Smart Cal — Privacy Policy

Last updated: 5 July 2026

Smart Cal ("we", "us") is a calorie and nutrition tracking app. This policy explains what we collect, how we use it, and your choices. It also serves as the notice required under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). We process your data based on the consent you give when you create an account (and, for WhatsApp logging, when you link your number); you may withdraw consent at any time by deleting your account.

Information we collect

• Account details — your name and email address when you create an account.
• Health & profile data you enter — goals, age, gender, height, weight, activity level, dietary preferences, and your logged meals, water, and weight entries.
• Content you submit for analysis — meal photos, voice recordings, and text descriptions of food (including messages you send to our WhatsApp bot).
• Basic technical data — such as your WhatsApp phone number if you connect WhatsApp, used to link messages to your account.

How we use your information

• To estimate calories and nutrition and to power features like the AI coach and insights.
• To save and sync your diary across your devices.
• To log meals you send via WhatsApp into your account.
• To operate, maintain, and improve the app.

Third-party services we use

We share the minimum data needed with service providers that process it on our behalf:

• Supabase — secure account authentication and database storage.
• Anthropic (Claude) — AI analysis. What is sent: (a) for food logging — the meal photos, barcode product names, and food descriptions you submit; (b) for the AI coach — your chat messages plus the profile context used to personalise answers: your goal, daily calorie/macro targets, today's intake totals, dietary preference, streak, and — only if you have connected Apple Health — your recent steps, active energy, sleep hours, and latest weight.
• Sarvam AI — speech-to-text. What is sent: the voice recordings you make when logging meals by voice (and, if you use voice onboarding, that recording), transcribed and then discarded.
• Meta / WhatsApp — delivery of messages when you use WhatsApp logging.
• Apple & RevenueCat — to process subscription purchases and manage your subscription status.
• Open Food Facts — when you scan a product barcode, the barcode is looked up directly against the Open Food Facts database (openfoodfacts.org) to fetch nutrition information. Like any web request, this exposes your device's IP address to that service.

Data is only sent to Anthropic and Sarvam AI after you give permission in the app: a full-screen consent notice, shown when you first enter the app and again before any AI feature runs until you have answered it, lists exactly what each provider receives. You can decline and still use search, barcode and manual logging, and you can turn AI features on or off at any time in Settings → AI features. Both providers are bound by data-processing terms that provide protection equal to this policy: they may process the data solely to return your result and may not use it for their own purposes, including model training. Your name, email address, and password are never shared with them.

We do not sell your personal data.

Where your data is stored

Your account data is stored with Supabase in the Asia-Pacific (Mumbai) region. Content you submit for AI analysis (food text, photos, voice recordings) is processed by Anthropic and Sarvam AI, whose servers may be located outside India; it is used only to produce your results. Voice recordings and meal photos are processed transiently and are not stored on our servers. A copy of your diary is also cached on your own device.

Subscriptions & payments

Smart Cal Pro is an auto-renewing subscription. Payment is charged to your Apple ID and all billing is handled by Apple — we never receive or store your card details. We use RevenueCat to tell us whether your subscription is active so we can unlock Pro features. You can manage or cancel your subscription any time in your Apple ID settings; see Apple's terms for how billing and renewals work.

Data retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated data at any time from within the app (Settings → Delete account); this takes effect immediately. You may also email us to request deletion. We remove your data except where we must retain it to comply with law.

Security

Data is protected in transit with HTTPS and stored with access controls so that you can only access your own records. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Your rights

Under the DPDP Act (and similar laws), you have the right to:

• Access — see the personal data we hold about you (your diary and profile are visible in the app; you can export your data from Settings).
• Correction — edit your profile, goals, and logged entries at any time in the app.
• Erasure — permanently delete your account and all data (Settings → Delete account).
• Withdraw consent — turn AI features off at any time (Settings → AI features), unlink WhatsApp logging in Settings, or stop using the service and delete your account.
• Grievance redressal — contact our grievance officer (below). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
• Nominate — nominate another person to exercise these rights for you in case of death or incapacity, by writing to us.

Children

Smart Cal is for adults. You must be at least 18 years old to use the app; we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact & grievance officer

Questions, data requests, or grievances: Harsh Malhotra, harsh9027@gmail.com. We aim to respond to grievances within 7 days.