Version 2.7 — Effective August 7, 2026
Last Updated: August 7, 2026
Calk makes a calorie and nutrition app (the “App”) and operates the website at calk.me (the “Website”). Controller and contact details are provided in section 7 below.
The App and Website handle data differently. Your food logs, weights, nutrition targets, and reports stay on your device. We do not upload them to our servers or to any service provider. The App may send limited, pseudonymous product-usage analytics, crash and performance diagnostics, and subscription data; the Website uses analytics only after consent.
1. The Calk App#
1.1 Data that stays on your device#
Your food logs, weights, nutrition targets, and the insights and reports derived from them are stored on your device. They are not uploaded to our servers, and none of the services named in this policy receives them.
If you connect Apple Health or Health Connect, the App reads only the health categories for which you grant permission, such as weight, activity, or body metrics used to set a starting estimate. This processing happens on your device. Calk does not write data back to your health store.
1.2 Data the App may send#
Account information. If you create an account with Sign in with Apple or Google, we receive the name and email address released by that provider. We use this to create and secure the account and operate access and subscription features.
Device-integrity signals. Apple App Attest or Google Play Integrity may process technical signals to confirm that the App is a genuine, unmodified install and to prevent abuse.
Product analytics. Google Analytics for Firebase receives usage events such as onboarding progress, account creation, a meal or weigh-in recorded, a screen being opened, a report unlocked or viewed, subscription-screen interactions, and food searches. Events come with event counts and identifiers from Calk’s built-in catalog, plus app version, operating system, approximate country and a random app-instance identifier. Firebase also collects its own standard events and measurements, such as installs, updates and device model. That makes the analytics pseudonymous, not anonymous.
Crash and performance diagnostics. Firebase Crashlytics receives errors and the technical context around them. Error reporting is always on and is not covered by the in-App “Analytics & performance” control. Firebase Performance Monitoring receives an installation identifier, IP address, device, app and network information, and timings, and does follow that control. Google retains both under its Firebase privacy documentation.
Subscriptions and paywalls. Adapty runs subscriptions and paywalls. It receives a pseudonymous account identifier, your account email for support, device and profile identifiers, the app language, purchase history, subscription status and paywall interactions. If you delete your Calk account, we ask Adapty to delete its profile. Limited transaction records may remain where billing, fraud prevention or the law requires it.
Failed food searches. If a food search returns no result, the App may send the short search phrase so we can identify missing foods. Do not enter personal, medical, or confidential information into food search.
1.3 App purposes and retention#
We use account and integrity data to provide and secure the service, prevent abuse, and support app-store subscriptions. We use product analytics to understand whether core features work and where the food catalog is incomplete. We do not sell personal data or use it for targeted advertising. Advertising-identifier collection is switched off in the SDKs themselves, not merely left unused.
Food, weight, target, and report data remains on your device until you delete it or remove the App. Account information is retained while your account is active and is deleted when you delete the account, subject to limited security, fraud-prevention, transaction, or legal records that must be retained. One of those outlives the account: a pseudonymous marker that introductory access has already been granted, holding no name, address or usage history. Google Analytics event data is configured for no more than 14 months. Firebase, Adapty, Apple and Google keep the diagnostics, subscription and integrity records described above under their own schedules. Anonymized or aggregated information that no longer relates to an identifiable person may be retained.
1.4 App choices#
- Health permissions. Grant or revoke them in the App and operating-system settings.
- Product analytics and performance. One in-App control covers both. Where consent is required, the App asks before collecting, using available device-region signals to decide; elsewhere it may rely on our legitimate interest in improving and securing the App, with an in-App opt-out. Turning the control off stops further collection.
- Export. Export a report from within the App.
- Delete. Use Settings → Delete account, or contact support@calk.me if that fails. This removes the account and erases on-device food, weight, and target data. Some security logs may take up to 30 days to expire. Pseudonymous analytics that we cannot connect back to your account may not be individually retrievable; it remains subject to the applicable retention periods above.
2. The Calk Website#
2.1 Website data#
Visitor analytics. Google Analytics helps us understand pages viewed, referring
sites or campaigns, approximate country, device and browser type, and engagement.
Google Analytics does not load or send measurement data unless you choose Allow
analytics. If you decline or withdraw consent, analytics remains disabled and Calk
removes its first-party _ga cookies. Advertising use, Google Signals, and
personalization are disabled.
Local preferences. The interactive demo may store preferences in your browser. They stay in the browser and are not uploaded.
2.2 Website purposes and retention#
Analytics is processed with your consent and retained for no more than 14 months.
Use Analytics settings in the Website footer to change analytics consent.
3. Legal bases, recipients, and transfers#
Depending on the feature and applicable law, we process data:
- to perform a contract or take steps you request, such as creating an account;
- with consent, including Website analytics, optional health permissions, and App analytics where consent is required;
- for legitimate interests such as security, fraud prevention, service reliability, and limited product improvement where those interests are not overridden by your rights; and
- to comply with legal obligations, including accounting and valid legal requests.
Service providers may process limited data on our behalf: Google/Firebase for hosting, authentication, integrity, analytics, crash and performance diagnostics, Cloud Functions, and Firestore; Adapty for subscription processing and paywalls; and Apple and Google for sign-in, health permissions, app distribution, and billing. Their processing is also governed by their own terms and privacy notices.
These providers may process data in Israel, the United States, the European Economic Area, or other countries. Where required, transfers use contractual or other legally recognized safeguards. No safeguard eliminates all risk.
4. Your rights#
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent at any time; and complain to your local data-protection authority. Withdrawal does not affect processing that was lawful before withdrawal.
Email support@calk.me. We may need to verify your identity. We normally respond within 30 days, although applicable law may allow an extension. Because core nutrition data remains only on your device, we cannot access or export it for you; use the App’s export and deletion controls.
5. Security#
Nutrition data is stored in a local database on your device. We restrict access to server-side account data and use technical and organizational safeguards. No storage or transmission method is perfectly secure; data minimization is our first line of defense.
6. Children#
The App and Website are intended for adults and are not directed to anyone under 18. Do not create an account if you are under 18. If you believe a minor provided personal data, contact us so we can review and delete it.
7. Changes and contact#
We may update this policy as the product or law changes. Material changes will be posted here with a new update date and, where appropriate, additional notice.
Controller: Eli Petukhov
Address: Nahariya, Israel
Email: support@calk.me