Calori Track Privacy Policy
Last updated 31 August 2026
Calori Track logs what you eat from a description you type. This policy explains exactly what it stores, what it sends elsewhere, and how to get rid of all of it.
What we collect
Only what the app needs to work. There is no analytics, no advertising, and no tracking of any kind.
- Your email address — to identify your account and to send verification and password-reset messages.
- Your name, if you enter one — used only to address you in the app.
- Your password, stored only as a salted PBKDF2-SHA256 hash. We cannot read it, and we cannot recover it — only reset it.
- Your food log — what you logged, the estimated calories and macros, and the date.
- Your targets and saved meals.
- Token usage counts — how much of the AI model your account has used, so limits can be enforced and costs understood. This records amounts, not content.
We do not collect your location, contacts, photos library, health records, device identifiers, or advertising IDs.
What is sent to OpenAI
The nutrition estimates come from OpenAI's models. When you log something, the following is sent to OpenAI to produce that estimate:
- The text you type.
- Any food photo you choose to send.
- Your current daily totals, targets, and the names of your saved meals, so the reply makes sense in context.
- Your first name or the first part of your email, so it can address you.
Your password is never sent. Your full log history is never sent — only the day you are looking at.
OpenAI processes this under their API terms. At the time of writing, OpenAI states that data submitted through their API is not used to train their models. Their handling of it is governed by OpenAI's privacy policy, not this one.
Where it is stored
Your account and log live in a Cloudflare D1 database. Every row is keyed to your account, and every query is scoped to it — one account cannot read, change, or delete another's data.
The app is served by Cloudflare, which processes request metadata such as IP addresses as part of delivering and protecting the service.
Staying signed in
Signing in issues a random session token that is stored on your device and sent with each request. Only a hash of it is kept on the server, so a copy of the database cannot be used to impersonate you. It expires after 180 days, and signing out destroys it immediately.
No advertising or tracking cookies are used.
Deleting everything
In the app, go to Settings → Delete my account. Confirm with your password and every row belonging to you — entries, targets, saved meals, usage records, sessions, and the account itself — is permanently erased. It is immediate and cannot be undone.
If you are signed out, entries stay on your device only and are removed when you delete the app.
Children
Calori Track is not intended for children under 13, and accounts should not be created for them.
Calorie figures are estimates
Every number in this app is a language model's guess from a short description. It is not measured, not verified, and not medical or nutritional advice. Do not rely on it for any clinical or medical purpose. Speak to a qualified professional about your diet.
Changes
If this policy changes materially, the date at the top changes and — where the change affects how your data is handled — you will be told in the app.
Contact
Questions, or a request about your data: privacy@payvelora.com