Privacy Notice

Thapanon Rungwittayatiwat operates Calies and is responsible for the personal information described here (the “Operator”). For a privacy request, contact [email protected].

• Account data: your sign-in email address, name, profile image, account identifier, sign-in time, and an essential session cookie. If you use email sign-in, we send a short-lived one-time code to verify control of that inbox; we do not store a password.
• Meal and diary data: meal photos, dates, meal type, notes, captions, identified foods, portions, calories, macros, edits, and sharing choices.
• Optional wellness data: calorie and macro targets, birthday, height, weight, sex used by the target equation, activity level, goal, and activity names, duration, timestamps, and active calories you enter.
• Profile and social data: handle, display name, avatar, bio, visibility, followers, follows, likes, and comments.
• Community safety: content reports, blocked accounts and moderation decisions, used to investigate abuse and enforce community rules.
• Device and service data: local app preferences, synchronization state, request timing, error details, and basic security logs.

Depending on where you live, meal, body, target, and activity information may be treated as sensitive or health-related information.

• authenticate your account and keep different users’ diaries separate;
• analyze meal photos, produce editable estimates, and answer adjustment requests;
• save and synchronize your food and activity diary, settings, photos, and profile across devices;
• show content to followers or the public only when you select that visibility;
• operate social actions such as follows, likes, and comments;
• protect the service, diagnose failures, prevent abuse, and control provider costs; and
• evaluate and improve estimate quality, including by recording the before-and-after values of manual corrections. Those correction records do not include the meal photo.

Calies processes ordinary account and service information as needed to provide the service you requested under the Terms of Use, for legitimate interests such as security and reliability where those interests do not override your rights, and to meet legal obligations.

Where law requires explicit permission for wellness or health-related information, Calies relies on the consent you give in the first getting-started step. You may withdraw that consent by deleting your account in the iOS app under You → Sign-in & Security → Delete account, or by contacting the Operator. Withdrawal does not make earlier lawful processing unlawful.

When you use spoken meal entry, stopping a recording sends that audio clip to Google for transcription. You can review and edit the resulting description before requesting a nutrition estimate. Calies does not save the audio to your diary or server storage; temporary recordings are discarded after processing or cancellation. Google processes submitted audio under its own privacy and retention terms.

To generate an estimate, Calies sends the optimized meal image and any note you add to Google (Gemini), BytePlus (ModelArk), or Alibaba Cloud (Qwen), depending on the estimate or adjustment requested. These providers process submitted meal photos, descriptions, portions and corrections to return nutrition estimates to Calies for your review and storage.

The iOS app asks for permission before your first AI request. You can decline and use manual food logging. You can turn off future AI sharing on that device in You → Sign-in & Security → AI data sharing. Requests already submitted may finish; turning sharing off does not remove earlier diary entries or provider-side records.

Other providers may process information only to perform their roles:

• an authentication provider supplies sign-in and basic account identity;
• cloud hosting and file-storage providers run the service and may store optimized photos;
• a managed database provider stores synchronized account, diary, and social records; and
• in development or device-only mode, some diary information and photos stay in your browser or on the local device.

These providers may process data in other countries under their own service and privacy terms. Calies does not use automated estimates to make legal, employment, credit, insurance, or similarly significant decisions about you.

Profiles and meals begin private. Calies discloses profile or meal information to followers or the public only when your visibility settings allow it. Public posts, captions, profile details, likes, and comments can be copied by people who see them.

Stored meal and avatar images may use private blob access or a long, unguessable public image URL, depending on how this deployment’s storage is configured. Avoid including faces, documents, or other sensitive details in a meal photo.

Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, protect users or the service, investigate abuse, or complete a business transfer with appropriate safeguards.

Calies uses an essential, HTTP-only cookie to keep you signed in. The browser may also store your device-side diary, photo outbox, synchronization state, theme, and temporary drafts. Blocking essential storage can prevent the app from working.

Only after you accept optional analytics cookies, Google Analytics measures website and installed-web-app usage, including page views and browser and device information. Analytics cookies distinguish browser visits. Calies sends generalized page paths without query strings, profile handles, meal identifiers, sign-in tokens, or diary contents. Google Signals and advertising personalization are disabled for this integration.

You can decline without losing access to Calies, or change your choice below. Withdrawing consent stops further Google Analytics collection and removes its browser cookies. Your choice is saved in this browser; if browser storage is blocked, it lasts for this page only.

Account, profile, settings, diary, social, and acceptance records are kept while needed to provide Calies and maintain a reliable synchronized log. Deleting a meal or activity removes it from the active diary, and deleting a meal schedules any stored photo for deletion; limited tombstone, cache, backup, security, or correction records may remain for synchronization, reliability, fraud prevention, dispute resolution, or legal duties.

Provider-side copies follow the applicable provider’s retention rules. The Operator should not retain personal information longer than needed for the purposes above.

• edit or delete diary entries in the app;
• choose private, followers, or public visibility for supported content;
• change your display name, avatar, bio, follow policy, and optional wellness profile;
• report harmful posts, comments or profiles, and block accounts in the iOS app;
• permanently delete your account and associated active diary, photo, profile, social and push-registration data in You → Sign-in & Security → Delete account. Apple-linked accounts confirm their Apple identity to revoke authorization before erasure;
• sign out, clear browser storage, or disconnect Calies from your sign-in provider; and
• ask the Operator for access, correction, deletion, restriction, portability, an objection, or consent withdrawal where applicable law gives you that right.

The Operator may need to verify your account before fulfilling a request. You may also have the right to complain to the privacy or data-protection authority where you live.

Calies uses access controls, authenticated routes, scoped database queries, and transport encryption where supported. No internet service can guarantee perfect security. If a breach creates a legal notification duty, the Operator will provide the required notices.

Calies is available to users aged 13 and over, subject to any higher minimum age and parental-consent requirements where they live. Users below the age of legal adulthood must have a parent or legal guardian review this notice and permit their use. Calies is not directed to children under 13. If we learn that an account does not meet the applicable minimum age or required parental consent, we will close the account and delete its personal information. A parent or guardian can contact [email protected] to request help or deletion.

Material changes to this notice receive a new effective date and may require a new acknowledgment or consent. Questions and privacy requests should be sent to the Operator at [email protected].