Privacy Policy
Last updated 19 August 2026
Calvy is a food diary. To do its job it has to know things about your body and what you eat, which is personal information of a fairly intimate kind. This page explains what we hold, why we hold it, who else touches it and how you get rid of it.
The short version. We collect what you enter and what you photograph, plus basic technical data about the app. We use it to run your diary and improve recognition. Advert measurement uses your device's advertising identifier, and only if you allow it. We do not sell anything and no advertiser sees what you eat. You can delete everything from inside the app, and the deletion is real.
Who is responsible
Calvy is operated by VVDev LLC, 30 N Gould St #22306, Sheridan, WY 82801, United States. We decide how your data is used and we are the controller for the purposes of the GDPR. Questions, requests and complaints go to support@calvy.fit, and we answer within 30 days.
What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Profile and goals | Sex, age, height, weight, target weight, activity level, eating window | You, during setup and whenever you change a goal |
| Food and drink log | Meals, portions, calories, macronutrients, water, meal times | You, through photo, voice, barcode or manual entry |
| Photos of meals | The images you take to log food | Your camera or photo library, only when you choose a picture |
| Voice input | The recording and its transcript when you describe a meal out loud | Your microphone, only while you are recording |
| Coach conversations | Questions you ask and answers you receive | You, when you use the AI coach |
| Progress data | Weight history, streaks, activity entries | You, and any fitness source you connect |
| Purchase data | Subscription status, plan, renewal date, platform transaction identifier | Apple or Google. We never see your card number |
| Technical data | Device model, operating system, app version, language, crash logs, in-app events | Collected automatically while the app runs |
Some of this counts as health data under European law. We treat it that way: it is only processed to give you the service you asked for, and only with your explicit consent, which you give when you set up your profile and can withdraw at any time by deleting your account.
Why we use it
- To run the diary. Calculating your daily targets, storing what you logged, showing your history and streaks.
- To recognise food. Photos, voice recordings and barcodes are processed to identify the dish and estimate portions and nutrients.
- To answer your questions. The coach reads the day you logged so its answers relate to your actual numbers.
- To keep the app working. Diagnosing crashes, fixing bugs, measuring which features get used and which are ignored.
- To manage subscriptions. Knowing whether premium features are unlocked for your account.
- To protect the service. Detecting abuse, fraud and automated scraping.
Legal grounds, if you are in Europe or the UK
- Explicit consent for health-related data: your profile, weight, food log and anything you tell the coach.
- Performance of a contract for running your account and your subscription.
- Legitimate interests for security, fraud prevention and basic product analytics, balanced against your rights.
- Legal obligation where we have to keep records, for example tax records for a purchase.
Who else sees it
These are the companies that receive data when you use Calvy. Each of them processes it for the purpose listed and nothing else.
| Who | What they get | What for |
|---|---|---|
| Google Firebase | Device identifier, app version, crash logs, push token, in-app events | Running the app, delivering notifications, diagnosing crashes |
| Google Analytics | Pseudonymous usage events, device and country data | Understanding which features get used and where people drop off |
| AppsFlyer | Device and advertising identifiers, install and in-app events, IP address | Knowing which advert or link brought you to Calvy |
| Apphud | Subscription status, plan, renewal dates, platform transaction identifier | Managing your subscription and unlocking premium features |
| Meta (Facebook SDK) | Advertising identifier and app events, only if you allow tracking | Measuring adverts and building audiences |
| OpenAI | The meal photo, voice transcript or question you send, plus the day's numbers when you ask the coach about them | Recognising the dish and answering your questions |
| Cloud hosting | Your account and journal | Storing your data and syncing it between your devices |
Your name and email are never sent to advertising or analytics partners. Photos and coach conversations go only to the AI provider and to our own storage: no advertiser sees what you eat.
We also share data when the law requires it, and if the business is ever sold or merged, in which case you will be told before your data moves.
We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under California law.
Advertising identifiers and tracking
Calvy runs adverts to find new users, and we want to know which ones work. That measurement uses your device's advertising identifier through AppsFlyer and the Meta SDK.
- On iPhone the system asks you first. Decline, and no advertising identifier is collected and nothing is shared with Meta for tracking. The app works exactly the same.
- On Android you can reset or delete the advertising ID in system settings, and Calvy will respect it.
- You can withdraw this at any time in your device settings. It does not affect your journal, your score or your subscription.
Where your data goes
Our providers may process data outside your country, including in the United States. When data leaves the European Economic Area or the UK we rely on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Your journal and profile: while your account exists.
- After you delete your account: removed from live systems within 30 days, and from encrypted backups within 90 days.
- Meal photos: deleted with the meal entry, or immediately when you delete the photo itself.
- Crash and analytics events: up to 24 months in aggregated or pseudonymised form.
- Purchase records: as long as tax and accounting law requires, typically several years.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, export it or delete it, and you can withdraw consent. In Europe and the UK you can also object to certain processing, ask us to restrict it, and complain to your national data protection authority. In California you can request access, deletion and correction, and you will never be treated differently for asking.
The fastest route is the app: Profile → Delete account removes everything. For anything else, write to support@calvy.fit from the address on your account. Instructions with screenshots live on our data deletion page.
Children
Calvy is not for people under 16. We do not knowingly collect data from them, and if we find out that we have, we delete the account. If you are a parent and believe your child is using Calvy, write to us and we will remove it.
Security
Data is encrypted in transit and at rest, access inside the company is limited to people who need it, and we review that access regularly. No system is perfect, so if a breach ever affects your data we will tell you and the relevant regulator within the deadlines the law sets.
Changes
When this policy changes we update the date at the top. If a change is significant, for example a new category of data or a new purpose, we will tell you in the app before it takes effect.
Contact
Privacy questions and requests: support@calvy.fit
Everything else: support@calvy.fit