Privacy Policy
Last updated: September 29, 2026
We take your privacy seriously. This policy explains, in plain language, what data Calbit processes and how — both inside the app and on this marketing website.
What we collect
Your account
Calbit needs an account, which you can create with Apple, Google, or an email address and password. We store the identifier your sign-in method hands us — that is what lets your data follow you to a new phone.
Inside the app
Your profile and goals, the meals you log, your weigh-ins and water, your saved foods and your conversations with Auntie are stored on Supabase (hosted in the EU/US), so they survive losing your phone. Every table is protected by row-level security: your rows are readable only by your own account.
Meal photos
A photo you scan is resized, sent to our server, passed to the model that estimates the food and its calories, and then dropped. Your photos are not written to disk or to storage — not on our side, and not on your phone.
Barcodes
When you scan a barcode, our server checks our own product database first; if the product isn’t there, it sends only the barcode number to Open Food Facts. Nothing about you goes with it.
Apple Health
If you grant access, we read your weight, height, steps and active energy to keep your daily numbers honest. If you allow it, we also write the water you log to Health; we write nothing else.
Data from Health is never used for advertising or marketing, never sold, and never shared with third parties except as needed to run the features described in this policy.
Notifications
Auntie’s reminders are scheduled on your phone and fire from your phone. Nothing contacts a server to decide when they arrive.
App usage (Microsoft Clarity)
To improve the app we use Microsoft Clarity for session recordings and heatmaps: which screens you open, where you tap, where you get stuck. Recordings are linked to your account ID (not your email). Email, password and code fields are masked.
Calbit Pro subscriptions
Apple takes the payment; we never see your card details. We use RevenueCat to keep track of your subscription status, which links your purchase history to your account ID.
On this website (early-access list)
If you submit your email to the early-access form, we use it solely to notify you at launch. Emails are stored on Supabase (hosted in the EU/US). We never sell or share them with third parties.
Conversations with Auntie
When you message Auntie, your message goes to our own server first. It reads your profile, today’s meals, your streak and the last few turns of the conversation, and sends them to OpenAI to compose the reply. Photo analysis goes to Google Gemini instead (a paid API; content is not used to train models). If a provider is unavailable, the same request may go to xAI as a backup, and recipes are written with xAI. The turn is saved to your chat history, so the conversation is still there on your next phone.
For details on how those providers handle data, see the OpenAI Privacy Policy, the Gemini API Terms, the xAI Privacy Policy and the Google Privacy Policy.
Children
Calbit is not directed to children under 13 and we do not knowingly collect data from anyone under 13.
Your rights
You can delete your account and all the data attached to it from inside the app: Profile → Settings → Delete account. It takes effect immediately, and if you signed in with Apple we also revoke the app’s access to your Apple ID. To come off the early-access list, or for any other request, email support@calbitai.com. We process such requests within 30 days.
Changes
We may update this policy from time to time. We will update the “last updated” date and, where appropriate, notify you in the app or by email.
Contact
Questions? support@calbitai.com