CalTrack Privacy Policy

CalTrack is a calorie and weight tracking app. It is designed to be local-first: the food and weight data you log is stored on your device. This policy explains exactly what we collect, where it is stored, and the choices you have.

What you log (stored on your device):

• Diet profile (start date, timezone, units, calorie/weight targets, optional height and sex)
• Weight entries (value, date, time)
• Food diary entries (food names, quantities, calories, optional tags and notes)
• Custom foods and meal templates you create

This data is stored in an encrypted on-device database (SQLCipher). If you use CalTrack as a guest, it stays on your device and is not uploaded to our servers. If you sign in, your food diary and weight data is also backed up to your account so you can restore it and use it across devices — see “Cloud backup & sync” below.

If you create an account (optional):

• We collect your email address and a securely hashed password.
• We store an authentication token so you stay signed in. Data in transit uses encrypted HTTPS connections.
• You can use the app fully as a guest without an account.

Cloud backup & sync (when signed in):

• When you sign in, your food diary and weight entries are backed up to your account on our servers, so you don’t lose them and can restore them on another device.
• All data is transmitted over encrypted HTTPS connections. Our database is hosted on Google Cloud with encryption at rest, and is reachable only by the app over authenticated, access-controlled connections.
• Your password is stored only as a secure bcrypt hash (never in plain text), and your email and name are additionally encrypted at the field level.
• You stay in control: guest use keeps everything on-device only, and you can delete your account and all associated server data at any time (see “Your rights” below).

Third-party services we use:

• Sentry— crash and error reporting. We filter out personal and health data (weights, food names, notes, emails) before any report is sent, so crash reports do not contain what you logged.
• RevenueCatwith Google Play Billing / Apple App Store — processes optional premium subscription purchases and tells the app whether your subscription is active. Payment card details are handled by Google/Apple, never by us.

What we do NOT do:

• We never send your health data (weights, food names, notes) to advertising or analytics networks.
• We never use advertising SDKs and we do not show ads.
• We never sell or rent your data to third parties.

Notifications:

If you enable reminders, CalTrack schedules local notifications on your device. These reminders are generated on-device and are not sent through our servers.

Your rights:

• You can export your data at any time.
• You can delete all on-device data by clearing the app’s data or uninstalling it.
• If you created an account, you can delete it and all associated server data in-app and via our web deletion page.

Children:

CalTrack is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children.

Contact:

For privacy questions or data deletion requests, email futuremakers.ame@gmail.com