Privacy Policy
Last updated: February 2025
1. Introduction
EzCals ("we," "our," or "us") provides a voice and text-based calorie tracking application that uses artificial intelligence to help you monitor your nutritional intake. We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have regarding your information. By using EzCals, you agree to the collection and use of information in accordance with this policy. If you do not agree with the practices described here, please do not use our application.
This policy applies to all users of the EzCals mobile application, regardless of how you access or use it. We encourage you to read this policy carefully and contact us if you have any questions.
2. Information We Collect
We collect only the information necessary to provide you with an effective calorie and nutrition tracking experience. The types of information we collect include:
Profile Information
When you set up EzCals, we ask you to provide basic profile information to personalize your experience and calculate accurate nutritional targets. This includes:
- Name or display name you choose during onboarding
- Age, biological sex, weight, and height for metabolic calculations
- Fitness goals (such as weight loss, maintenance, or muscle gain)
- Activity level to factor into your daily calorie targets
- Preferred unit system (metric or imperial)
Food Logs
The core function of EzCals is tracking what you eat. We store the following food-related data:
- Meal descriptions you provide via text, voice, or photo input
- AI-analyzed calorie and macronutrient data (protein, carbohydrates, fat)
- Timestamps indicating when meals were logged
- Meal category labels (breakfast, lunch, dinner, snack)
Weight History
If you choose to track your weight over time, we store your weight entries along with the dates they were recorded. This data is used to display progress charts and trends within the app.
Progress Photos
You may optionally take and store progress photos within EzCals. These photos are stored locally on your device by default and are never uploaded to our servers unless you explicitly enable cloud backup. We do not access, analyze, or share your progress photos.
Voice Recordings
When you use the voice input feature to log food, EzCals temporarily records your voice to transcribe what you said. Voice recordings are processed in real-time for transcription purposes only and are immediately discarded after the transcription is complete. We do not store, archive, or retain any voice recordings beyond the brief moment needed for processing.
Apple Health Data
With your explicit permission, EzCals can access certain data from Apple Health (HealthKit). This access is strictly read-only and includes:
- Step count data
- Active energy burned (calories)
- Workout history and exercise data
You are never required to grant Apple Health access, and the app functions fully without it. You can grant or revoke this permission at any time through your iOS Settings.
3. How We Use Your Information
We use the information we collect solely to provide, maintain, and improve the EzCals experience. Specifically, we use your data to:
- Provide calorie and nutrition tracking: Your food logs and profile data power the core tracking functionality, including daily summaries, macro breakdowns, and progress visualization.
- AI-powered food analysis: When you describe a meal via text, voice, or photo, the description is sent to OpenAI (for food analysis and voice transcription) and Anthropic (for food analysis) for nutritional analysis. Only food descriptions, transcribed voice text, and food photos are sent — no personally identifiable information (such as your name, email, account ID, health data, weight, or age) is attached to these requests. These providers process your data in real-time and do not store it for model training purposes.
- Calculate personalized nutrition targets: Your profile information (age, weight, height, activity level, goals) is used to calculate your recommended daily calorie and macronutrient targets using standard metabolic equations.
- Display health and fitness insights: If you grant Apple Health access, we combine your activity data with your nutrition logs to provide a more complete picture of your daily energy balance and fitness progress.
- Enable optional cloud sync: If you opt in to cloud synchronization, your data is securely synced via Supabase so you can access it across devices.
4. Apple Health Integration
EzCals integrates with Apple Health (HealthKit) to provide a more comprehensive view of your health and fitness. This integration is entirely optional and governed by strict policies:
- We request read-only access to Apple Health data. EzCals never writes to or modifies your Apple Health records.
- Access requires your explicit permission, which you can grant or deny on a per-data-type basis.
- Data types accessed include: step count, active energy burned, and workout records.
- Apple Health data is never sent to our servers or any third party. It is processed entirely on your device.
- Apple Health data is never used for advertising, marketing, or data mining.
- Apple Health data is never sold to data brokers or any other third parties.
- You can revoke Apple Health access at any time by navigating to iOS Settings > Health > Data Access & Devices > EzCals.
5. Data Storage
EzCals is designed with a local-first architecture to give you maximum control over your data:
- Local storage by default: All your data (food logs, profile, weight history) is stored locally on your device using AsyncStorage and SecureStore. This means your data stays on your device unless you choose otherwise.
- Optional cloud sync: If you enable cloud synchronization, your data is securely stored via Supabase with encryption in transit (TLS) and at rest (AES-256). Cloud sync allows you to access your data across multiple devices and provides backup protection.
- Progress photos: Photos are stored locally on your device. They are not uploaded to the cloud unless you explicitly enable cloud photo backup.
- API keys: If you provide your own API keys for AI services, they are stored in your device's Secure Store (encrypted keychain on iOS), never transmitted to our servers, and never shared with any third party.
- Security measures: We employ industry-standard security practices including encrypted data transmission, secure token storage, and regular security reviews to protect your information.
6. Third-Party Services
EzCals integrates with the following third-party services to provide its functionality. Each service has its own privacy policy governing how they handle data:
- OpenAI (GPT): Used for AI-powered food and nutritional analysis, and voice transcription. Only food descriptions, transcribed voice text, and food photos are sent for processing. No personal identifiers (name, email, account ID, health data, weight, or age) are included. Data is processed in real-time and is not retained for model training. Privacy policy: https://openai.com/privacy
- Anthropic (Claude): Used for AI-powered food and nutritional analysis. Only food descriptions, transcribed voice text, and food photos are sent for processing. No personal identifiers (name, email, account ID, health data, weight, or age) are included. Data is processed in real-time and is not retained for model training. Privacy policy: https://www.anthropic.com/privacy
- Supabase: Provides optional cloud database synchronization and user authentication. Only used if you enable cloud sync. Privacy policy: https://supabase.com/privacy
- RevenueCat: Manages subscription billing and entitlements. Processes purchase receipts and subscription status. Does not receive your health or nutrition data. Privacy policy: https://www.revenuecat.com/privacy
- Apple: The App Store handles app distribution and payments. HealthKit provides health data integration. StoreKit manages in-app purchases. Apple's privacy policy applies to these services: https://www.apple.com/privacy
7. What We Don't Do
We believe your health data is deeply personal. To be explicit about our commitments, here is what EzCals does not do with your data:
- We never sell your personal data. Your information is not sold, rented, or traded to any third party, data broker, or advertiser under any circumstances.
- No advertising or ad tracking SDKs. EzCals does not contain any advertising frameworks, ad networks, or tracking pixels. We do not display ads and do not share data with advertisers.
- No behavior analytics or user profiling. We do not track your in-app behavior, build user profiles, or perform analytics on how you use the app beyond what is necessary to provide the service.
- No data broker sharing. Your data is never shared with data aggregators, data brokers, or any companies that compile consumer profiles.
- No social features that expose your data. EzCals does not have social features, leaderboards, or shared profiles. Your nutrition and health data is visible only to you.
8. Data Retention
We retain your data only as long as necessary to provide you with the EzCals service:
- Local data: Data stored on your device persists until you manually delete it within the app or uninstall EzCals. Uninstalling the app removes all locally stored data from your device.
- Cloud data: If you have enabled cloud sync, your data persists on our servers until you request its deletion. You can request deletion of all cloud-stored data at any time.
- Account deletion: When you request account deletion, all cloud-stored data associated with your account will be permanently removed within 30 days of your request.
- Voice recordings: Voice recordings are ephemeral. They exist only for the brief duration needed to perform transcription and are immediately discarded afterward. No voice data is retained.
- AI processing data: Food descriptions sent to AI providers for analysis are processed in real-time and are not retained by EzCals after the analysis is complete. Refer to our AI providers' privacy policies for their retention practices.
9. Your Rights
You have significant control over your data within EzCals. Your rights include:
In-App Controls
- Delete individual food entries, weight records, or progress photos at any time directly within the app
- Delete all data at once through the Settings screen
- Export your data, including food logs and weight history, for your personal records
- Revoke Apple Health access at any time through iOS Settings
- Disable cloud sync to keep all data local to your device
GDPR Rights (European Economic Area)
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access: You can request a copy of all personal data we hold about you.
- Right to rectification: You can request correction of any inaccurate personal data.
- Right to erasure: You can request deletion of your personal data.
- Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
- Right to object: You can object to the processing of your personal data in certain circumstances.
- Right to restrict processing: You can request that we limit how we use your data.
CCPA Rights (California)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know: You can request information about the categories and specific pieces of personal data we have collected about you.
- Right to delete: You can request that we delete your personal data.
- Right to opt-out: You have the right to opt out of the sale of your personal information. However, we do not sell personal information, so this right is already honored by default.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise any of these rights, please contact us at privacy@ezcals.com. We will respond to your request within 30 days.
10. Children's Privacy
EzCals is not directed at children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 years of age. If you are a parent or guardian and you believe that your child under 13 has provided us with personal information, please contact us immediately at privacy@ezcals.com.
If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to delete that information from our systems as quickly as possible.
Users between the ages of 13 and 18 may use EzCals with the consent and supervision of a parent or legal guardian.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.
If we make material changes that significantly affect how we handle your personal information, we will notify you through a prominent notice within the EzCals app before the changes take effect. We may also send you a notification through the app if appropriate.
Your continued use of EzCals after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to periodically review this page for the latest information on our privacy practices.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@ezcals.com
For data access, rectification, deletion, or portability requests, please email us at the address above. We will acknowledge your request within 48 hours and aim to resolve it within 30 days. If we need additional time, we will notify you of the reason and expected timeline.