Privacy Policy

Calories and Tracking (CAT)
Effective date: 5 August 2026
Last updated: 5 August 2026

This Privacy Policy explains how the mobile application Calories and Tracking ("the App", "we", "us") handles your information. Please read it together with our Terms of Use.

1. Who is responsible for your data

The data controller for the purposes of the EU General Data Protection Regulation (GDPR) is:

Petra Cackov, an individual developer based in Slovenia.
Contact: support@petra.codes

2. Information we process

2.1 Data you enter and that stays on your device

The following information is created by you and stored locally on your device (including in an app group container so features and widgets can share it). It is not transmitted to us:

• Profile details you provide during onboarding, such as age, height, weight, biological sex, activity level and calorie or nutrition goals, used to calculate your targets.
• Food and meal logs, including items, quantities, meals and the days you record them.
• History and preferences, such as your saved days and in-app settings.

Because this data lives on your device, it is included in your device backups (for example iCloud or iTunes backups) according to your own device settings. It is governed by Apple's terms, not by us.

2.2 Health data (Apple Health / HealthKit)

If you grant permission, the App reads your Active Energy Burned from Apple Health so it can factor your activity into your daily calorie balance. This access is read only. We do not write data back to Apple Health, and this health information is used only on your device to show your totals. It is never sent to our servers or to any third party. You can revoke this access at any time in the iOS Health app or Settings.

2.3 Food search and meal photo analysis

Some features require sending data to a processing service so the App can return a result:

These requests are processed to generate a response and are not retained on our backend afterwards. Meal photos are sent to OpenAI, which processes the image on our behalf to produce the estimate (see Section 4). Sending a photo is always your choice: no image leaves your device unless you start an analysis.

2.4 Subscriptions and payments

Subscriptions (monthly or yearly) are purchased and managed entirely through the Apple App Store. Apple processes your payment and manages the subscription. We never receive or store your payment card details. We only receive the transaction and entitlement information Apple provides so the App can unlock paid features.

2.5 Notifications

If you enable reminders, the App schedules local notifications on your device. These are generated on the device and do not involve sending your data to us. You can turn them off at any time in iOS Settings.

2.6 Data we do not collect

We do not require an account, and we do not collect your name, email address, phone number or precise location. The App does not include third-party advertising or analytics trackers.

3. Legal bases for processing (GDPR)

• Performance of a contract (Art. 6(1)(b)): processing your food search and photo analysis requests so the App can provide the features you ask for.
• Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)): reading Active Energy Burned from Apple Health, which is health data. You may withdraw this consent at any time.
• Legitimate interests (Art. 6(1)(f)): keeping the App secure and functioning correctly.

4. Service providers (processors)

We rely on a small number of providers who process data only to deliver the App's features:

• Apple: operating system services, App Store subscriptions and, if you enable it, Apple Health access. Apple acts under its own privacy policy.
• OpenAI: analyzes meal photos you submit in order to estimate the food and its nutrition. Photos are processed to return a result and are handled under OpenAI's terms and privacy policy.
• Our processing backend: receives food search text and photos to generate results and does not retain them afterwards.

5. International transfers

OpenAI is based in the United States, so when you analyze a meal photo the image may be processed outside the European Economic Area. Such transfers rely on the safeguards offered by the relevant provider, such as the EU Standard Contractual Clauses, where applicable.

6. Data retention

• Data stored on your device (Section 2.1) remains until you delete the entry, clear the data, or delete the App.
• Search text and photos sent for processing (Section 2.3) are used only to produce a response and are not stored on our backend afterwards.
• Subscription and transaction records are retained by Apple according to Apple's policies.

7. Your rights

Because we do not hold your personal data on our servers, most of your data is under your direct control on your device: you can view, edit and delete your logs and profile in the App at any time, and deleting the App removes the local data it created.

Under the GDPR you also have the rights to access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with a supervisory authority (in Slovenia, the Information Commissioner, Informacijski pooblascenec). To exercise any right or ask a question, contact support@petra.codes.

8. Children

The App is not directed to children under the age of 16. We do not knowingly process data from children. If you believe a child has used the App, please contact us.

9. Security

We keep the data footprint small by design: no accounts and no server-side storage of your logs. Requests to our services are made over encrypted connections (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, provide a notice in the App. Continued use of the App after an update means you accept the revised policy.

11. Contact

Questions about this Privacy Policy or your data can be sent to support@petra.codes.

Calories and Tracking. Provided by Petra Cackov, Slovenia. This document is provided for transparency and does not constitute legal or medical advice.