Privacy Policy

Last updated: September 15, 2026

This Privacy Policy describes how Fotocal ("Fotocal", "we", "us") collects, uses and protects your information when you use the Fotocal mobile application (Android package: com.fotokal.app) and this website. By using Fotocal you agree to the practices described in this policy.

1. Data controller

The controller of your personal data is the Fotocal team. For any privacy inquiry, contact us at fotocal.app@gmail.com.

2. Data we collect

2.1 Account data

• Email address and login credentials.
• Profile data you choose to provide: name, age, sex, height, weight, activity level and goals (lose, maintain or gain weight).

2.2 Health & nutrition data (special category)

• Logged meals (foods, calories, macronutrients, quality scores).
• Weight entries and weight history.
• Water intake logs.
• Mood notes and journal entries.
• Step counts (via Health Connect, if you authorize it).
• Voice recordings, if you use voice logging: the audio is sent to our AI provider for transcription (see section 4) and is not kept as a recording.

This information qualifies as health data (a special category under GDPR Art. 9). We process it only with your explicit consent, given when you create your account and set up your goals, and revocable at any time by deleting your account.

2.3 Camera and photos

Fotocal needs camera access (and optionally your gallery) for the food, barcode and menu scanning features. Photos you take are transmitted securely to our AI provider for analysis (see section 4). We do not access the rest of your gallery or use your photos for any other purpose.

2.4 Health Connect data (steps)

If you connect Fotocal to Android's Health Connect, we read your step count to display it in the app and estimate your calorie expenditure. Our use of Health Connect data complies with the Google Play health data policy, including the Limited Use requirements:

• We only use step data to provide user-visible app features (step count and calorie estimates).
• We never use Health Connect data for advertising and never sell it.
• We never transfer Health Connect data to third parties except to provide the service, with your consent, or where required by law.
• You can revoke access at any time from the Health Connect settings.

2.5 Technical and usage data

• Device identifiers, device model, Android and app version.
• In-app usage events (screens visited, features used) via product analytics.
• Crash and diagnostic logs.

2.6 Feedback on Coach Kal

When you rate a Coach Kal reply, a thumbs-up stores only the verdict, the reply's id, your language and app version, never your words. A thumbs-down or a report stores, in addition, the message you sent and the reply Coach Kal gave, so we can see what went wrong; the sheet tells you this before you type. These rows are used only to review wrong answers, are readable only by Fotocal staff, and are deleted after 90 days, and immediately when you delete your account.

3. How we use your data

• Providing the service: analyzing your meals, computing calories and macros, showing your progress, counting steps and powering the Coach Kal chat (performance of contract, GDPR Art. 6(1)(b); explicit consent for health data, Art. 9(2)(a)).
• Personalization: goals, recommendations, reminders and weekly recaps tailored to you (consent).
• Improving the app: aggregated usage analytics and bug fixing (legitimate interest, Art. 6(1)(f)).
• Managing subscriptions: verifying your subscription status with Google Play (performance of contract).
• Service communications: important notices about your account or changes to this policy.
• Friends (optional): if you add someone with an invite code, that person sees your name, your current streak and which days of the week you logged meals; nothing else, and only while you are friends in the app.

We do not sell your personal data or share it with third parties for advertising purposes.

4. AI processing

Fotocal's AI features (photo food scanning, menu scanning, voice logging, Coach Kal, the weekly recap and the daily meal plan) rely on OpenAI as a processing provider. When you use these features:

• Your photo, voice recording or message is sent encrypted (TLS) to OpenAI's servers for analysis, and the nutrition result or coach reply is returned to us.
• Under OpenAI's API terms, data submitted via the API is not used to train their models.
• Coach Kal may use context from your diary (meals, goals, progress) to provide useful, personalized answers.

AI outputs are informational estimates and do not constitute medical advice (see Terms of Service).

5. Service providers (processors)

Provider	Purpose	Data
Supabase	Database, authentication and cloud storage	Account, diary, health data and photos
OpenAI	Food image analysis and Coach Kal chat	Food photos, chat messages, nutrition context
PostHog	Product analytics (app usage)	Usage events, technical identifiers
Firebase Crashlytics (Google)	App crash reporting	Crash log, device model, Android and app version, app user identifier; production builds only
Google Play Billing	Subscription management and payments	Purchase state (Google processes payment; we never see your card)
RevenueCat	Subscription management and premium entitlements	Purchase state, app user identifier, subscription status
Health Connect (Google)	Reading step counts	Daily steps
Expo (notifications/OTA)	Push notifications and app updates	Notification token and notification content (delivered via FCM/APNs)
Open Food Facts	Barcode product lookup and food search by name	Scanned barcodes, food names searched; products you submit
USDA FoodData Central	Public nutrition database (food search by name)	Food names searched; no personal data
Wikipedia	Reference summary of a food when Coach Kal looks one up	The food name looked up; no personal data

All our providers operate under data processing agreements. Some may process data outside the European Economic Area; in such cases Standard Contractual Clauses or other valid international transfer mechanisms apply.

6. Data retention

• Your data is retained while your account is active.
• If you delete your account, your personal data is removed from our production systems within a maximum of 30 days (backups are purged in subsequent cycles).
• Feedback on Coach Kal (section 2.6) is kept for 90 days at most, then deleted automatically.
• We may retain aggregated, anonymized data (which no longer identifies you) for statistics.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erasure ("right to be forgotten") — you can delete your account directly in the app: Profile → Account Settings → Delete account, or see our deletion instructions.
• Data portability in a structured format.
• Restriction of and objection to processing.
• Withdraw consent at any time, without retroactive effect.
• Lodge a complaint with your supervisory authority (in Spain, the Agencia Española de Protección de Datos, aepd.es).

To exercise any of these rights, email fotocal.app@gmail.com. We will respond within 30 days.

8. Security

We apply appropriate technical and organizational measures: encryption in transit (TLS), encryption at rest in our database, role-based access control and per-user data isolation (row-level security). No system is 100% infallible, but we review our measures continuously.

9. Children

Fotocal is not directed at children under 16 and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, and we will notify you in the app of significant changes. The "last updated" date indicates the version in force.

11. Contact

For any privacy question: fotocal.app@gmail.com