FitCal Privacy Policy

Effective Date: October 4, 2026

FitCal ("FitCal", "the App", "we", "us", or "our") helps users track meals, estimated nutrition information, weight-related goals, and related wellness information.

This Privacy Policy explains what information may be collected when you use FitCal, why it is processed, how it may be shared with service providers, how it is protected, and the choices available to you.

1. Information We Collect

Depending on the features you use, FitCal may process:

Account and Authentication Information

Email address
Account identifiers (UUID)
Google or Apple authentication identifiers
Authentication tokens and session records (JWT)

Profile and Wellness Information

Information voluntarily provided to personalize FitCal, such as:

Height and current weight
Biological sex (for basal metabolic rate and macro targets calculation)
Goals (weight loss, maintenance, muscle gain) and target weight
Daily physical activity level
Nutrition targets (calories, protein, carbs, fat)
Weight history entries

Meal and Nutrition Information

Logged meal entries and portion labels
Estimated calories, protein, carbohydrates, and fat
Meal timestamps and analysis summaries

Food Images

When you choose to analyze a meal using the camera or photo library, FitCal processes the image to provide an AI-assisted estimate of foods and nutrition information.

Important Storage Notice: FitCal does NOT store raw food photos on its servers or database. The uploaded image is held ephemerally in RAM during the analysis request, transmitted securely over encrypted HTTPS to Google Gemini API, and purged immediately from memory once analysis completes. Only the parsed nutritional values are saved to your meal history.

Subscription Information

FitCal may process:

Subscription status and package identifiers
Store source (Apple App Store or Google Play)
Entitlement state and expiration/renewal dates

FitCal does not receive or store the user's full payment-card details. Payments are handled directly by Apple App Store or Google Play.

Piko, Rewards and Referral Information

Piko progression and virtual Piko Energy balance
Reward claims and unlocked milestones
Referral codes and referral relationships
Device installation identifiers for anti-abuse and reward qualification

Device, Security and Diagnostic Information

Installation platform (iOS / Android) and app version
Security and authentication events
Server logs and IP address (used solely for rate limiting, abuse prevention, and network security)
App activity and analytics events
Device or app installation identifiers used for analytics, attribution, subscription measurement, fraud prevention, and service operation

2. How We Use Information

FitCal uses information to:

Provide, maintain, and operate the App
Authenticate users and secure accounts
Personalize nutrition targets and caloric recommendations
Analyze meal images when requested
Save meal and weight history
Manage Piko progression and reward distribution
Manage Premium access and store subscriptions
Process referral rewards and prevent fraudulent activity
Provide customer support and resolve technical issues
Understand application usage and improve product experience
Measure app acquisition and attribution performance
Diagnose crashes, failures, and technical issues
Comply with legal obligations

3. Artificial Intelligence Processing

FitCal uses AI-assisted systems powered by Google Gemini to estimate foods, portions, and nutritional values from user submissions. AI-generated nutrition values are estimates and should not be considered medical advice or guaranteed facts.

4. Service Providers

FitCal relies on trusted third-party service providers to deliver the service:

Render: Application hosting and backend infrastructure
Turso / libSQL: Cloud database infrastructure
Google Gemini: AI-assisted meal vision analysis
RevenueCat: In-app subscription management, entitlement verification, and subscription attribution/measurement
Meta (Facebook): App analytics, app activation/registration measurement, and advertising attribution support
PostHog: Product analytics and app usage measurement
Brevo: Transactional email delivery and secure OTP verification codes
Apple: Sign in with Apple and App Store in-app purchases
Google: Google Sign-In and Google Play in-app purchases

5. Data Sharing and Sale Prohibition

FitCal does not sell personal information.

FitCal uses third-party service providers for essential application infrastructure, analytics, subscription management, security, and attribution measurement.

Depending on the platform and features used, limited app activity, device/app identifiers, subscription-related information, and analytics events may be processed by service providers such as Meta, PostHog, RevenueCat, Apple, and Google for purposes including application analytics, attribution measurement, subscription management, fraud prevention, and service improvement.

FitCal does not provide meal photos, nutrition history, weight history, health information, email addresses, or payment-card information to Meta or PostHog for advertising purposes.

Information may also be disclosed when required by law or when reasonably necessary to protect the security and integrity of the service.

6. Data Retention

FitCal retains account and product data while your account remains active or as reasonably necessary to provide the service. When an account is deleted, associated personal data is permanently deleted or anonymized, subject only to legitimate retention requirements (such as dispute resolution or fraud prevention records).

7. Account and Data Deletion

Users can initiate account deletion at any time:

Inside FitCal: Profile → Settings → Delete Account
Outside the App: https://fitcal-api-7g3d.onrender.com/delete-account

Important Subscription Warning: Deleting your FitCal account does NOT automatically cancel an active App Store or Google Play subscription. Subscriptions must be separately managed and canceled through your Apple or Google account.

8. Security

FitCal uses reasonable technical and organizational safeguards, including encrypted network communications (HTTPS/TLS) and cryptographically salted hashing (HMAC-SHA256) for authentication. No digital method is 100% secure.

9. Children's Privacy

FitCal is not directed to children below the minimum legal age permitted for independent digital consent under applicable jurisdiction law.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise your rights, contact us:

Operator: Furkan Elidolu
Privacy & Support Contact: tryfitcal@gmail.com
Support Portal: https://fitcal-api-7g3d.onrender.com/support