Privacy Policy

Last updated 1 October 2026

What we collect

To provide Cal Habibi’s food-tracking features we collect the profile information you enter (goal, height, weight, activity level and similar), the food, water, weight and exercise entries you log, the photos you take or choose to scan food, progress photos you add, and your account details (name, email, and the sign-in method you use). If you connect Apple Health or Health Connect, we read the active energy you authorise and write the weight and water you log. If you subscribe, we keep a record of the purchase so your plan works on every device.

How we use it

Your data is used to calculate your calorie and macro targets, recognise food from photos, barcodes and nutrition labels, track your progress over time, run Circles, send the reminders and notifications you turn on, and keep the app working. We do not sell your personal data, and we do not use it for advertising.

Who processes it for us

• Appwrite (hosted in Frankfurt, Germany) stores your account and everything you log.
• OpenAI receives a meal photo, and any note you add to it, when you ask the app to estimate it — see AI food recognition. With your permission, it also checks a new profile photo before Circle members can see it — see Circles.
• Open Food Facts receives the barcode number when you scan a packaged product. Nothing else is sent with it.
• Apple or Google turn speech into text when you log by voice, using your phone’s built-in speech recognition. The recording is not sent to us.
• Apple App Store and Google Play handle subscription payments. We receive a confirmation of the purchase, never your card details.
• Firebase Cloud Messaging (Google) delivers push notifications to your device.
• PostHog (EU-hosted) and Sentry receive app analytics and crash reports — see App analytics and crash reports.

AI food recognition

When you scan a meal, read a nutrition label, ask for an estimate from a photo, or describe a correction, the photo and any note you add are sent to OpenAI, which processes them on our behalf and returns the estimate. The app asks for your permission before anything is sent for the first time, and you can withdraw it at any time in Profile → Preferences → Privacy → AI photo analysis. Without it, barcode scanning and logging food yourself still work. Meal photos are stored in your own account, visible only to you, and are deleted with it.

Circles

If you join or create a Circle, the other members of that Circle can see your first name, your Circle photo if you set one, your points, rank and streak. They never see your calories, weight, meals or photos of your food. Circle names, first names and Circle photos are checked automatically for objectionable content before other members see them (photos are checked by OpenAI’s moderation service, on our behalf). The app asks for your permission before a profile photo is sent for this check, separately from meal photos; without it, Circles show your initials instead, and you can withdraw it in Profile → Preferences → Privacy → Profile photo checks. If the check can’t be completed, the photo is not shared and your previous photo stays. Members can report a name, photo or Circle they find objectionable, and can hide another member so they no longer see their name or photo. We review reports within 24 hours and may remove the content, rename a Circle, or remove access. A report keeps a copy of the name and photo reference that were reported, so we can act on it even if they change; reports are kept while we need them to handle the problem, and the reports you file are deleted with your account.

App analytics and crash reports

The app sends PostHog (EU servers) which screens and features you use, linked to your account ID, so we can see what works and fix what doesn’t. It is never used for advertising or combined with data from other companies. You can turn it off at any time in Profile → Preferences → Privacy → Share usage analytics; from then on nothing more is sent.

If the app crashes, Sentry receives the error, the device model and system version, and the screens that led up to it. The app does not attach your account ID, name, email or IP address to a crash report, and never includes what you typed.

Cookies & analytics

This website uses two analytics tools. PostHog runs for every visitor, without cookies. Google Analytics uses cookies, so it only runs if you choose "Accept" on the cookie banner — choosing "Reject" keeps it off.

PostHog counts which pages are visited and which of the site's main buttons are clicked, so we can see what's working. It sets no cookies, stores nothing on your device, creates no profile of you, and doesn't link one page visit to another. Like any website request, it receives your IP address, which it uses to estimate your country and city. It's hosted on PostHog's EU servers, and no data is transferred outside the EU.

Google Analytics records page views along with automatic interaction events — scrolling, clicking a link that leaves the site, on-page search, video plays, and file downloads — plus which of the site's main buttons you click. Unlike PostHog, Google processes this data on servers outside the EU as part of its standard international infrastructure.

PostHog keeps website events for one year, after which they no longer appear in any report. Google Analytics keeps event data for 2 months, and data tied to a visitor's cookie for 14 months after their last visit; its aggregated reports, which contain no visitor-level detail, may be kept longer. Neither tool is used to build advertising profiles or to track you across other websites or apps.

You can change your Google Analytics decision at any time — click Cookie Settings in the footer of any page to reopen the banner.

How long we keep it

We keep your account and the data you log until you delete it or delete your account. App analytics events are kept for one year, after which PostHog no longer includes them in any report; deleting your account erases them sooner. Crash reports are kept for up to 90 days and then expire. Website analytics are kept as described under Cookies & analytics.

Your choices

You can edit or delete anything you’ve logged from inside the app. You can also delete your whole account from inside the app — open Profile → Personal details → Delete Account. Step-by-step instructions, including how to ask us when you can’t open the app, are on Delete your account. That removes your account and the data we hold for it, including your photos and Circle memberships, and it is available whether or not you have a subscription. If you signed in with Apple, we also ask Apple to revoke Cal Habibi’s access. Deleting your account does not cancel an App Store or Google Play subscription — cancel it in your store account so you aren’t charged again. We also ask PostHog to erase your analytics profile and every usage event recorded under your account ID; if PostHog can’t be reached, we keep retrying until it is done. If you can’t reach the app, contact us at the address below and we will delete your account for you.

Age

Cal Habibi is for people aged 16 and over. We don’t knowingly collect data from anyone younger; if you believe a child under 16 has an account, write to us at the address below and we will delete it.

Contact

Questions about this policy: privacy@calhabibi.com