CaloClaw Privacy Policy

1. Information we process and why

CaloClaw is for people age 18 or older. It may process profile values a user enters, such as age range, height, weight, activity level, calorie target, confirmed food name, calories, optional nutrition values, meal type, note, time, and settings to provide record sync, trends, and Cat Coach reactions. These are not medical decisions.

In-app support stores your inquiry title, messages, account identifier, and message times to provide replies. Only you and authorized administrators can access the conversation. You can delete it in the app; account deletion also removes your inquiries. Slack receives only an inquiry number and administrator link, without message text or account details.

2. Private record-photo attachments and AI analysis

A meal photo is optional. CaloClaw removes embedded EXIF data, normalizes it to JPEG, uploads it through authenticated access to private object storage, and serves it only to the authenticated account through a short-lived signed link.

Photo AI analysis is optional. Only after consent does CaloClaw send the photo and an optional description to the disclosed provider (currently OpenAI) to create an editable food estimate. Provider responses are requested with no response storage, and CaloClaw does not retain the description or provider raw response. Deleting a photo or its linked record also deletes the stored photo; a photo and its numeric record can be managed independently.

3. Accounts, ads, and purchases

Google or Apple sign-in may use provider-authorized identifiers, email, and name for authentication and linking. Sensitive mobile tokens are kept in operating-system secure storage.

The free version may use Google Mobile Ads outside active logging. Store transaction and product identifiers and receipt-verification results may be processed to validate Plus or a legacy ad-removal entitlement. CaloClaw does not store payment-card numbers.

4. Retention, editing, and deletion

Users can edit or delete a private photo and its numeric record separately. When account deletion is available in the app, its confirmation screen states the scope, the irreversible effect, and any legally required transaction retention. De-identified purchase records and minimal anti-fraud linkage may be retained only for the necessary legal period.

5. Rights and safeguards

Where applicable law allows, request access, correction, deletion, restriction, or withdrawal of consent at contact@microcephalus7.dev.

CaloClaw uses HTTPS, authenticated access controls, private storage, short-lived signed media links, and operating-system secure storage. No security measure can guarantee absolute security.