Privacy Policy

To run Calixto we keep what you give us and what the app needs to work:

• Your account: name, email address, password (stored only as a hash) or the Google or Apple account you sign in with.
• Your profile: birth date, height, the sex used for energy estimates (optional), activity level, units, time zone.
• Health and nutrition data you log: foods and meals, weight and body measurements, goals, and the photos, voice notes and text you use to log.
• Shared pantries you join: the items, lists and changes in them.
• Sign-in sessions: the device's browser and an IP address, to keep you signed in and show your signed-in devices.
• Only if you say yes: anonymous usage timings (see section 6).

What you eat, your weight and your body measurements are health data. We use them only to give you the app: your diary, your targets, your progress, and the answers you ask AI assistants for. We never sell them, never use them for advertising, and never show them to the people you share a pantry with.

Your personal data is kept apart from shared pantries: pantry members see the pantry's items and lists, never your diary, weight or goals.

When you log by text, voice or photo, we send what that one request needs to OpenAI to recognise the food and amounts. Requests are made with storage turned off. The AI never writes anything to your diary: you check what it suggests before anything is logged.

Meal photos and voice notes are deleted 7 days after you log them, and at once if you discard the request, unless you choose to keep them in Preferences.

If you connect Claude, ChatGPT or another assistant, it can only do what you allowed when you connected it, for the pantries you chose. Every call it makes is recorded so you can see it under Connections, and you can disconnect it at any time; access stops at once.

We use a small number of service providers to run Calixto, under agreements that limit them to doing that work:

• Hosting, database and file storage.
• An email provider, to send account emails. Emails contain links, never health data.
• OpenAI, for the AI logging features described above.

We share data with others only when the law requires it.

If you agree, the app sends anonymous timings, such as how long logging takes and which logging method you used, under a code that can't be linked back to you. Never what you eat, your amounts, weight or targets. It's off until you say yes, and you can turn it off in Privacy & data. We don't use third-party analytics or advertising trackers.

• Your data: while you have an account.
• Data exports: 7 days, then deleted.
• AI photos and voice notes: 7 days after logging unless you keep them.
• Security and access records: 13 months, then deleted.
• Backups: up to 30 days, after which deleted data is gone from them too.

You can see and correct your data in the app, and export all of it as a ZIP file at any time.

You can delete your account from Privacy & data. We email you a link to confirm; once you do, your account and data are deleted, normally within minutes and always within 30 days, and copies in backups expire within 30 days. In shared pantries, your past changes stay but show as “Former member”.

Depending on where you live, you may have further rights, such as to object to processing or to complain to a data protection authority.

Calixto is for people aged 16 and over. We don't knowingly create accounts for anyone younger.

Data is encrypted in transit and at rest. Each person's data is isolated in the database, sensitive actions need a recent sign-in, and new passwords are checked against known breaches.

Questions about privacy: privacy@calixto.app. We'll tell you here, and by email for important changes, before this policy changes.