Privacy Policy

Last updated: April 30, 2026

KCalTrack ("the app", "we") is a calorie and nutrition tracking app developed by an independent developer. This policy explains what information the app accesses, how it is used, your choices, and your legal rights. It applies to all versions of the app on all platforms.

This policy should be read alongside our Terms of Service.

Short version: Your meal logs and personal profile never leave your device. When you use AI features, your meal descriptions are sent to the AI provider you choose. If you accept analytics, anonymised usage data is collected by Google. You can change your consent at any time in Settings → Privacy.

1. Data stored on your device

All meal logs, nutrition goals, and personal profile information (age, height, weight, activity level) are stored only on your device. This data is never uploaded to any server by us and never shared with third parties. You can export or delete this data at any time from within the app.

2. Permissions the app requests

3. AI-assisted meal analysis

When you use the AI chat feature, the text you type and any photo you choose to share are sent to the AI provider you have selected:

We do not store, log, or have access to the content of these requests. AI-generated nutritional estimates are approximations — always verify with a qualified nutrition professional.

4. User-supplied API keys

If you enter your own API keys for OpenAI, Anthropic, or Google Gemini, those keys are stored only on your device using Android's encrypted storage (EncryptedSharedPreferences with AES-256 encryption). We never see, transmit, or have access to your keys. You can remove stored keys at any time from Settings → AI Provider.

5. Analytics (Firebase Analytics)

With your consent, the app uses Firebase Analytics to collect anonymised, aggregated usage data (e.g. which screens are opened, feature interaction counts). This data helps improve the app. No personally identifiable information is included.

If you decline consent or withdraw it in Settings, analytics collection is disabled entirely. You can review Google's data practices at policies.google.com/privacy.

6. Crash Reporting (Firebase Crashlytics)

With your consent, the app uses Firebase Crashlytics to automatically collect crash reports when the app encounters an error. These reports include device model, OS version, and an anonymised stack trace. They do not include your name, email address, meal data, or any personally identifiable information.

If you decline consent or withdraw it in Settings, crash reporting is disabled. Crash reports are retained by Google for a maximum of 90 days.

7. Advertising (Google AdMob)

The free tier of the app displays ads served by Google AdMob. If you have accepted consent, AdMob may use device identifiers and usage data to show personalised ads. If you declined consent, you will still see ads but they will be non-personalised (contextual only).

You can also opt out of personalised ads system-wide via your device settings (Settings → Privacy → Ads on Android). For more information see Google's advertising policy.

Users who purchase the Premium subscription receive an ad-free experience.

8. Barcode product lookups

When you scan a barcode, the app queries the Open Food Facts public database to retrieve nutritional information. Only the barcode number is sent; no personal data is transmitted. See their privacy policy.

9. No account or sign-in required

The app does not require you to create an account or sign in. We do not collect your name, email address, or any other account identifier.

10. Data retention

All data stored on your device is retained until you delete it within the app or uninstall the app. Firebase Analytics data is retained by Google for up to 14 months, and Crashlytics data for up to 90 days, in accordance with Google's standard policies.

11. Your rights under GDPR (EEA & UK users)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

Our legal basis for processing data with your consent is Article 6(1)(a) GDPR (consent). You may withdraw consent at any time without affecting your continued use of the app.

12. Your rights under CCPA (California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

13. International data transfers

If you use AI features or have accepted analytics, your data may be transferred to and processed in the United States or other countries by Google, OpenAI, or Anthropic. These transfers are subject to the respective provider's data transfer safeguards (e.g. Standard Contractual Clauses for EEA transfers).

14. Children's privacy

The app is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

15. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent version. If we make material changes, the app will prompt you to review and re-accept the updated policy. Continued use of the app after notification constitutes acceptance of the updated policy.

16. Contact

If you have questions about this privacy policy or wish to exercise your data rights, please open an issue on the GitHub repository or contact the developer directly through the Play Store listing.


KCalTrack is an independent app not affiliated with Google, Anthropic, or OpenAI.