Calomind (食算) estimates the calories and nutrients of your meals from photos. Contact: [email protected]
Account: your email and password. We only store a one-way hash of your password — we can't see it. If you sign in with Apple, we only receive an Apple account identifier and an email address (which can be Apple's private relay address).
Meal photos: uploaded to our server only while being analyzed, passed to the AI service, then discarded. We do not store your photos on our server (except a smaller copy of the photos a subscriber chooses to share with friends, and subscribers' meal photo cloud backup, see below). A note you write for the AI before taking the photo (only if you write one) is sent to the AI service along with the photo; our server doesn't store it either.
Analysis results (dish names, portions, calories and nutrients as text): kept on our server for 7 days so a retried request isn't charged twice, then deleted.
Feedback on estimates (only if you send it): the AI's numbers, the numbers you corrected, what you say was wrong and your note. A nutrition label or scale photo you attach is sent to the AI service only to read the numbers and is not stored; we keep only the numbers it read. We use feedback to improve estimates.
Name and portion corrections (only when you rename a dish or change its weight or portion): what the AI estimated (name, grams, calories) and what you changed it to, as text. Used to find foods the AI often gets wrong and improve recognition. Not linked to your photos; unlinked from your account when you delete it.
Daily wrap-up tips (members, when you tap the button or turn on the automatic wrap-up): the names, grams and calories of the foods you logged that day, that day's meal notes and day note (including quick tags, if you wrote any), your targets and activity, sent as text to the AI service to write short tips. Tips you request are kept on your phone. If you turn on the automatic wrap-up, your meal names, calories, nutrients and daily targets for the last 7 days are kept on our server (up to 30 days, like meals shared with friends) so the wrap-up can be written at your chosen time and sent as a notification; those wrap-ups are kept on our server for up to 30 days and are deleted with your account. Notes are never sent to the automatic wrap-up.
Meal notes and day notes (including quick tags, only if you write them): stored on your phone and, while you're signed in, included in your account's cloud backup. They are sent to the AI service only in two cases: a note you write for the AI before taking a photo is sent with that photo for analysis (and then saved as that meal's note); and when a member uses the AI daily wrap-up tips, that day's meal notes and day note (including quick tags) are sent with the food log to write the tips. In both cases our server only passes them on and doesn't keep any other copy of the notes.
Hand size (if you calibrate it): stored on your phone and sent with a photo only as a size reference for the AI.
Profile and meal log (height, weight, age, sex, activity, goals, your records, daily water intake): stored on your phone. While you're signed in, a text copy (no photos) is backed up to our server so you can restore it on a new phone; we keep the latest two copies and don't read them for any other purpose. Meal photos stay only on your phone, unless you're a subscriber (meal photo cloud backup and photo sharing with friends, see below).
Weight, body composition, sleep and activity (only if you connect Apple Health or Health Connect): weight, body fat, basal metabolic rate, lean/bone/water mass, sleep sessions (start, end, stages) and daily step count, active energy and workouts (type, time, duration, calories), used to raise your calorie goal on active days and estimate your calorie balance. Read-only, never written back. A copy of the readings (time, value, source app) is kept on your phone and included in the same text backup, so your history follows your account to a new phone, including between iPhone and Android. Never shared with third parties or used for ads; deleted with your account.
Usage records: time, count and cost of each AI analysis, used for free-quota counting and abuse prevention.
Days you logged a meal: the date and the time of the first meal you logged that day (no meal content), used to count your logging streak and its bonus analyses. Deleted with your account.
Friends (only if you add friends): your friend code (also your invite code), your nickname (by default the first half of the part of your email before the @; you can change it), your friend list, friend requests and the people you've blocked. Friends only see your nickname, never your email. If you block someone, they're removed from your friends, can't see what you share, can't send you friend requests, and your invite code doesn't work for them (no bonus, no friend request).
Meals shared with friends (only if you have friends and sharing is on): by default only each meal's dish names, calories, meal type and time, plus that day's calorie target (to show whether you went over). Protein, carbs, fat, fiber and their targets are shared only if you turn on “Share nutrients”. The last 7 days of this text are uploaded to our server, visible only to your friends (people you've both confirmed: one of you sent a friend request and the other accepted), and kept for 30 days. They're deleted right away when you turn sharing off, and also when you no longer have any friends.
Meal photos shared with friends (subscribers only, off by default, only if you turn it on): a smaller copy of the photo is stored on our server. It isn't public: only friends who are also subscribers can see it, after signing in. Kept for 30 days and deleted right away when you turn photo sharing off.
Meal photo cloud backup (subscribers only): the meal photos you log are copied to cloud storage (Cloudflare R2) so you can get them back when you switch phones and sign in to the same account. They aren't public; only your signed-in account can download them. Deleting a meal deletes its cloud photo, and deleting your account deletes all of them. If your subscription ends, the cloud copies are deleted 30 days later (photos on your phone stay); until then you can still restore them to a new phone.
Cheers and reminders: friends can only send preset messages (like “👍 You've got this!” or “Don't forget to log dinner”); there's no free-text chat. We record who sent which message and when (and friend request, accept and invite notices) to show in your notifications. Kept for 60 days.
Push notification token (only if you allow notifications): the token your phone's system gives this app, used only to deliver friend requests, cheers and reminders to your phone (through Apple Push Notification service on iPhone and Google Firebase Cloud Messaging on Android). Deleted when you sign out, reset your password (so a lost phone stops getting them) or delete your account.
Invites: your friend code is also your invite code. When a new account signs up with it (or enters it within 7 days of signing up), you each get the invite bonus (free analyses) and they automatically send you a friend request; you only become friends, and see each other's meals, if you accept it. If either of you has blocked the other, the invite code doesn't work (no bonus, no friend request). We record who invited whom and when, to give the bonus and apply the monthly limit (if the new account's free analyses are delivered later because its network reached that day's limit, the invite bonus is delivered then too). Kept until the account is deleted: invites you sent are then deleted, and if you were invited, only the link to you is removed (the inviter's monthly count stays).
A hashed device identifier: used only to make sure the free analyses for new accounts are given once per phone (if they're delivered later because your network reached that day's limit, the hash is kept with your account until then). It can't be turned back into the original identifier and is never used for ads or tracking.
Subscription status: whether you're a subscriber and when it expires, via RevenueCat. Payments are handled by Apple / Google; we never see your card details.
IP address: used briefly for rate limiting, not stored long-term. When a new account claims its free analyses, a hash of the network address made with a secret server key (it can't be turned back into the address without that key) is kept to limit how many new accounts one network can claim per day. It's only used for that day (UTC), deleted the next day, and isn't linked to any account.
To analyze your meals, count your free uses, provide subscription benefits and the friends feature, answer support requests and prevent abuse. We don't sell your data, show ads, or track you across apps.
Anthropic (Claude AI): analyzes meal photos and text. Under Anthropic's commercial terms, data sent through its API is not used to train its models by default.
RevenueCat: subscription management.
Apple App Store / Google Play: payments and subscriptions.
Apple Push Notification service / Google Firebase Cloud Messaging: deliver friend notifications (only the notification text and your push token).
Hosting: floppy.tw (Taiwan) and Cloudflare (network delivery, and R2 storage for subscribers' meal photo cloud backup).
You can delete your account any time in the app: Settings → Account → Delete account. Your account, reset codes, backups, logged-day records, subscription records, friends, friend requests, block list, invite records (kept until then; if you were invited, only the link to you is removed so the inviter's monthly limit still counts), meals and photos shared with friends, meal photos in the cloud backup, notifications and push tokens are deleted, and Sign in with Apple access is revoked. Usage records are stripped of your identity and kept only as anonymous statistics. Feedback loses its note and any link to you; the anonymous corrected numbers may be kept to improve estimates. The device hash is kept without any link to an account, so free analyses aren't given twice to the same phone.
You can also email [email protected] to request access to or deletion of your data.
Calomind is not intended for children under 13.
Estimates are for reference only and are not medical advice.
We'll update this page and its date when this policy changes.