Last updated: 15 September 2026. Not a substitute for counsel. The legal entity name and registered address will be printed here before store listing.
This policy describes how Cal Clark handles information in the mobile app and on calclark.app. We collect what we need to log meals, keep an account, and run a paid plan. We do not sell meal photos or profiles.
Who is responsible
Controller: to be published here (legal name and address) before App Store or Google Play listing. Contact: support@calclark.app.
What we collect
- Account: email, and Apple or Google sign-in.
- Profile you give us: name, sex, date of birth, height, weight, target weight, activity, goal, units, language, optional meal reminders.
- Meals: photos you choose to send, typed descriptions, barcodes, drafted names and macros, grams you edit, saved meals.
- Purchases: whether you have Pro, through Apple or Google. We never see your card number.
- Diagnostics: crash reports, with photos and text hidden. In some versions of the app, basic usage stats in the EU. Never for ads.
Photos and AI
A photo or description you send goes to our servers in the EU, is stored privately with your account, and is sent to OpenAI to draft the log. We then check food names against published US government nutrition tables that we keep on those servers. Your photos never go to USDA. Details: where the numbers come from. The app asks once before the first estimate leaves the device.
Who processes data for us
- Clerk - so you can sign in with Apple, Google, or email.
- Hetzner - servers in the EU that hold your account and diary.
- Cloudflare - private photo storage.
- OpenAI - drafts the meal from a photo or a typed description.
- Apple, Google, and RevenueCat - payments. We never see your card number.
- Open Food Facts and FatSecret - packaged product labels. FatSecret nutrition information is provided by the fatsecret Platform API.
- Sentry - crash reports, with photos and text hidden.
- Resend - sends the email that confirms your waitlist signup on calclark.app.
- PostHog (EU) - optional usage stats in some versions of the app. Never for ads.
What we do not do
- No ads in the app, no ad networks, no sale of meal photos.
- No social feed. Your log is not shown to other members.
- We do not use the advertising identifier for tracking.
How long we keep it
Account and meals stay while the account is open. Delete account in Settings, or use the account deletion page. That removes your profile, meals, and photos. Short backups and legal records may remain for a limited time.
Your rights (GDPR)
If you live in the EU/EEA or UK you can ask for access, correction, deletion, restriction, portability, or objection. Write to support@calclark.app. You may also complain to your local data protection authority (in Poland: UODO).
Children
Cal Clark is not for people under 16.
International transfers
Some of the companies above may handle data outside the EEA. We use them only to run Cal Clark.
Waitlist on this website
If you join the waitlist we store the email you typed, the language of the page, and when you signed up and confirmed. We send you one email with a link to confirm the address. Resend sends that email for us. We only tell confirmed addresses when the app is on the stores. We keep the address until you ask us to remove it or we close the waitlist. To remove it, write to support@calclark.app. We do not sell that list. See cookies.
Health-related data
Height, weight, goal, activity, and meal logs can say something about health. We use them to set a calorie and protein budget and to keep your diary. We do not use them for ads. Apple Health and Google Health Connect are not wired in this version.
When a photo leaves the phone
A photo or description is sent only after you choose to analyze it. The app asks once before the first estimate leaves the device. We do not run a background camera upload.
Lawful bases (GDPR)
- Account, meals, and the paid plan: the contract to run Cal Clark.
- Health-related profile and meal photos used to draft the log: your consent, which you can withdraw by deleting the account or stopping AI scans.
- Waitlist email: your request to be notified.
- Security, invoices Apple or Google keep, and legal holds: legal obligation or legitimate interest in running a lawful service.
Supervisory authorities
You may complain to your local authority. In Poland that is UODO. In Germany the competent state commissioner (or BfDI for federal matters). In Spain AEPD. In the UK the ICO.
Changes
Material changes will be dated on this page.