Privacy Policy

1Who is responsible for your data

Valoroid Technology Private Limited is the data fiduciary (controller) for personal data processed through CaloriSync. For privacy questions or to exercise your rights, email support@calorisync.com.

2Data we collect

Information you give us

• Account details: your name and email when you sign in (e.g. via Sign in with Apple).
• Profile and goals: age range, sex, weight, height, dietary preferences, allergies, health flags, and goals you choose to share.
• Food logs: meals and ingredients you log, including any photos you take to scan and custom recipes.
• Coach conversations: messages you send to Kai, our AI coach.

Information from Apple Health (only with your permission)

• Steps, active energy, body weight, body fat percentage, height, workouts, sleep, and similar metrics you authorize.
• We can write back to Apple Health: dietary energy, macronutrients, water intake.

Apple Health data is governed by Apple's HealthKit rules. We never use HealthKit data for advertising, and we never share it with third parties except to operate the Service for you.

Information collected automatically

• Device and diagnostics: device model, operating system version, app version, language, and crash logs.
• Usage events: which features you used and when, used in aggregate to improve the product. We do not link this to advertising IDs.

3Why we collect it

• To provide the Service: log food, scan meals, run the AI coach, sync with Apple Health, deliver subscription features.
• To personalize: adapt Kai's recommendations to your stated goals, allergies, and history.
• To improve: fix bugs, measure feature usage, and improve our models in privacy-preserving ways.
• To communicate: respond to support requests, send important service notices.
• To meet legal obligations: respond to lawful requests, prevent fraud, enforce our Terms.

4Legal basis

Where the Digital Personal Data Protection Act, 2023 or other laws (such as the EU/UK GDPR for users in those regions) apply, we process your data on the basis of your consent (e.g. Apple Health permissions, marketing), performance of a contract (delivering the Service you signed up for), and our legitimate interests (security, fraud prevention, product improvement) where those interests are not overridden by your rights.

5How we share data

We share data only with the following categories of recipients, and only for the purposes described:

• Apple: subscription billing (App Store), Sign in with Apple, Apple Health permissions, push notifications. Apple's privacy policy applies to these interactions.
• Google Cloud: hosting our backend infrastructure on Cloud Run (data stored in India region) and providing the Gemini AI models that power scan and chat features, under a Data Processing Agreement. Your prompts and content are not used to train Google's foundation models.
• Crash and diagnostics providers: e.g. Apple's built-in crash reporting and any in-app analytics we use for stability.
• Law enforcement and authorities: where required by law, and only to the extent necessary.

We do not sell your personal data, share it with data brokers, or use it for cross-context behavioural advertising.

6Where your data is stored

Your account data, food logs, and health data are stored on encrypted servers in India. When you use AI features, your prompt is sent to Google's Gemini service, which may process the request in a region outside India under standard contractual safeguards.

7How long we keep data

• Account and profile data: while your account is active and for up to 90 days after you delete it (to allow recovery and to meet legal obligations).
• Food logs and Kai conversations: as long as your account exists, unless you delete them earlier.
• Diagnostic and crash logs: typically up to 12 months.
• Billing records: as required by Indian tax and accounting law.

8Your rights

You can:

• Access and export your data from the in-app Privacy settings.
• Correct inaccuracies by editing your profile and logs.
• Delete your account and associated data from the in-app Privacy settings, or by emailing support@calorisync.com.
• Withdraw consent for Apple Health or other permissions in your iPhone Settings at any time.
• Object or restrict certain processing, where applicable law gives you that right.
• Complain to a supervisory authority — in India, the Data Protection Board, once it begins accepting complaints.

9Children

CaloriSync is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has used the Service, please email us and we will delete their account and data.

10Security

We use HTTPS in transit and encryption at rest, role-based access controls, and the principle of least privilege for engineering access. No system is perfectly secure — if you suspect a breach affects your account, please notify us at support@calorisync.com.

11International users

CaloriSync is operated from India and primarily intended for users in India. If you use the Service from outside India, you understand that your data will be transferred to and processed in India under the safeguards described in this Policy.

12Changes to this Policy

If we make material changes, we'll update the "Last updated" date and notify you in the app or by email before the changes take effect.

13Contact

Questions about this Policy or your data? Email support@calorisync.com. We respond to verified rights requests within 30 days.