CalActive Privacy Policy

Effective date: October 22, 2026

CalActive ("CalActive", "we", "us") is an iPhone app that helps you track what you eat, plan and follow short workouts, and see your progress. This policy explains what information the app collects, why, who it is shared with, and the choices you have.

CalActive is operated by MENG-WEI SHEN, an independent developer. For any privacy question or request, email [email protected].

1. Information you give us

Account information. Your email address and a password. Passwords are stored by our authentication provider in hashed form; we cannot read them.

Profile and goals. The answers you give during setup and in Settings: gender, date of birth, height, weight, target weight, weight goal (lose, maintain or gain), how often you work out, your unit system, your weekly workout calorie targets, and whether you want reminders. We use these to calculate your personal daily calorie and protein, carb and fat targets.

What you log.

• Meals: food name, calories, protein, carbs, fat and the time you ate it
• Foods you save or create (My Food, custom foods)
• Weight entries
• Exercise and activities: name, duration, calories burned and time
• Workouts generated for you, which ones you completed, and your streaks

We also keep monthly summaries of your meals and exercise so your long-term trends load quickly.

Messages to us. If you email us, we receive your email address and whatever you write.

2. Food photos, descriptions and barcodes

AI food analysis. When you take or choose a photo of a meal or a nutrition label, or type a description of what you ate, the app sends that photo or text through our server to a third-party AI service, which returns an estimate of the food and its nutrition. Only the photo or text you submit is sent to the AI service; your name and email address are not. We store the resulting estimate in your meal log if you save it; we do not store your food photos on our servers. The AI service processes this content to provide the analysis under its paid API terms, which do not allow it to use the content to train its models.

Photos on your device. The app keeps a copy of your meal photos on your iPhone so you can see them in your history. They are not uploaded to our servers, and they are removed when you delete the app.

Barcodes. When you scan a barcode, the app looks the barcode number up in a public food database. Only the barcode number (and, as with any internet request, your device's IP address) is sent.

AI and database results are estimates and can be wrong. Please review them before saving.

3. Apple Health

If you give permission, CalActive reads your step count from Apple Health to show your daily steps. CalActive does not write to Apple Health.

Your Apple Health data:

• is read and displayed on your device and is not sent to our servers;
• is never sold, shared with third parties, or used for advertising or marketing;
• can be turned off at any time in the iPhone Settings → Health → Data Access & Devices → CalActive.

4. Camera, photos and notifications

• Camera and photo library access are used only when you choose to photograph or pick a food photo or nutrition label, or scan a barcode. CalActive does not record audio or video.
• Notifications are scheduled on your device, for example a reminder before your free trial ends. We do not collect a push notification token.

5. Subscriptions and payments

Subscriptions are purchased through Apple using your Apple Account. We never receive your payment card details.

To manage subscriptions we use:

• A subscription management service, which processes your purchase and subscription status (product, price, store, country, purchase and renewal dates, trial status) together with an app user ID. Before you create an account this ID is random; afterwards it is your CalActive account ID. This service sends us subscription events, which we store to keep your access up to date.
• A subscription screen service, which shows the subscription screen and records how you interact with it (for example, which plan you viewed or chose), together with the same app user ID and basic device information such as device model, OS version and app version.

6. Information collected automatically

• IP address and request time for each AI food analysis, used to limit usage and prevent abuse.
• Server and network logs kept by our hosting and content-delivery providers (for example IP address, time and requested resource), used to run and secure the service.
• Workout videos are streamed to the app through temporary, private links.

We do not use third-party analytics or advertising SDKs, we do not access your device's advertising identifier, and we do not track you across apps or websites owned by other companies.

7. How we use information

We use the information above only to:

• provide the app: your targets, logs, workouts, progress and history;
• analyze food photos and descriptions you submit;
• manage your subscription and access;
• keep the service secure, prevent abuse and enforce usage limits;
• respond to your messages and requests;
• comply with the law.

We do not sell your personal information and we do not use it for advertising.

8. Who we share it with

We share information only with service providers who process it on our behalf to run CalActive, and only as needed:

Each of these providers is required to protect your information in a way that is the same as or equal to the protection described in this policy.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the service, in which case this policy will continue to apply.

9. Where your data is stored

Our providers may store and process your information on servers outside your country, including in the United States. Where data protection law requires, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

10. How long we keep it

We keep your account information, logged data and AI-request records for as long as your account exists. When you delete your account, they are deleted from our systems right away; copies in our hosting provider's backups are overwritten as part of its regular backup cycle. Records of subscription purchases may be kept, no longer linked to your account, where required for accounting or legal reasons.

11. Deleting your account

You can delete your account and its data at any time in the app: open the menu (☰) on the Home screen and tap Delete Account. You can also email [email protected] from your account's email address. Deleting your account also removes the meal photos and cached data the app stored on your device.

Deleting your account does not cancel an Apple subscription. To stop being charged, cancel it in your iPhone Settings → [your name] → Subscriptions.

12. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to its use, and to withdraw consent. Most of your data can be viewed and edited directly in the app. For anything else, email [email protected] and we will respond within the time the law requires.

If you are in the EEA, UK or Switzerland: we process your information to provide the service you asked for (contract), with your consent for health information such as weight and activity (you can withdraw it at any time by deleting the data or your account), and for our legitimate interest in keeping the service secure. You can also complain to your local data protection authority.

If you are in California: we do not sell or share your personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes other than providing the app.

13. Children

CalActive is not intended for anyone under 16, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

14. Security

We protect your information with encryption in transit, access controls that limit each account to its own data, and reputable infrastructure providers. No system is perfectly secure, so please use a strong, unique password.

15. Changes to this policy

If we change this policy, we will update the effective date above and, for significant changes, tell you in the app before they take effect.

16. Contact

MENG-WEI SHEN
[email protected]