Privacy policy
CalChat is a nutrition tracker. This page explains, in plain language, what the website and the Android app collect, why, and how to get it removed.
1. What this website collects
The marketing site you are reading collects one thing: the email address you type into the early-access form, if you choose to submit it. Along with it we store the time you signed up, which page sent it, and your browser's user-agent string, so we can tell real signups from bot traffic.
- There are no advertising trackers and no cookies of any kind on this site — not ours, not anyone's. Nothing here follows you to other websites.
- We count visits using Cloudflare Web Analytics, which is cookieless. It records the page visited, the referring site, and coarse device and country information. It does not set a cookie, read your browser storage, fingerprint your device, or build any profile of you — so there is nothing to consent to and nothing to opt out of. We use it only to see whether anyone is finding the page.
- The only browser storage used is two
localStoragekeys that remember whether you picked light or dark mode —calchat-themefor this site, andcalchat-demo-themefor the demo phone. Neither ever leaves your device. - Fonts are served from this domain, so loading the page does not hand your IP address to a font provider.
2. The interactive demo
If you type a meal into the demo phone on the homepage, that sentence is sent to the CalChat API so it can be parsed into calories and macros. It is used to produce the answer and is not stored against any account — the demo has no login and writes nothing to your record. Do not type anything into it you would not want processed by our AI provider.
3. What the app collects
When you use the CalChat Android app, we hold:
- What you log — meals, exercise, water, weight, and the sentences you typed to record them.
- Your profile — name, age, gender, height, weight, and goal, used to calculate your calorie and macro targets.
- Your memory points — the preferences, allergies and habits you explicitly ask the coach to remember.
- Your account — email address and an encrypted password, if you create one.
You can use the app as a guest, in which case your data stays on your device until you choose to create an account.
4. Health data, stated plainly
What you eat, what you weigh, and any conditions you enter as memory points are sensitive personal data. We do not sell it. We do not share it with advertisers. We do not use it to build a profile for anyone but you.
5. Who else sees it — sub-processors
To run the product we pass data to a small number of sub-processors. This is the complete list; each acts on our instructions under a data processing agreement, and none of them may use your data for their own purposes:
- AI model providers (Groq, NVIDIA NIM) receive the text of the meal or question being parsed, so it can be turned into numbers or an answer. They do not receive your name or email.
- Supabase hosts the database and authentication.
- Render hosts the API; Netlify hosts this website.
- Cloudflare provides the cookieless visit counter described in section 1. It receives page and referrer information, never your email or anything you log.
We do not sell personal data to anyone, in any form, and we do not share it with advertisers or data brokers. If we ever add or replace a sub-processor, the list above changes and the "last updated" date at the top of this page changes with it — so this section is always the current, complete list.
6. Analytics
The app asks, on first launch, whether you are willing to share anonymous usage analytics — which features get opened, and crash reports. It is off unless you say yes, your food logs and personal details are never included, and you can change your mind any time in Settings → Privacy.
7. How long it is kept
Account data is kept while your account exists. Delete your account and the associated logs, profile and memory points are removed. Waitlist emails are kept until launch or until you ask us to remove yours, whichever comes first.
8. Your rights
You can ask for a copy of your data, ask for it to be corrected, or ask for all of it to be deleted — including coming off the waitlist. Email hello@calchat.space and we will action it. If you are in the UK/EU, this covers your GDPR rights of access, rectification, erasure, portability and objection; if you are in California, your CCPA rights to know and delete.
9. Children
CalChat is for adults. The app asks your age at signup and is not intended for anyone under 18. We do not knowingly collect data from children.
10. Security
Traffic to this site and the API is encrypted with HTTPS. Passwords are stored hashed, never in plain text. Waitlist addresses are write-only from the public site — the website cannot read the list back out. No system is perfectly secure, but we do not collect more than the product needs, which is the most effective protection available.
11. Changes
If this policy changes materially, the date at the top changes and, for anyone with an account, we will say so in the app rather than quietly editing this page.
12. Contact
Questions, or a deletion request: hello@calchat.space.