Privacy policy

CalChat is a nutrition tracker. This page explains, in plain language, what the website and the Android app collect, why, and how to get it removed.

1. What this website collects

The marketing site you are reading collects one thing: the email address you type into the early-access form, if you choose to submit it. Along with it we store the time you signed up, which page sent it, and your browser's user-agent string, so we can tell real signups from bot traffic.

2. The interactive demo

If you type a meal into the demo phone on the homepage, that sentence is sent to the CalChat API so it can be parsed into calories and macros. It is used to produce the answer and is not stored against any account — the demo has no login and writes nothing to your record. Do not type anything into it you would not want processed by our AI provider.

3. What the app collects

When you use the CalChat Android app, we hold:

You can use the app as a guest, in which case your data stays on your device until you choose to create an account.

4. Health data, stated plainly

What you eat, what you weigh, and any conditions you enter as memory points are sensitive personal data. We do not sell it. We do not share it with advertisers. We do not use it to build a profile for anyone but you.

5. Who else sees it

To run the product we pass data to a small number of processors:

We do not sell personal data to anyone, in any form.

6. Analytics

The app asks, on first launch, whether you are willing to share anonymous usage analytics — which features get opened, and crash reports. It is off unless you say yes, your food logs and personal details are never included, and you can change your mind any time in Settings → Privacy.

7. How long it is kept

Account data is kept while your account exists. Delete your account and the associated logs, profile and memory points are removed. Waitlist emails are kept until launch or until you ask us to remove yours, whichever comes first.

8. Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for all of it to be deleted — including coming off the waitlist. Email hello@calchat.space and we will action it. If you are in the UK/EU, this covers your GDPR rights of access, rectification, erasure, portability and objection; if you are in California, your CCPA rights to know and delete.

9. Children

CalChat is for adults. The app asks your age at signup and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Security

Traffic to this site and the API is encrypted with HTTPS. Passwords are stored hashed, never in plain text. Waitlist addresses are write-only from the public site — the website cannot read the list back out. No system is perfectly secure, but we do not collect more than the product needs, which is the most effective protection available.

11. Changes

If this policy changes materially, the date at the top changes and, for anyone with an account, we will say so in the app rather than quietly editing this page.

12. Contact

Questions, or a deletion request: hello@calchat.space.