Privacy Policy

The short version

CalJoy needs your meals and some facts about your body to work out a calorie target and tell you what is on your plate. That is what your data is used for. It is not sold, it is not shared with advertisers, and your health information is never used to target you with anything.

You can delete your account from inside the app at any time, and the identifying parts of it are erased immediately.

Who is responsible

CalJoy is built and operated by Saad Lachhab, an independent developer based in the United Arab Emirates. For anything in this policy, including a request to see or delete your data, write to hello@caljoy.io.

What we collect

Only what a food diary needs in order to be one.

• Account details — your email address if you sign in with a link, or the identifier Apple or Google gives us if you sign in with them. A display name and photo if you set one.
• Your plan inputs — sex, date of birth, height, weight, goal weight, activity level and diet. These exist to calculate your daily target; without them the number would be a guess.
• Photos of your meals, and the foods recognised in them.
• Your diary — meals, portions, exercise, weight entries and streaks.
• Your conversations with the AI coach.
• Health data you explicitly connect through Apple Health or Health Connect: workouts, active energy and steps. CalJoy can also write the meals you log back to Apple Health, if you allow it.
• Usage analytics — which screens you open and which actions you take, so we can see where the app is confusing.
• Your subscription status, which the app store tells us through RevenueCat.

What we deliberately do not collect

CalJoy never sees your card. Payment is handled entirely by Apple or Google, and all we are told is whether a subscription is active.

Analytics are tied to a random identifier generated the first time you open the app. It is not your device id — an earlier build used one and it was the wrong call, so it was removed.

There is no access to your photo library beyond the pictures you choose, and no background location, contacts or microphone recording.

Your meal photos

When you photograph a plate, the image is sent to Microsoft Azure OpenAI, which identifies the foods in it and sends back a list. The photo is stored with your diary entry so you can look back at what you ate, and you can delete any entry — and its photo — from the app.

Your photos are not used to train any AI model, and Azure processes them under an agreement that forbids it.

Where the nutrition numbers come from

Calories and macronutrients are read from CIQUAL, the French national food composition database, which is bundled with the service. Working out the numbers for your meal involves no personal data leaving CalJoy: the model identifies the food, and the arithmetic happens here.

Health and fitness data

Health data gets stricter treatment than everything else, because both Apple and Google require it and because it is the most sensitive thing here.

It is used only to show you your own information and to adjust your calorie target for the exercise you actually did. It is never used for advertising, never sold, never shared with data brokers, and never used to build a profile of you for anyone else.

You can withdraw the permission at any time in your phone’s settings, and CalJoy stops reading it immediately.

Who else processes your data

A short list, and each one does exactly one job.

• Microsoft Azure — hosting, and the AI models behind food recognition and the coach.
• RevenueCat — subscription status. It receives an account identifier and what you bought, never health data.
• Apple and Google — sign-in and payment.
• Resend — sending your sign-in emails.

Advertising and measurement

CalJoy runs ads on Instagram and TikTok, and needs to know roughly which ones bring people to the app so the money is not wasted. On iOS this uses the advertising identifier, and it asks first with the system prompt — decline and nothing is collected. On Android the equivalent identifier is used the same way.

This measures where an install came from. It never includes your meals, your weight, your health data or your coach conversations.

Legal bases, if you are in the EU or UK

We process your account and diary to perform the contract you entered into by using the app. Health data is processed with your explicit consent, given through the system permission prompt. Analytics and advertising measurement rest on consent where consent is required, and on legitimate interest in improving the product where it is not. Where we rely on consent, you can withdraw it at any time without affecting anything done before.

Deleting your account

You can do this yourself, from inside the app, without asking anyone: tap your profile photo to open Settings, scroll to the bottom and choose Delete account. It happens immediately — there is no waiting period and no email to reply to.

Your email address, your Apple and Google sign-in identifiers, your name and your profile photo are erased the moment you confirm. Your diary, meal photos, exercise, weight history and coach conversations are removed by a scheduled job shortly afterwards.

If you cannot sign in, email hello@caljoy.io from the address you signed up with and we will do it for you — normally within two working days, and always within 30 days.

Deleting your account does not cancel a subscription, because the subscription lives with Apple or Google rather than with us. Cancel it in your Apple or Google account settings, otherwise it will keep renewing.

How long it is kept

Your diary is kept for as long as your account exists, because a food diary that forgets is not one.

When you delete your account, your email address, sign-in identifiers, name and photo are erased immediately. The account row itself is kept briefly so that a refund or cancellation arriving from the app store days later has somewhere to land, and a scheduled job then removes the remaining personal data.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Premium accounts can export the diary directly from the app; for anything else, write to hello@caljoy.io and we will answer within 30 days.

The fastest route to deletion is Settings inside the app, which does not require asking anyone.

If you are in the EU, the UK or a country with a data protection authority, you have the right to complain to it.

Children

CalJoy is not intended for anyone under 16, and calorie targets in particular are not appropriate for children. We do not knowingly collect data from them. If you believe a child has created an account, tell us and it will be removed.

International transfers

CalJoy is operated from the United Arab Emirates and hosted on Microsoft Azure, so your data may be processed outside your own country. Where the law requires a safeguard for that transfer, such as the European Commission’s standard contractual clauses, it is in place with the processor concerned.

Changes to this policy

If this policy changes in a way that affects you, the app will say so before the change takes effect rather than quietly updating this page. The date at the top always reflects the current version.