Privacy Policy
Last updated: 28 August 2026
CalClick is a nutrition tracking app: you photograph a meal — or scan its barcode, or describe it in words — and the app identifies the ingredients and estimates its calories and nutritional values. Doing that means we hold information about you, and some of it is health information — among the most sensitive data there is. This document explains exactly what we collect, where it goes, how long it stays, who can see it and what you can do about it.
1. The short version
Everything below is spelled out in full, but these are the commitments the whole document rests on:
- We do not sell, rent or trade your data. Not to advertisers, not to data brokers, not to anyone.
- There is no advertising and no tracking. The app contains no advertising networks, no advertising identifiers, no analytics SDKs, no session recording and no marketing-measurement tools.
- Your data is encrypted in transit and at rest.
- A coach sees your data only if you link them yourself. Their access is read-only, and you can revoke it at any moment.
- You can delete a meal, a photo or your entire account from inside the app, and account deletion cannot be undone.
- Questions and requests: support@calclick.app.
2. Who is responsible for your data
| Operator | PONPON |
| Privacy contact | support@calclick.app |
The operator is the "database owner" under Israel's Protection of Privacy Law, 5741-1981, as amended — including Amendment 13, in force since August 2025. For users in the European Union, the operator is the controller within the meaning of the GDPR.
3. What this policy covers
The CalClick app for iOS and Android, our website at calclick.app, and any service that links to this document. It does not cover third-party services you reach through us; those have policies of their own.
4. What we collect
4.1 Information you give us
Profile and goals — gender, date of birth, height, current weight, target weight, activity level, workouts per week, your desired rate of change, and what you are using the app for (losing, maintaining or gaining weight).
Onboarding answers — the setup questions you answer when you start: what has held you back before, how you heard about us, anything you typed in free text, and whether you ticked the marketing checkbox.
Your food diary — every meal you log, photographed or typed: item name, amount and unit, calories, protein, carbohydrates and fat, and sometimes sugar, sodium, saturated fat and dietary fibre, along with the time and date of the meal.
Meal photographs — every photo you take or pick from your library for analysis. We receive only the photos you choose — the app does not read the rest of your photo library.
Barcodes you scan — when you scan a packaged product, the barcode is sent to the Open Food Facts database to look up the product's name and nutritional values. A barcode is a product number, not personal information — but like any web request, the lookup exposes your device's IP address to that service.
Voice descriptions — if you choose to describe a meal by voice, your speech is converted to text by the operating system's own speech recognition (which, depending on your device's settings, may use Apple's servers under Apple's terms). We receive only the resulting text; the audio itself never reaches us and is not stored by the app.
Progress data — weigh-ins over time, progress photos if you take any, water intake, and workouts you log.
Account details — your email address, the sign-in method you chose (Apple, Google, or email and password), and a profile picture if you set one. We never see or store your password — it is handled entirely by Google Cloud's authentication service.
Your messages to us — the contents of anything you send to support.
4.2 Information collected automatically
Account identifier — every installation gets a random account identifier. Even without signing up, a "guest account" is created for you and everything is stored under it.
Technical information for stability — when an error or crash occurs, a report is sent containing your device model, operating system version, app version, interface language and a technical description of the fault. A report is not linked to your identity, and crash reports never contain your meal photographs or your food diary.
Subscription status — whether a subscription is active, which plan, and when it renews.
4.3 Data from the Health app (iOS)
If — and only if — you have explicitly granted permission, we read your weight, step count and active energy burned from Apple's Health app. That data is also stored in your cloud account, so your week does not disappear when you move to a new device and so a coach you have linked sees the full picture.
In line with Apple's rules:
- HealthKit data is never used for advertising, marketing or marketing analytics.
- HealthKit data is not sold and not disclosed to third parties, other than the infrastructure providers listed in section 8 and a coach you chose to share with yourself.
- We write to the Health app only what you asked us to write (weigh-ins and meals).
- You can revoke the permission at any time in iOS Settings → Health. Revoking it stops all future reading; data already synced to your account stays there until you delete it, like any other data of yours.
4.4 What we do not collect
We do not collect your location, your contacts or your payment card details. The app contains no advertising networks, no advertising identifiers, no analytics SDKs, no session recording and no marketing measurement tools — what you do inside the app is not watched, profiled or replayed.
5. Health data — a word of its own
Your food diary, your weight history and your goals are health information. Israeli privacy law treats it as especially sensitive information, and under the GDPR it is special-category data that we process on the basis of your explicit consent — given when you accept this policy and enter the data. Concretely, that means:
- It is used for exactly one thing: running the features you asked for.
- It is never used for advertising or marketing — there is nothing in the app that could.
- It is never sold.
- It leaves our infrastructure only for the providers in section 8 and a coach you linked yourself (section 10).
You are under no legal duty to give us any of it. Everything you enter is voluntary. The only consequence of not entering something is that the feature that needs it cannot work — a meal that is not logged cannot be counted, a weight that is not recorded cannot be charted.
6. How we use your data
| Purpose | Legal basis |
|---|---|
| Identifying your meal from a photo or description and calculating nutritional values | Performing our contract with you |
| Calculating your daily target and progress plan | Performing our contract with you |
| Showing your diary, history and charts | Performing our contract with you |
| Sending the reminders you switched on | Your consent |
| Sharing with a coach you linked | Your explicit consent |
| Managing subscriptions, billing and access | Performing our contract with you |
| Answering your support messages | Performing our contract with you |
| Fixing faults and maintaining stability and security | Legitimate interest |
| Meeting legal, accounting and tax obligations | Legal obligation |
We do not sell data to anyone. There is no sale or sharing of personal information in the sense of California or European privacy law.
Calculations, not decisions. Your daily calorie target and macro split are computed automatically from the details you entered. They are estimates for self-tracking — the app makes no automated decision about you with legal or similarly significant effect, and you can adjust or correct every figure.
Aggregated statistics. We may use figures from which anything identifying has been removed — counts, averages, error rates — to understand load, plan capacity and improve the product. Aggregated this way, the numbers cannot be traced back to you.
7. Meal photos
A photo you submit is stored in your account and processed — by us and by the service providers in section 8, acting on our instructions — solely to provide the analysis you asked for. The result is an estimate: review it, and correct any figure before saving. The photo stays in your account so it can appear in your diary, and deleting the meal deletes the photo with it. A typed description of a meal is handled the same way.
8. Who we share data with
We do not sell or rent personal information. We pass data only to the providers the service cannot run without, and only as far as necessary:
| Provider | What for |
|---|---|
| Google Cloud | Storing your account, diary and photos; authentication; the processing behind the service, including meal analysis |
| RevenueCat | Managing subscriptions and validating purchases |
| Apple / Google Play | Processing the payment itself |
| Sentry | Error and crash reporting |
| Open Food Facts | Looking up scanned barcodes in its product database |
That list is exhaustive. There are no advertising partners, no data brokers, no "marketing partners" and no analytics companies, because the app contains none of those.
We will also disclose data where required by law, court order or legal process, or to protect our rights and the safety of our users — and, in a merger, acquisition or transfer of the business, provided the acquirer remains bound by this policy or one at least as protective, and you are notified.
9. Where your data travels
Some of the providers above process data outside your country of residence. Where they do, the transfer rests on appropriate contractual safeguards, including the European Union's Standard Contractual Clauses where they apply.
10. Sharing with a coach — exactly what they see
Sharing happens only at your initiative: you generate an invitation code in the app and hand it to whoever you choose. Nothing is ever shared with a coach by default.
What a linked coach can see — all of it read-only:
- your display name and your daily calorie and macronutrient targets, together with the settings those targets are read through (calorie rollover and counting burned calories) — and nothing else from your profile: not your email address, not your subscription, not the answers you gave when setting up;
- your food diary, including your meal photographs;
- your weigh-ins and weight trend;
- your water intake;
- your steps and active energy, including what was read from the Health app;
- your workouts, streaks and the charts derived from all of the above.
What a coach can never see or do:
- Your progress photos are never shared. They stay private to you, regardless of any link.
- A coach cannot edit, add or delete anything — their access is read-only.
- A coach never sees your password or payment details (neither do we).
The invitation code is a single-use key with a short life. A code can be redeemed once, by one person, and expires on its own 48 hours after you create it. Until it is used you can cancel it from the sharing screen, which lists every code you have issued that is still live. Even so, hand a code only directly to the person you mean, never in public: whoever redeems it first is the one who gets linked. The app shows you the list of everyone currently linked; check it from time to time, and revoke anyone you do not recognise.
Revoking takes effect immediately. You can end a coach's access at any moment from inside the app, and so can the coach. Revocation stops all future access through CalClick; it cannot recall information the coach already saw while the link was active. Your account keeps a private record of when each link was created and when it ended, so who had access, and when, is never a matter of memory.
A coach is not CalClick. A coach is an independent person you chose, not our employee or agent. What they do with information outside the app is between you and them — choose someone you trust, as you would with any professional.
One more visibility note: if you set a profile picture, it may be visible to other signed-in users of the app — for example, in a linked coach's trainee list.
11. Guest accounts — what you need to know
You can use the app without signing up. If you do, an anonymous account is created and your data is stored in the cloud under it exactly as it would be for a registered account. The one difference — and it is not a small one — is that there is no way to sign back into it. The account is tied to this installation alone; deleting the app, resetting the device or moving to another device disconnects you from it permanently, and we cannot recover it. If you want your data to follow you, sign up.
12. How long we keep your data
| Type of data | Retention |
|---|---|
| Profile, food diary, weigh-ins | As long as the account is active, until you delete it |
| Meal photographs | Until the meal or the account is deleted |
| Progress photos | Until you delete them or the account |
| Data read from the Health app | As long as the account is active |
| Backups | Up to 30 days after deletion, then removed automatically |
| Error and crash reports | Up to 90 days |
| Messages to support | As long as needed to handle the matter and keep a record of it |
| Billing and subscription records | As required by Israeli tax law — up to 7 years |
13. Security
- All traffic between the app and our servers is encrypted (TLS), and data is encrypted at rest.
- Access — ours and our contractors' — is limited to what is required, each user's data is accessible to that user alone, and a linked coach's access is read-only.
No system is completely immune. If a serious security incident affects your data, we will notify you and the Privacy Protection Authority as the law requires.
One request that protects you: do not send passwords, medical documents or anything sensitive beyond what is needed through support channels. Email is the least protected part of the chain.
14. Your rights
Under Israeli privacy law — and, for those of you in the European Union, under the GDPR — you have the right to:
- access the data we hold about you and receive a copy of it;
- correct data that is inaccurate, incomplete or out of date — most of it directly inside the app;
- delete your data and your account;
- withdraw consent at any time — for example by revoking the Health app permission, ending a coach's access or deleting your account — without affecting the lawfulness of what was done before;
- receive your data in a readable, portable format;
- object to or restrict certain processing;
- complain — in Israel to the Privacy Protection Authority at the Ministry of Justice, and in the EU to your local data protection authority.
To exercise any of these: support@calclick.app. We may need to verify that a request really comes from the account holder before acting on it. Requests are free of charge, and we respond within 30 days.
15. Children
The service is intended for people aged 18 and over; under-18s need a parent or guardian's consent, as the Terms of Service state. We do not knowingly collect data from children under 18. If we discover that we have, we delete it immediately. A parent who believes their child has given us data is welcome to contact us at support@calclick.app.
16. Notifications and reminders
Reminders exist only if you switch them on, and you can turn them off at any time, in the app's settings or in your device settings.
17. Marketing communications
We do not send marketing messages — not by email and not by notification. The sign-up flow records a marketing preference for the future; nothing is currently sent either way. If that ever changes, messages will go only to people who opted in, every message will carry a working unsubscribe, and this policy will be updated first.
18. Cookies and the website
calclick.app is an informational website. It does not use advertising, analytics or tracking cookies, and it runs no trackers, pixels or fingerprinting of any kind. Because there is nothing tracking you, there is nothing you need to opt out of.
19. Deleting your account and your data
- A single meal is deleted straight from the diary, together with its photo.
- The whole account is deleted from inside the app, at the bottom of the Settings screen ("Delete account"). This removes your profile, diary, photos, progress data and any coach links in both directions, and it cannot be undone.
- You can also write to us at support@calclick.app and we will do it for you.
Note: deleting your account does not cancel your subscription — the subscription is managed by your App Store or Google Play account and must be cancelled there.
20. Changes to this policy
We will update this document as the service changes. A material change will be brought to your attention inside the app at least 7 days in advance, and where the law requires it we will ask for your consent again. The date of the last update appears at the top of this document.
21. Contact us
Questions, requests to exercise your rights, or complaints: support@calclick.app · PONPON