Legal

Privacy Policy

What Caloza collects, why, who it’s shared with and how to delete it.

Effective: October 27, 2026

In short

Your meals stay on your iPhone and your private iCloud. A meal photo leaves your device only when you ask for an AI estimate, and only after you’ve agreed. Apple Health data never leaves your iPhone. No ads or sale of data.

1. Who we are

Caloza is provided by JTC Interactive - FZCO, IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates (“we”, “us”). This policy explains what the Caloza iPhone app and caloza.app do with your information. Questions: admin@jtcapps.com.

2. Data that stays on your iPhone and iCloud

Your meals live on your iPhone: meal photos, descriptions, notes, estimates, ingredients, scores and history, plus your profile (date of birth, sex, height, weight and goal), personal dietary notes, supplements and settings.

If iCloud is on, Caloza also keeps a copy in your private iCloud storage so it syncs across your devices and survives a reinstall, and keeps a CSV backup of your meals in the app’s documents folder. This data is stored by Apple in your account; we don’t have access to it and don’t keep it on our servers.

3. Meal analysis with third-party AI

To estimate a meal, Caloza sends data to third-party AI services. This only happens when you ask for an estimate — when you capture or choose a meal photo, update an estimate, add a finished-meal photo or recalculate micronutrients — and Caloza asks for your permission before the first time.

  • What is sent: the meal photo (resized and stripped of location and other metadata), any notes you add to the meal, your personal dietary notes from Settings, and — when updating or comparing — the previous estimate.
  • Who receives it: OpenRouter, which routes the request to the AI model provider (currently Google’s Gemini models).
  • What isn’t sent: your name, Apple Account, contacts, location, Apple Health data or any identifier that links the request to you.
  • How it’s used: only to return the estimate to your app. We don’t store your photos on our servers and don’t use them to train AI models. The providers process the request under their own privacy terms and may keep it for a short time for security and abuse prevention.

If you don’t want photos analysed by AI, don’t submit them — you can still view your saved meals and log past meals again.

4. Apple Health

With your permission, Caloza reads your active and resting energy from Apple Health to work out your daily calorie budget and “eaten vs. burned” trends. This is done on your iPhone. Apple Health data is never sent to AI providers, analytics, us or anyone else, is not stored in iCloud, and is never used for advertising or marketing. Caloza does not write to Apple Health. You can turn access off any time in Settings → Health → Data Access & Devices.

5. Subscriptions and payments

Subscriptions are sold and billed by Apple. We never see your payment details. The app receives a signed confirmation from Apple of which plan is active, whether you’re in a free trial and when it renews or ends, and uses it on your device to unlock features.

6. Analytics and diagnostics

To understand how Caloza is used and fix problems, the app sends limited usage information:

  • Product analytics (Mixpanel): predefined events such as “meal analysis completed” or “trends opened”, with a random installation ID, app version, device model, OS version and language. Events never include meal photos, meal text, search terms or health values.
  • Session replay (Mixpanel): for a small sample of sessions, a privacy-masked recording of the app’s screens — text, images and inputs are masked, so meal photos, notes and numbers are not captured.
  • Diagnostics: performance and error information (for example how long an estimate took or why it failed), without photos or meal content.
  • Connectivity check: before analysing a photo, the app briefly contacts a Google endpoint to check that you’re online.

We don’t use this information for advertising, don’t combine it with data from other companies, and don’t track you across apps or websites. You can turn off analytics in Caloza’s Settings.

7. This website

Caloza and the Caloza Journal use self-hosted Umami to measure visits, referral sources, campaign parameters, device and performance information, and selected link clicks. Sampled session recordings and heatmaps help us improve the sites. Page text and form inputs are masked, forms are blocked, and sensitive pages are excluded. We do not intentionally collect meal details, health information, form contents or email addresses through website analytics. Analytics honors browser Do Not Track and Global Privacy Control signals. We do not use website analytics for advertising. Our server may log technical data such as IP address and browser type for security. If you email us, we use your message only to reply.

8. Why we use data

  • To provide the features you ask for, like meal estimates and subscriptions (performing our agreement with you).
  • To send photos to AI providers — only with your permission (consent).
  • To keep Caloza working, secure and improving through analytics and diagnostics (our legitimate interests, or your consent where the law requires it).
  • To meet legal obligations.

We don’t sell your data, don’t show ads and don’t share data for advertising.

9. Who we share data with

  • OpenRouter and the AI model provider it routes to (currently Google) — meal analysis.
  • Mixpanel — product analytics and masked session replay.
  • Apple — iCloud storage, Apple Health, purchases and app distribution, under Apple’s privacy policy.
  • Our hosting provider — for this website and diagnostics.
  • Authorities — only if the law requires it.

We only use service providers that are bound to protect your data at least as well as this policy describes and to use it only to provide their service to us.

10. How long we keep data

  • Meals and profile data on your iPhone and in your iCloud: until you delete them. Deleting a meal removes it; deleting the app removes local data; you can delete Caloza’s iCloud data in Settings → [your name] → iCloud → Manage Storage.
  • AI requests: not kept by us; kept by the providers only briefly, as described above.
  • App analytics events: up to 24 months. App session replays: 30 days. Diagnostics: up to 90 days. Website analytics and website recordings are retained until deleted.
  • Emails: as long as needed to help you, then deleted.

11. Your choices and rights

You can stop AI analysis by not submitting photos, turn off analytics in Settings, remove Apple Health access in Settings → Health, and delete your meals and iCloud data at any time as described above.

Depending on where you live (for example under the EU/UK GDPR or the UAE data protection law), you can also ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email admin@jtcapps.com. Analytics use only a random installation ID, with no name or email, so we may ask for a few details to find your data. You can also complain to your local data protection authority.

12. Children

Caloza is not meant for children under 13, and we don’t knowingly collect data from them. If you think a child has used Caloza, contact us and we’ll delete any data we hold.

13. International transfers

We are based in the UAE and our providers may process data in other countries, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

14. Changes to this policy

We’ll update this page when our practices change and tell you in the app if a change is significant. The date at the top shows the latest version.

15. Contact

Email admin@jtcapps.com with any privacy question or request.

JTC Interactive - FZCO, IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates.