Almost all of your data stays on your device. The only things transmitted off your device are food photos (for AI scanning), food search queries (to fetch nutrition data), and — starting November 6, 2026 — anonymous app-usage counts and error reports that never include your health information and that you can turn off in the app (Profile). We do not sell your data. We do not have a backend database storing your personal health information.
CalFriendly LLC ("Company," "we," "us," or "our") operates the CalFriendly mobile application ("Application"). This Privacy Policy explains how we collect, use, store, and share information when you use our Application.
By using the Application, you agree to the practices described in this Privacy Policy.
When you set up the Application, you provide:
All onboarding data is stored locally on your device using AsyncStorage (persistent local device storage). We do not transmit this data to our servers. Your device's own security — PIN, password, or biometrics — protects locally stored data.
All meal log data is stored locally on your device. We do not sync, back up, or transmit your meal history or reminder settings to our servers.
When you photograph food for AI analysis, the photo is transmitted over HTTPS to Anthropic, Inc. (our AI provider) for the purpose of generating a nutritional estimate. The photo is not stored or retained by CalFriendly LLC beyond displaying the scan result. Anthropic's handling of data submitted to their API is governed by Anthropic's own privacy policy.
When you type a food name in the search bar, the search text is transmitted to USDA FoodData Central (a U.S. government public database) and Open Food Facts (an open-source public database). If you scan a barcode, the UPC code is transmitted to Open Food Facts (an open-source public database). These queries do not include your name, account information, health status, or any personally identifying information. Searches and photo scans are relayed through our server (hosted on Cloudflare), which uses your IP address only to deliver the request and to limit abuse; request counters are kept in memory for the current hour and are not stored, and the hosting provider may keep short-lived technical logs (such as IP address and request details) for security and troubleshooting.
Your subscription status (free or Pro) is stored locally on your device. If you subscribe through the Apple App Store or Google Play, payment information is handled entirely by Apple or Google. We never receive, see, or store your credit card or payment details.
The Application is built with Expo, which may collect anonymous device diagnostic information (device type, OS version, crash reports) to support app stability. This data is anonymized and not linked to your identity.
Starting November 6, 2026, the Application sends anonymous usage events to PostHog, Inc. (United States), our analytics provider, so we can see where people get stuck and improve the app. These events are: the app being installed or opened; which onboarding step is reached; your answer to the onboarding question “How did you find us?” (a marketing channel such as YouTube or TikTok); whether the subscription screen is viewed; and whether a purchase or restore is tapped and how it ends (success, cancelled, failed). Each event is tied only to a random identifier generated on your device — not your name, email, advertising ID, or payment details — along with basic device information (app version and build, operating system and version, device make and model, language, time zone, screen size, and a random session ID). We configure the service not to derive your location from your IP address.
This never includes your name, date of birth, weight, height, sugar-alert preference, dietary goal, meal logs, supplements, GLP-1 reminder settings, food photos, or food searches. It is not used for advertising, not sold, and not combined with any other data to identify you. It is not collected from devices set to the European Economic Area, the United Kingdom, or Switzerland.
You can turn it off at any time in the app under Profile → Share anonymous usage data; turning it off stops collection immediately and deletes the random identifier from your device. Because events are not linked to your identity, we cannot look up or delete the events of a specific person after they are sent.
Error reports (beginning November 20, 2026): if the app hits an error or crashes, it may also send the type of error (for example, “TypeError”), a short error code, and the name of the app area where it happened (for example, “scan” or “purchase”). It never includes the error message, what you were doing, your meals, health information, photos, anything you typed, or file names. The same Profile switch turns error reports off, and they are not collected from devices set to the European Economic Area, the United Kingdom, or Switzerland.
| Data | Purpose |
|---|---|
| Onboarding (name, weight, height, goal) | Calculate personalized calorie targets; display in profile |
| Diabetic status | Enable/disable sugar alert features |
| Meal logs | Display daily macro progress; show weekly/monthly trends |
| Food photos | Generate AI nutritional estimates via Anthropic |
| Food search queries | Fetch nutrition data from USDA / Open Food Facts |
| Subscription status | Enable or restrict premium features |
| Anonymous usage events | Understand where people get stuck in onboarding and purchase screens (from November 6, 2026) |
We do not use your information for advertising, marketing, or profiling.
All personal health data is stored locally on your device using AsyncStorage. This means:
| Service | Data Shared | Why |
|---|---|---|
| Anthropic, Inc. | Food photos during AI scan | AI nutritional analysis |
| USDA FoodData Central | Food search text | Retrieve nutritional data |
| Cloudflare, Inc. | Hosting and relay of searches and photo scans (IP address and request details, short-lived) | Deliver requests, limit abuse, security |
| Open Food Facts | Food search text and product barcode (UPC) | Packaged food nutrition |
| Apple App Store | Payment info (handled entirely by Apple) | Subscription billing |
| Google Play Store | Payment info (handled entirely by Google) | Subscription billing |
| Expo | Anonymous device diagnostics | App stability |
| PostHog, Inc. | Anonymous app-usage events and a random on-device identifier (from November 6, 2026; see Section 2.7) | Product analytics |
| RevenueCat, Inc. | Anonymous app user ID and your store purchase receipt | Subscription status and purchase verification |
All network requests are transmitted over HTTPS. Data stored locally on your device is protected by your device's built-in security (passcode, biometrics). We do not operate a server that stores your health data, which eliminates the risk of a centralized data breach.
The Application is intended for users 18 years of age or older. By using the Application you confirm you are at least 18. We do not knowingly collect personal information from anyone under the age of 18, including children under 13. If you believe a minor has used the Application, please contact us immediately and we will delete any associated data.
All data collected during onboarding and meal logging is accessible directly within the Application (Profile tab and daily log view).
To delete all data, uninstall the Application. All locally stored data is permanently deleted. You can also update your onboarding data (weight, goal, name) at any time in the Profile tab.
The Application is currently offered to residents of the United States and Canada only. If you are located outside of these regions, we recommend you do not use the Application at this time.
If you are a California resident, you have rights under the California Consumer Privacy Act including the right to know, the right to delete, and the right to opt out of the sale of your data. We do not sell personal data — no opt-out required. To exercise your rights, contact us at the address in Section 16.
If you are a Canadian resident, your personal information is handled in accordance with PIPEDA and applicable provincial privacy legislation. You have the right to access, correct, or request deletion of personal information. Given that all personal health data is stored locally on your device, access and deletion can be performed directly through the Application or by uninstalling it.
Consumer health data. Your health profile (sugar-alert preference, weight, height, dietary goal, meals, supplements and GLP-1 reminder settings) is stored only on your device. We do not collect, share or sell consumer health data (as defined in laws such as Washington's My Health My Data Act and Nevada's consumer health data law) off your device. Food photos and food searches are sent only to return a nutrition estimate, are not linked to your identity, and are not stored by us. Questions or requests: support@cal-friendly.com.
The Application does not use advertising cookies, tracking pixels, advertising identifiers, or cross-app tracking. Beginning November 6, 2026 it uses the anonymous analytics described in Section 2.7, which you can turn off in the app. Our website uses no tracking cookies at this time, loads no third-party scripts or analytics, and hosts its own fonts so your browser does not contact third-party font services. Our hosting provider (Cloudflare) may process standard technical request data, such as IP address, to deliver and protect the site.
If we begin using advertising or analytics technologies (such as a Meta Pixel or Google Analytics) on our website or within marketing campaigns, we will update this Privacy Policy before doing so, disclose what is collected, and provide instructions for opting out where required by law.
CalFriendly is not a HIPAA-covered entity. The Health Insurance Portability and Accountability Act (HIPAA) applies to healthcare providers, health plans, and healthcare clearinghouses — not to consumer food tracking apps. All health-related data you enter (dietary goals, sugar-alert preference, weight, activity level, GLP-1 reminder settings) is stored exclusively on your device, as described in Section 4. It is never transmitted to CalFriendly's servers, shared with healthcare providers, or combined with your medical records. Because no protected health information (PHI) is collected or transmitted to us, HIPAA does not govern this Application, and the Application does not interface with any electronic health record (EHR) system.
We may update this Privacy Policy at any time. When material changes are made, we will notify you via in-app notice or email at least 14 days before the changes take effect.
October 2026 update: added CalorieNinjas and Cloudflare disclosures and a consumer health data section (Sections 2.4, 5 and 12A); added anonymous usage analytics (Sections 2.7, 3, 5 and 13), effective November 6, 2026 November 2026 update: CalorieNinjas was removed as a data source; typed food searches go only to USDA FoodData Central and Open Food Facts., and error reports (Section 2.7), effective November 20, 2026.
For privacy questions, data requests, or to exercise your rights:
CalFriendly LLC
Email: support@cal-friendly.com
Mailing Address: 7101 Yarish Rd, Alger, MI 48610, United States
Response time: within 3 business days.