1The short version
kcalc.ai is a calorie and nutrition tracker. To estimate your meals we store your account, your food entries, and the photos and depth scans you capture on our servers in Sydney, Australia, and we run AI over them. We never sell your personal information, we run no advertising or tracking SDKs, and we never track you across other apps. This policy explains what we collect, where it goes, and how to get it back or delete it. We handle your information under the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2What we collect
- Account details: how you signed in (Apple or email), your email address, and the tokens that keep you signed in.
- Meals: the names, notes, and any recipe text or recipe URLs you add; the meal photos and LiDAR depth scans you capture; and the AI's estimation results and the evidence behind them.
- Body metrics and goals: your height, weight, date of birth, gender, activity level, and the calorie and macro targets you set.
- Weight logs: the weights you record over time, with any notes.
- Device and push tokens: the identifiers Apple gives us so we can send you a notification when an estimate finishes.
- Subscription state: whether you are on a trial or a paid plan and which channel (Apple or Stripe) you subscribed through. We do not receive or store your card numbers (see section 9).
- Support correspondence: anything you send us at [email protected].
3What stays on your device
kcalc.ai is offline-first. Your meals, goals, weight logs, and settings live in a local database on your device so the app works without a connection. When you are online, that data syncs to our servers so it is backed up and available on your other devices. Deleting the app removes the local copy from your device; your server-side account remains until you delete it (see section 11).
4Photos and depth scans
Your meal photos and LiDAR depth scans are uploaded to Amazon Web Services (AWS) storage in the Sydney region (ap-southeast-2). We use them only to estimate your food and to let you review your meals. We do not use them for advertising and we do not sell them.
We do not keep them forever. Photos are automatically deleted from storage 365 days after upload, and the intermediate reconstruction artifacts produced during scanning are deleted after 90 days, both by an automatic storage lifecycle rule. Deleting a meal, or your account, also removes the associated files as described in section 11.
5How the AI processes your data
When you submit a meal, the request is queued and processed on our servers. This is asynchronous: it can take from a few seconds to several minutes, and we may send your device a follow-up question (for example, to confirm a portion) to improve the result. Answering is optional.
Estimation runs across the following systems:
- Our own GPU servers in Australia perform most AI inference (food identification, reasoning, and search embeddings).
- AWS Bedrock in the Sydney region is used as a fallback when our own servers are unavailable.
- A search index hosted by Pinecone Inc. in the United States matches your food against our product database. What we send Pinecone is search data (such as an embedding of the food description), used only to find matching foods.
6Apple Health
If you choose to connect Apple Health, kcalc.ai can, with your explicit permission, read activity energy, workouts, and weight from Apple Health, and write nutrition and weight data back to it. You control this in the app and in the iOS Health settings, and you can turn it off at any time.
Data we read from Apple Health, or write to it, is used on your device for your own targets and tracking. We never sell it, never use it for advertising, and never share it with third parties. We handle HealthKit data in line with Apple's HealthKit requirements. Apple Health is optional; kcalc.ai works without it.
7Push notifications
If you allow notifications, we register a device token with Apple's push service (APNs) so we can tell you when an estimate is ready or needs your input. You can turn notifications off at any time in iOS Settings; the app still works, and it falls back to checking for results itself.
8What we never do
- We never sell your personal information.
- We use no advertising SDKs and no third-party analytics or tracking SDKs.
- We never track you across other apps or websites.
- We never use your Apple Health data, meal photos, or depth scans for advertising.
9Payments
Subscriptions are billed either through Apple's In-App Purchase or, for web checkout, through Stripe (Stripe Payments Australia). Your card details go directly to Apple or Stripe, who are the payment processors. We never see or store your full card number. We receive only what we need to run your subscription, such as confirmation of payment and your plan status. Apple's and Stripe's own privacy policies cover how they handle payment data.
10Security
We protect your information with appropriate measures. All traffic between the app and our servers is encrypted in transit (HTTPS), access to our systems is restricted to authorised staff and services, and stored data lives in access- controlled AWS infrastructure in Sydney. No system is perfectly secure, but we work to keep your information safe and to limit who can reach it.
11Data retention and deletion
You can delete your account from within the app (Settings). When you do, we deactivate the account, invalidate your sign-in sessions, and remove your personal data from our active systems. Residual copies in encrypted backups are purged within 35 days. Meal photos and depth scans also age out of storage on the 365-day and 90-day schedules described in section 4.
If you would like a copy of your data, email us at [email protected] and we will provide an export.
12Children
kcalc.ai is not directed at children. You must be at least 16 to use it, because the app handles sensitive health information. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.
13Your rights
Under the Australian Privacy Principles you can:
- ask what personal information we hold about you and get access to it,
- ask us to correct information that is wrong or out of date, and
- ask us to delete your account and data (which you can also do yourself in the app).
Email [email protected] for any of these. If you are not satisfied with how we handle a privacy request, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to your local data-protection authority.
14Overseas disclosure
Most of your data stays in Australia (our servers and AWS Sydney). One exception: the search index we use to match foods is hosted by Pinecone Inc. in the United States, so search data is disclosed overseas as described in section 5. Under Australian Privacy Principle 8 we tell you this so you can decide with the full picture. We take reasonable steps to ensure our overseas providers handle your information consistently with the Australian Privacy Principles.
15Changes to this policy
When this policy changes, the new version appears here with a new effective date, and we will tell you in the app if the change is material.
16Contact
Privacy questions, access requests, and deletion requests: [email protected]