CalVance Privacy Policy

Last Updated / Effective Date: June 29, 2026

This Privacy Policy explains how CalVance ("we," "our," or "us"), operated by Rehan Abdullah, collects, uses, stores, processes, shares, and protects your personal data when you use the CalVance iOS mobile application (the "App") and our cloud-based backend services.

Please read this document carefully to understand our policies and practices regarding your data. By downloading, accessing, or using the CalVance App, you agree to the collection, processing, and use of information in accordance with this Privacy Policy. If you do not agree with any terms of this policy, please do not use the App.

1. Core Principles of Our Privacy Commitment

User Control First: We believe you own your data. We provide tools to access, export, and permanently delete your data at any time.
Data Minimization: We only collect the data necessary to provide and improve the App's core nutritional, logging, and calorie tracking services. We do not collect unnecessary background telemetry or tracking details.
No Selling of Data: We never sell, rent, or trade your personal, nutritional, or health data with third-party ad networks, data brokers, or marketing companies.
App Store Compliance: This policy is fully compliant with Apple App Store Review Guidelines 5.1.1 (Data Collection and Storage) and 5.1.3 (Health and Health Research).

2. Information We Collect and How We Collect It

We collect data in two ways: information you directly provide to us, and information collected automatically through your device.

A. Information You Provide Directly to Us

To calculate accurate daily nutritional goals, we collect:

Account Registration Details: Authenticated name, email address, and unique user identifier (UID) provided when logging in via Apple Sign-In or Google Sign-In.
Physical Profile Data: Current body weight, target weight, height, age, biological gender, activity level, and dietary objective (e.g., weight loss, maintenance, muscle gain).
Daily Log Entries: Food items, serving sizes, logged water intake, and exercise entries that you log in your daily diary.
Camera and Photo Uploads: If you use our AI Vision Scanner, we request access to your camera and photo library. We collect the photos of food plates you snap or select to process them statelessly for nutritional analysis.

B. Information Collected Automatically

Device Identifiers & Technical Info: Basic descriptors of your device model, operating system version, and system language settings to ensure stability and format layouts.
Authentication Tokens: Secure cryptographic session identifiers to maintain your login session.
Diagnostics and Crash Data: Error logs, launch times, and crash details are recorded to diagnose software bugs and scale server performance.

C. Apple HealthKit Integration (Optional)

If you grant explicit permission to link CalVance with Apple's HealthKit:

Read Permissions: CalVance reads your active energy (burned calories), body weight, water consumption, and logged dietary macronutrients to display them in your unified dashboard.
Write Permissions: CalVance writes your food log calorie/macro values and water intake entries to your Apple Health database so your device records stay synchronized.
Strict Exclusion: In compliance with Apple App Store Guideline 5.1.3, health data obtained via HealthKit is stored locally and securely, and is strictly excluded from any third-party analytics or server logging that does not relate directly to providing user-visible health tracking features. We never share HealthKit data with advertising platforms or data brokers.

3. How We Use Your Information and Lawful Bases

We use the data we collect solely to operate and improve the CalVance service under the following lawful bases:

To Provide and Maintain the Service: Authenticating your session, calculating your daily calorie and macronutrient targets, and managing your daily diary database.
AI Vision Scanning: Images uploaded for scanning are sent statelessly to our secure backend processing servers (Supabase Edge Functions) which invoke advanced vision AI models to identify the food and estimate portions. Photos are processed transiently and are never used to train machine learning models.
Cloud Syncing: Synchronizing your data between the local device database (CoreData) and our secure cloud infrastructure.
Subscription & Entitlements: Verifying premium subscription transactions and purchase receipts through the RevenueCat SDK.
Customer Support: Resolving technical issues, answering questions, and processing feedback sent to our support desk.

We do not share your data except with trusted service providers essential to the App’s functionality:

Supabase: Provides our secure Postgres database hosting, row-level storage, and user authentication infrastructure.
RevenueCat: Manages subscription receipt validation and processes entitlement transactions securely without accessing your credit card details.
AI Analysis API Providers: Food images are sent statelessly to secure APIs (such as OpenAI or Anthropic) for vision recognition. These providers do not retain your images or use them for training.

Compliance Guarantee: In accordance with Guideline 5.1.1, all third-party service providers (including Supabase and RevenueCat) are contractually obligated to provide the same or equal level of protection of user data as set forth in this Privacy Policy and required by the App Store Review Guidelines.

5. Data Storage, Security, and Row-Level Isolation

Row-Level Security (RLS): All user data in our Supabase databases is protected by Postgres RLS policies. This ensures that your profile, diary logs, weight history, and synced photos can only be accessed, updated, or deleted by you (the authenticated account owner).
Secure Storage Isolation: Uploaded food photos are stored in isolated, private folders matching your user UID inside our secure cloud buckets.
Data in Transit: All communications between the App and our backend services are encrypted using SSL/TLS protocols.
On-Device Security: Access tokens and sensitive credentials are saved locally in the secure iOS Keychain.

6. Auto-Renewable Subscriptions (Guideline 3.1.2)

If you purchase a CalVance Premium subscription:

Payment: Payment will be charged to your iTunes Account at confirmation of purchase.
Auto-Renewal: Subscription automatically renews unless auto-renew is turned off at least 24-hours before the end of the current period.
Charges: Your iTunes account will be charged for renewal within 24-hours prior to the end of the current period, identifying the cost of the renewal.
Management: You can manage or turn off auto-renewal in your Apple ID Account Settings at any time after purchase.
Trials: Any unused portion of a free trial period, if offered, will be forfeited when you purchase a subscription.

7. Data Retention, Account Deletion, and User Rights

In compliance with global data protection laws (including GDPR and CCPA) and Apple's account deletion requirements:

Account Deletion: You can delete your account and all associated data at any time. This can be initiated directly inside the App by visiting Settings $\rightarrow$ Delete Account.
Immediate Data Erasure: Initiating account deletion triggers a secure cascade routine that:
1. Permanently deletes your login credentials from our authentication records.
2. Wipes your profile, food logs, water records, and weight history from our database tables.
3. Purges all uploaded food photos from our cloud storage buckets.
4. Clears all cached files, weights, and logs from your local iOS device.
User Rights: You have the right to request access to the data we hold about you, request corrections to incorrect data, request a copy of your data for export, and request complete deletion. All data deletion operations are permanent, immediate, and irreversible.

8. International Data Transfers

Our cloud servers and databases are hosted globally, primarily in secure data centers located in the United States (provided by Supabase). By using the App, you understand and consent to the transfer and storage of your nutritional, profile, and account data in the United States and other global locations as necessary to provide the cloud synchronization features of the App.

9. Children's Privacy

CalVance is not intended for use by individuals under the age of 13. We do not knowingly collect or solicit personal data from children under 13. If we discover we have inadvertently collected data from a child under 13, we will delete that information immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this page periodically for any changes.

11. Contact Us & Support

If you have any questions, feedback, or concerns regarding this Privacy Policy, your personal data, or need help with your account, please contact us at:

Support Email: [email protected]
Official Support Link: https://rentry.co/calvance-privacy-eqvo1x