Consumer Health Data Privacy Policy

Effective date: September 4, 2026

1. Who this applies to

This policy is required by Washington's My Health My Data Act and covers residents of Washington and Nevada. It supplements our main Privacy Policy rather than replacing it — everything in that policy still applies to you.

Calorie is operated by Javid Rezaei, a sole trader based in Queensland, Australia. Calorie has no affiliates or subsidiaries.

2. What consumer health data we collect

• Category: Nutrition data — What it includes: The foods you log: food name, serving description, calories, protein, carbohydrates, fat, how the entry was created, and the time it was logged — Why we collect it: To show your daily intake against your targets
• Category: Body measurements — What it includes: Age, weight, height, sex, activity level, and your weight history — Why we collect it: To calculate your daily calorie and macro targets and show your progress
• Category: Meal photos — What it includes: Photos you take of a meal in order to scan it — Why we collect it: To identify the food and estimate portion sizes
• Category: Activity and wellbeing entries — What it includes: Exercise, water and fasting entries you choose to log — Why we collect it: To show them alongside your food log
• Category: Apple Health — What it includes: Only if you connect it. We read your daily step count to show it in the app; those values stay on your device and are never sent to us. If you choose to, we also write the nutrition you log into Apple Health on your device. — Why we collect it: To show your steps alongside your food log, and to keep Apple Health up to date with what you have logged

3. Where we get it

We collect this information directly from you when you use the app. We read from Apple Health only if you connect it, and only with your permission, which you can withdraw at any time.

We do not buy consumer health data, and we do not receive it from data brokers, advertising companies, or other users.

4. What we share, and with whom

• Who: Google Gemini (AI vision provider) — What they receive: The meal photo you take — Why: We send the photo to identify the food and estimate portion size. We do not keep it.
• Who: Supabase (cloud database and hosting) — What they receive: Your food logs, goals, and body measurements — Why: To store your account data securely

We do not share consumer health data with any advertising partner. Meta, TikTok, Google Ads and AppsFlyer never receive your food logs, body measurements, photos, or any other health data.

When we look up nutrition information, we send only a food name or a barcode number to USDA FoodData Central and Open Food Facts. Those services never receive your logs, your photos, or your measurements.

5. We do not sell consumer health data

We do not sell your consumer health data and we have never sold it. Washington law requires a separate signed authorization before any sale of consumer health data. We do not seek one, and we do not sell.

6. Your rights

• Confirm whether we collect, share or sell your consumer health data, and access that data.
• Get a list of the third parties we share it with, and how to contact each of them.
• Withdraw your consent to our collection and sharing of it.
• Delete your consumer health data.

7. How to exercise them

You can delete everything yourself in the app: go to Settings → Account Actions → Delete Account. You can also email [email protected] from your account email address. We verify the request against your account and respond within the time the law allows.

When you delete your account, your data is removed from our active systems immediately. Our hosting provider keeps daily encrypted backups on a rolling seven-day window; deleted data ages out of those backups within seven days and is never restored into the live app.

If we decline your request you may appeal by replying with APPEAL in the subject line, and we will review it again. If we deny your appeal, we will tell you how to submit a complaint to the Washington State Attorney General.

8. Nevada residents

Nevada's SB 370 gives you similar rights over consumer health data, including the right to access it, to have it deleted, and to withdraw your consent to its collection and sharing. Use the same address and the same process described in Section 7.

9. Changes and contact

We may update this policy as the app evolves. We will post the updated policy at this address and update the effective date above. Material changes will be brought to your attention in the app.

Questions, requests, or concerns about your consumer health data: Javid Rezaei (trading as Calorie), Queensland, Australia [email protected]