Calotank is designed to collect as little data as possible. Daily logs are stored on your device. When you choose an optional AI feature, only the data needed to provide it and prevent abuse is sent to the service providers described below. Calotank does not use advertising tracking, build advertising profiles or sell personal data.
1. Data controller
The data controller is the publisher of the Calotank app, Touko Aunio. Privacy contact: caloframeapp@gmail.com.
2. Data processed
Data kept only on your device
Meals, activities, weight entries, goals, calorie budget, flex balance, streak and app settings are stored only in local storage on your device. Calotank does not synchronize these logs to a Calotank account or cloud database.
Optional AI features
When you request a Premium AI estimate, the data processed may include your meal or activity description, submitted photo, duration and profile details needed for the estimate, such as weight, height, age and the sex used by the calculation.
When you use Calotank Assistant included in Premium, OpenAI receives the message you write, up to the eight most recent messages in the same open chat, the device’s local date and time with its UTC offset, and a current, limited summary of today’s meal and activity entries and calorie amounts, calorie budget, flex balance and end-of-day projection, streak, Joker Day status and saved day rhythm. The summary also includes only your latest valid weight entry and when it was logged, target weight, calorie plan mode and any target weekly loss pace. Your full logging or weight history is not sent to the Assistant. Chat history is not stored in Calotank’s persistent storage: starting a new chat, a change of day or restarting the app clears the chat held in the app.
The AI request is sent to OpenAI through Calotank’s gateway hosted on Vercel. In the mobile app, the gateway receives RevenueCat’s app-specific user ID to verify Premium access. Only Assistant requests sent to OpenAI include a pseudonymous SHA-256 safety ID derived from it; the raw RevenueCat ID is not sent to OpenAI. The Calotank gateway does not store ordinary request content after sending the response. As part of its default API abuse-monitoring process, OpenAI may retain request and response content, including text and images, for up to 30 days, unless longer retention is required by law or reasonably necessary to protect OpenAI’s services or third parties from harm. Network service providers may also process an IP address and other technical request data to deliver and secure the service.
You can withdraw AI data-sharing permission at any time under Settings → More settings → App → AI data-sharing permission. The next AI use will ask for permission again.
If a user explicitly reports an Assistant response and confirms the submission, the selected reason, that response, the related user message and optional details are forwarded to Calotank’s configured feedback channel to investigate the issue. A report is not sent without the user’s explicit confirmation.
Purchase data
Apple or Google processes the payment, depending on the app store you use. RevenueCat processes an app-specific pseudonymous user identifier, subscription products, subscription status and purchase history to unlock and restore Premium, administer subscriptions, prevent abuse and provide purchase and subscription analytics. Calotank does not receive your payment card details.
Website visits
When you visit Calotank’s public website, the providers involved in delivering and protecting the site may process customary technical request data, such as your IP address, browser and device information, requested URL and request time. This data is used to deliver the site, defend against malicious traffic and diagnose errors. The site does not use analytics or advertising cookies. Cloudflare sets the strictly necessary __cf_bm security cookie for bot detection. It expires after 30 minutes of continuous inactivity.
3. Purposes and legal bases
- Local data is processed to provide the app features you request.
- An AI request is processed to provide the estimate or Assistant response you requested, secure the service and prevent abuse. AI is optional and any data that may qualify as health data is processed based on your explicit choice to submit it to an AI feature.
- An Assistant response report is processed only with your separate confirmation to investigate an error or safety concern and improve the service.
- Purchase and subscription data is processed to perform the purchase agreement, manage Premium access, restore purchases, provide purchase and subscription analytics and meet legal obligations.
- Website technical request data is processed under legitimate interests to deliver and secure the site and diagnose errors.
- Limited technical data is processed under legitimate interests to secure the service, enforce usage limits, diagnose failures and prevent abuse.
4. Service providers and international transfers
- Apple – App Store payments and subscription management.
- Google – Google Play payments and subscription management.
- RevenueCat – subscription and Premium entitlement verification and purchase and subscription analytics.
- Vercel – the Calotank mobile app backend, secure forwarding of AI requests and confirmed response reports, and technical runtime logs.
- OpenAI – optional AI estimates and Assistant responses, abuse monitoring, and public website hosting through Sites.
- Cloudflare – public website delivery and protection, including the necessary security cookie.
Providers may process data outside the European Economic Area. Transfers then rely on safeguards identified by the provider, such as a European Commission adequacy decision or the EU Standard Contractual Clauses.
5. Retention and deletion
Local data remains on your device until you erase it in settings or uninstall the app. An Assistant chat stays only in app memory while the chat is open and is cleared when a new chat starts, the day changes or the app restarts. The Calotank backend does not retain ordinary AI request content after the response is completed. A response report sent with separate confirmation is retained in the feedback channel only for as long as reasonably needed to investigate the issue. To enforce usage limits, the server keeps a SHA-256 hash of an anonymous purchase or other request identifier and AI request timestamps in memory for up to 24 hours.
OpenAI may retain request and response content, such as text or a photo, in default safety and abuse-monitoring logs for up to 30 days, and longer in the exceptional cases described above. Vercel production runtime logs contain limited technical request data and are not intentionally configured to log request content; under the current service plan, these logs are available to Calotank for about one hour. Apple, Google and RevenueCat retain purchase and subscription records under their own legal, security and contractual retention periods.
Cloudflare’s strictly necessary __cf_bm security cookie expires after 30 minutes of continuous inactivity. Website technical request and security data is retained according to the provider’s own security and retention practices.
6. Your rights
You may have rights to access, correct or erase personal data, restrict or object to processing, receive portable data and withdraw consent. Most Calotank data exists only on your device, so the controller cannot view or recover it. Contact the email above to exercise applicable rights.
You may lodge a complaint with the Office of the Data Protection Ombudsman in Finland or your local data protection authority.
7. Health data, children and safety
Calotank provides indicative everyday calorie metrics, not medical advice. The calorie-budget calculator is intended for adults. Do not submit information to an AI estimate that you do not want the service providers to process.
8. Changes and contact
This notice will be updated if the app's data practices change materially. The latest version is published on this page with its update date. Questions and requests: caloframeapp@gmail.com.