security
All connections are encrypted (HTTPS). Keys for our providers stay on our server and are never in the app, and App Attest and rate limits help keep automated abuse out.
11. Changes
If this policy changes, we will post the new version here with a new date at the top.
12. Contact
Anas Alradhwan, State of Kuwait. Write to us with the contact form on our Support page.