1. Who we are
Calorie Coin is the controller responsible for the processing described in this policy. “Calorie Coin”, “we”, “us” and “our” refer to the operator of the Calorie Coin app and website. Contact us about privacy at hello@caloriecoin.app.
This policy covers the Calorie Coin iOS app and the website at caloriecoin.app. It does not replace the privacy notices of Apple, Google, Sentry or other services you choose to use.
2. Privacy summary
- Your food, exercise, calorie targets, custom meals and preferences are stored on your iPhone.
- There is no Calorie Coin account, and we do not provide cloud sync or cloud backup.
- Apple Health access and remote diagnostics are optional and can be turned off.
- We do not sell your personal information or use Health data for advertising.
- We do not make decisions about you that have legal or similarly significant effects using solely automated processing.
3. Data kept on your iPhone
The app stores the following information locally so it can provide calorie budgeting features:
- food and exercise entries, including amounts, names, dates and times;
- daily calorie targets and target history;
- custom meals and their ordering;
- app preferences, onboarding state and advertising and diagnostic choices; and
- links and pending actions needed to keep app entries consistent with optional Apple Health actions.
This information is not sent to a Calorie Coin server. It is not included in Calorie Coin cloud sync or backup because those services do not exist. Your device and any backups you arrange through Apple remain subject to Apple’s settings and terms, although Calorie Coin’s protected operational log is specifically excluded from device backup.
4. Apple Health and HealthKit
Apple Health integration is optional. If you enable the relevant options and grant permission, Calorie Coin may:
- read workouts and their active-energy values so you can choose a workout to add to your local exercise log; and
- write the calorie estimate, meal name and time of newly logged meals to the Dietary Energy category in Apple Health.
Health permissions are requested separately by iOS. You can decline them, turn each integration off in Calorie Coin, and review or revoke access in the Health app. Turning an option off does not remove your existing local history or alter existing Health records. Calorie Coin does not read your full Health database.
5. Diagnostics and local operational logs
Optional Sentry reports
You may choose to share crash, hang and performance diagnostics with us through Sentry. Nothing is sent to Sentry unless sharing is on. Reports can include:
- a random installation identifier; app identifier, name, version, build, start time and foreground state;
- device family, model and architecture; simulator status; memory, processor, orientation and thermal information; locale and time zone;
- iOS name, version, build and kernel version;
- crash, exception and hang details; stack traces without variable values; session information; and sampled timings for app lifecycle, launch and screen-loading performance; and
- a closed operation name, error type, generalised error domain and numeric error code when a known app operation fails.
Reports do not include your name, email address, food or exercise log, calorie targets, custom meals, Health data, user-entered text, network requests, breadcrumbs, local log messages, screenshots, view hierarchy, session replay, file activity or Core Data contents. The app does not deliberately attach your IP address or advertising identifier, although Sentry necessarily receives network connection data when a report reaches its service.
Turning sharing off stops future capture, deletes reports waiting on the device and clears the random installation identifier. It cannot recall a report already received by Sentry or data already in flight. Sentry-hosted diagnostic data is configured for a maximum retention period of 30 days. Learn more in Sentry’s privacy policy.
Protected local operational log
Separately, the app keeps a limited operational log on your iPhone to help diagnose app, persistence, Health, tracking and purchase operations. Its events come from a closed catalogue and do not contain user-entered text or your food, exercise or Health values. The log uses complete file protection, is excluded from backup and is retained for up to 30 days and 3 MiB. It leaves your device only after you preview it and explicitly choose Share. You can clear it in the app at any time.
6. Advertising and privacy choices
The free version may display banner advertisements supplied by Google AdMob. Calorie Coin configures the Google Mobile Ads SDK for limited or non-personalised advertising: ad personalisation is disabled, local ad-storage consent is set to off, Google SDK crash reporting is disabled, and Google’s publisher first-party identifier is disabled. Premium removes advertising.
Depending on your region and choices, Google and its advertising partners may process your IP address and approximate location derived from it, device and app information, ad views and interactions, diagnostics, and limited storage or signals needed for delivery, frequency control, security and fraud prevention. Google’s User Messaging Platform (UMP) obtains and records applicable privacy choices and makes a Privacy Options form available when required.
Calorie Coin does not request Apple App Tracking Transparency permission, use the IDFA, enable Google’s first-party publisher ID, supply custom targeting or demographics, or track you across other companies’ apps and websites. We do not provide your calorie log or Health data to Google. Google may process data under its own terms; see Google’s privacy policy and how Google uses information from apps that use its services.
7. App Store purchases
Premium subscriptions and purchases are offered and processed by Apple through StoreKit and the App Store. Apple handles payment, billing and transaction records. Calorie Coin receives and checks product, transaction and entitlement status needed to unlock Premium or restore a purchase; we do not receive your payment-card details. App Store records are controlled and retained by Apple under Apple’s privacy policy.
8. Website hosting and email
Website
The provider serving this static website may receive technical information when you request a page, such as your IP address, the requested resource and the time of the request, and may create access or security logs. The information collected, how it is used, its retention period and any international transfers depend on the provider. Please consult the privacy information published by the provider you use.
The website does not use analytics, advertising scripts, forms or non-essential cookies. It does not read data from the Calorie Coin app.
If you email us, we receive your email address, message and anything you choose to include. We use it to respond, provide support, manage privacy requests and protect our legal interests. Please do not send Health data or other sensitive information by email. Ordinary correspondence is normally deleted within 24 months after the matter is resolved, unless it must be kept longer for a legal, security or dispute reason.
9. Why we process information
Under UK data-protection law, our legal bases are:
- Contract: to provide app features, verify Premium entitlements and respond to service requests you make.
- Consent: for optional Sentry reporting, HealthKit access and advertising choices where consent is required. Because Health information is special-category data, we rely on your explicit consent for the Health features you enable.
- Legitimate interests: to operate and secure the app and website, prevent fraud, understand and fix technical failures, answer correspondence and establish or defend legal claims. We limit the information used and balance these interests against your rights.
- Legal obligation: where we must keep or disclose information to comply with law.
You can withdraw consent at any time in the app’s Health, Diagnostics or Privacy Options settings, or in iOS settings where applicable. Withdrawal does not affect processing that was lawful before it.
11. Retention, security and deletion
- Local app data remains until you delete entries, use “Delete Data and Start Again”, or remove the app.
- The protected local operational log is limited to 30 days and 3 MiB and can be cleared sooner.
- Sentry server data is kept for no more than 30 days; queued reports are removed when you opt out.
- The hosting provider determines how long its access or security logs are retained; Calorie Coin does not set that period.
- Email correspondence is normally kept for up to 24 months after resolution.
- Apple and Google apply the retention periods in their own policies.
We use data minimisation, restricted diagnostic fields, consent gates, iOS sandboxing and complete file protection for the local operational log. No system is completely secure, so please keep your device and passcode secure.
“Delete Data and Start Again” removes Calorie Coin’s local history, targets, custom meals, preferences, Health-link state, diagnostic log, prepared exports, queued reports and diagnostic installation identifier. It cannot delete Health records, App Store purchase records, messages already sent by email, reports already received by Sentry, data in flight, or records another provider must retain. Manage those records with the relevant provider or contact us for help.
12. Your UK privacy rights
Depending on the circumstances, you may have rights to access, correct or erase your personal information; restrict or object to processing; receive information you provided in a portable form; and withdraw consent. You also have the right not to be subject to a solely automated decision with legal or similarly significant effects. Calorie Coin does not make such decisions.
Most app data is only on your iPhone, so we cannot access, identify or erase it remotely. Use the app’s controls to delete it. For information we do hold, email hello@caloriecoin.app. We may need enough information to verify your request and normally respond within one month.
You may complain to the UK Information Commissioner’s Office (ICO). We would appreciate the chance to address your concern first, but you do not have to contact us before the ICO. Visit the ICO’s data-protection complaints page.
13. Children
Calorie Coin is a general-audience service and is not directed to children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.
14. Changes and contact
We may update this policy when the app, website or law changes. We will publish the revised policy here and change the effective date; we will provide an additional notice in the app if a change materially affects how information is used.
Questions or privacy requests can be sent to hello@caloriecoin.app.