Privacy Policy
Last Updated: May 22, 2026
Welcome to Caliro AI. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our mobile application.
1. Information We Collect
Personal Information
- Email Address: Collected via Google Sign-In for authentication
- Google Account Information: Name and profile photo from your Google account
- Google Account ID: Unique identifier for authentication purposes
Health & Fitness Data
Caliro AI accesses and collects the following health and fitness data to provide its core features:
- Step Count: Daily and historical step data to track your physical activity and calculate personalized step goals
- Physical Activity & Movement: Activity recognition data to detect walking, running, and other physical movements
- Body Sensor Data: Heart rate information collected via your device's body sensors for fitness tracking
- Distance Traveled: Distance data derived from step count and movement patterns
- Fitness Profile: Height, weight, age, and BMI data you provide to personalize your health insights
- Calorie & Nutrition Data: Daily calorie intake, macronutrient tracking (protein, carbs, fat) based on your food scans
- Weight History: Weight entries you log for progress tracking
How this data is used: Health and fitness data is used solely to provide personalized fitness tracking, step goal recommendations, calorie progress monitoring, and BMI calculations within the app. This data is stored locally on your device and is never sold or shared with third parties for advertising purposes.
Camera & Food Data
- Meal Photos: Images you upload are temporarily processed by Google's Gemini AI for nutritional analysis. Photos are NOT permanently stored on our servers.
- Daily Scan Count: We track the number of free scans you've used (resets every 24 hours)
- Subscription Status: Whether you have an active premium subscription
Device Information
- Local Storage: Meal history, step history, and health analysis results are stored locally on your device only
2. How We Use Your Information
We use the collected information for the following purposes:
- Authentication: To verify your identity and manage your account
- Health Tracking: To display your daily step count, step history, and progress toward your personalized step goal
- Fitness Insights: To calculate BMI, track weight, and provide health recommendations based on your profile
- Nutrition Analysis: To analyze food photos and estimate calorie and macronutrient content
- Calorie Tracking: To monitor your daily calorie and macro progress against your goals
- Notifications: To send health reminders and step goal alerts via push notifications
- Usage Tracking: To enforce free scan limits (3 per day for free users)
- Subscription Management: To manage premium features and billing
- Service Improvement: To understand usage patterns and improve our app
3. Data Storage and Processing
What We Store on Our Servers
- Email address
- Google Account ID
- Daily scan usage count
- Subscription status
- Account creation date
What Is Stored Locally on Your Device
- Step count and step history
- Heart rate data
- Fitness profile (height, weight, age, BMI)
- Meal history and nutrition logs
- Daily calorie and macro progress
What We Do NOT Store
- Photos: Your meal photos are NOT permanently stored on our servers. They are only temporarily processed by Google's Gemini AI and then discarded.
- Health Data on Servers: All health and fitness data remains on your device and is never uploaded to our servers.
- Payment Information: Handled securely by RevenueCat and Google Play, we never see your payment details.
4. Permissions We Request
Caliro AI requests the following device permissions and explains why each is needed:
- ACTIVITY_RECOGNITION: To detect and count your daily steps
- BODY_SENSORS: To read heart rate data from your device sensors
- CAMERA: To capture meal photos for nutritional analysis
- FOREGROUND_SERVICE / FOREGROUND_SERVICE_HEALTH: To run the step counter continuously in the background
- POST_NOTIFICATIONS: To send step goal reminders and health alerts
- READ_MEDIA_IMAGES: To allow you to upload existing photos for food scanning
- RECEIVE_BOOT_COMPLETED: To restart the step tracking service after your device reboots
- health.READ_STEPS / health.READ_DISTANCE: To read step and distance data from Android Health Connect
5. Third-Party Services
We use the following third-party services that may collect information:
Google Sign-In
- Purpose: User authentication
- Data Shared: Email, name, profile photo
- Privacy Policy: Google Privacy Policy
Google Gemini AI
- Purpose: Analyze meal photos for nutritional information
- Data Shared: Photos you upload (temporarily, not stored)
- Privacy Policy: Google Privacy Policy
Google Firebase
- Purpose: Push notifications and app messaging
- Data Shared: Device token for notification delivery
- Privacy Policy: Google Privacy Policy
RevenueCat
6. Data Security
We implement appropriate security measures to protect your information:
- HTTPS encryption for all data transmission
- Secure database storage with access controls
- Regular security updates and monitoring
- No permanent storage of sensitive photos or health data on our servers
7. Your Rights
You have the following rights regarding your personal data:
- Access: You can view your data at any time in the app
- Deletion: You can delete your account and all associated data
- Correction: You can update your information through your Google account
- Data Portability: You can export your meal history from your device
- Revoke Permissions: You can revoke health and sensor permissions at any time via your device settings
- Opt-Out: You can stop using the service at any time
8. Data Retention
- Active Users: Data retained while your account is active
- Deleted Accounts: Data permanently deleted within 30 days of account deletion
- Scan History: Resets automatically every 24 hours
- Photos: Never permanently stored, immediately discarded after analysis
- Health Data: Stored locally on your device; deleted when you uninstall the app
9. Children's Privacy
Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Users
If you are accessing our service from outside the United States, please note that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by:
- Updating the "Last Updated" date at the top of this policy
- Displaying an in-app notification for material changes
- Requiring acceptance of the updated policy for continued use
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
13. European Privacy Rights (GDPR)
If you are in the European Union, you have rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
15. Consent
By using Caliro AI, you consent to this Privacy Policy and agree to its terms.