Privacy Policy

1. Who We Are

CalScan ("we", "our", or "us") is an AI-powered nutrition tracking app available on iOS and Android. Our service is accessible at calscan.co. If you have any questions about this policy, contact us at samuelxhang@gmail.com.

2. What Data We Collect

We collect only what is necessary to provide the service:

• Device identifier — an anonymous random ID generated on your device to link your subscription and usage data. This is not tied to your name or identity.
• Food photos — images you submit for nutritional analysis. These are sent to our AI model for analysis and are not stored permanently.
• Meal log data — food names, calorie and macro values, timestamps. Stored locally on your device.
• Subscription email — if you subscribe via Stripe, Stripe collects your email and payment details. We receive your email only if you use the "Restore Purchases" feature.
• Usage events — anonymous events (e.g. "paywall shown", "scan completed") to understand how the app is used. No personal data is attached.

3. How We Use Your Data

• To analyze food photos and return nutritional information.
• To manage your Pro subscription status.
• To restore your subscription after a reinstall using your email.
• To improve the app based on anonymous usage patterns.

We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

We use the following third-party services:

• Stripe — payment processing. Your card details are handled entirely by Stripe and never touch our servers. Stripe Privacy Policy →
• Anthropic Claude API — AI model used for food analysis and nutrition coaching. Photos are transmitted securely and not retained by us after analysis.
• MongoDB Atlas — database storing subscription records (device ID + Stripe customer ID + subscription status).
• Railway — cloud hosting for our backend server.

5. Data Storage & Security

Your meal log, profile, and settings are stored locally on your device using encrypted storage. We do not have access to this data.

Subscription data (device ID, Stripe customer ID, subscription status) is stored in our MongoDB database hosted on MongoDB Atlas with encryption at rest.

Your device ID is stored in your device's secure Keychain (iOS) or EncryptedSharedPreferences (Android) so it survives reinstalls for subscription restore purposes.

6. Data Retention

• Food photos — not stored after analysis is complete.
• Subscription records — retained while your account is active and for up to 90 days after cancellation.
• Usage events — retained for up to 12 months in aggregated form.

7. Your Rights

You have the right to:

• Delete your data — use "Reset All Data" in the app settings, or contact us and we will delete your subscription record from our database.
• Access your data — contact us to request a copy of any data we hold about your device ID.
• Data portability — export your meal log as CSV directly from the Profile screen in the app.

8. Children's Privacy

CalScan is not directed at children under 13 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of CalScan after changes constitutes acceptance of the updated policy.

10. Contact Us