Privacy Policy

In effect from October 21, 2026. A fuller legal version is being prepared; this plain-language version describes what the app does today.

What we collect

• Your account: first name, email address, date of birth (to confirm you are 18 or over) and a password, which we store only in scrambled form.
• What you tell us: your goal, body measurements, activity, allergies and foods to avoid, weigh-ins, check-ins (including any note you write), meal plans, recipes, pantry and, if you choose, a food log you bring in from another app.
• What the app works out: your calorie and protein targets and the reasons for them.

How we use it

To build your meals and grocery list, set and adjust your targets, send the emails you need (confirming your address, resetting a password, invites, and a weekly check-in reminder you can switch off), and keep the service working. We do not sell your information, and we do not show ads.

Who can see it

• Only you, by default.
• A coach or friend you invite sees only the parts you choose (for example progress, check-ins, plan or food log), and only after they accept an invite sent to their email. You can change this or end it at any time on the Sharing page. A check-in written under our support screen is never shown to anyone else.
• People in your household see the shared meals and grocery list, not your weight or check-ins.

Services we use

• Cloudflare hosts the app, stores the database and uploaded photos (data kept in the United States), and sends our emails.
• USDA FoodData Central receives ingredient names (not your name or account) when we look up nutrition for a recipe.
• Websites you import recipes from receive a normal page request from our server.
• Claude or ChatGPT, only if you tap "Ask": the app opens that service with a short summary of your day (never your name or email), and from then on that service's own policy applies.

Cookies and your device

We use one cookie to keep you logged in. Your device also stores your display choices and an offline copy of your grocery list. We don't use advertising or tracking cookies.

Logs

Our host keeps standard request logs for about 7 days to find and fix errors. We make sure they don't include your notes, check-in answers, passwords or the contents of what you submit.

Your choices

• Download everything we store about you, or delete your account, under More → Your data. Deleting removes your information from the live app straight away.
• Copies can remain in database safety backups for a short time after deletion: up to 30 days in the rolling restore history and up to 8 weeks in weekly backups. They are not used for anything else and are removed as the backups expire.
• You can turn off reminder emails under More, or from the link in any reminder.

Age

Calorcast is for adults 18 and over. If you believe someone younger has signed up, tell us and we will remove the account.

Changes and questions

If we change this policy in a way that matters, we will tell you in the app or by email. Questions: see Contact.