CountCalPrivacy Policy
CountCal helps you record what you eat and understand your day. To do that, it handles information about you, including some health-related information. This policy explains what we collect, why, who helps us process it, and the choices you have. We have written it to be read, not skimmed past.
1. Who we are
CountCal is operated by Matilde Casamonti, based in the United Arab Emirates ("CountCal", "we", "us"). We are responsible for your personal data as the data controller. You can reach us at info@countcalapp.com.
2. What we collect
Information you give us
- Account: your email address, or the identifier provided by Sign in with Apple or Google. If you use Apple's "Hide my email", we only receive the relay address.
- Profile: first name (optional), sex, date of birth (we work out your age from it), height, weight, goal weight, activity level, chosen path and your daily targets. We use these to calculate your targets.
- Food and health records: the meals you record (foods, portions, times and nutrition estimates), water, weigh-ins, custom targets, favourites and your weekly focus. A meal you remove stays in Recently removed for 30 days, then is deleted for good.
- What you send to Record: the text you type, a voice recording if you use your voice, and any photo you choose to add. See "AI meal estimates" below for what happens to them.
- Your own device (optional): if you connect a Garmin, Oura, Whoop or Fitbit, we receive from it the calories your body burned each day. We keep only that daily number, and use it to make your burn and your targets more accurate. We do not keep your heart rate, sleep or other device data. You can disconnect at any time, which removes what we stored.
- Reminders: the times you choose for them.
- Messages to support: anything you send us by email.
Information collected automatically
- Technical data: device type, operating system, app version and basic error reports, used to keep the app working.
- Subscription status: whether you are in the free trial or subscribed, which plan, and when it renews or ends. We do not receive your card details; payments are handled by Apple.
- Usage records: how many entries you add each day (daily limits apply to everyone), and a record of each request to our AI services: when it happened, which model, how many tokens it used and what it cost. These records never contain your text, photos or recordings.
Optional connections
- Notifications: only if you allow them, to send the reminders you choose. They are scheduled on your phone and do not contain your meals.
We do not collect your precise location, contacts or advertising identifiers, and we do not use third-party advertising or tracking tools.
3. How we use it
- To create your account and keep you signed in across your devices.
- To calculate your targets and your Nourish score, and to show your Today and Trends.
- To turn what you say, type or photograph into meal estimates.
- To work out the calories you burn from your connected device and keep your recommended targets in step with it.
- To sync your records, save them when you are offline, and restore them when you sign in again.
- To manage your free trial and subscription, apply the daily limits, and understand what the AI costs so we can keep the service running.
- To send the reminders you choose.
- To answer support requests, keep the service secure and fix problems.
We do not sell your personal data, rent it, or use it to show you ads. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Legal bases
We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Where the EU or UK General Data Protection Regulation applies to you, we rely on these legal bases:
- Contract: to provide the app and your account.
- Explicit consent: for food, weight, date of birth, device and other health-related information, which you give when you create your account, record data or connect a device. You can withdraw it at any time by disconnecting a device, or by deleting your data or account.
- Legitimate interests: to keep the service secure, prevent abuse and fix errors.
- Legal obligation: where we must keep records, for example about purchases.
5. Who we share it with
We use a small number of trusted service providers to run CountCal. They process data only on our instructions and under contracts that require them to protect it.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, sign-in (including the emails with your sign-in code) and secure servers | Account, profile and all records |
| Anthropic | AI that turns your descriptions and photos into meal estimates | The text or photo you send to Record, plus the minimum context needed (for example, today's meals when you ask to edit one) |
| OpenAI | Turning a voice recording into text | The recording, only while it is being turned into words |
| ROOK | Connecting your Garmin, Oura, Whoop or Fitbit, only if you choose to | Your account ID, the device you choose, and the daily calories burned it reports |
| RevenueCat | Subscription management | Your account ID (a random identifier, not your email) and purchase status |
| Apple (and Google, where offered) | Sign-in, payments, app distribution and notifications | As needed for each service, under their own privacy policies |
If you connect a device, you sign in to your Garmin, Oura, Whoop or Fitbit account on that company's own page, and their privacy policy applies to what they hold.
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganisation of the service, in which case this policy would continue to apply.
6. AI meal estimates
When you record a meal, the text you type, or the text made from your voice, or the photo, is sent securely to our AI provider to produce an estimate. If you use your voice, the recording is sent to our servers and to our speech provider to be turned into words; we do not keep recordings, and the file on your phone is deleted as soon as it has been sent. Photos are used for the estimate and are not stored by us.
Our AI providers do not use this data to train their models and keep it only as long as needed to provide the service and for limited safety and abuse monitoring, under their commercial terms. Estimates can be wrong, which is why you always check a card before it is added.
7. Where it is stored
Your data is stored on secure cloud servers operated by our providers, which may be located outside your country. Where data is transferred internationally, we rely on appropriate safeguards such as the provider's standard contractual protections. A copy of your recent records is also kept on your device so the app works offline.
8. How long we keep it
- Account and records: for as long as you have an account.
- After you delete your account: removed from our live systems straight away, and from our backups within 30 days (backups are kept for about 7 days). This includes your device data and our usage records.
- Purchase records: kept by Apple and RevenueCat as required for tax and accounting.
- Support emails: only as long as we need them to answer you and meet legal obligations, then deleted.
9. Your rights and choices
Depending on where you live, you have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. In the app you can:
- Edit your profile and records at any time (Me → About you, Your path, Daily targets).
- Export your data as a JSON or CSV file: Me → Export my data.
- Delete your account and all its data: Me → Delete account. Deleting your account does not cancel a subscription: cancel it first in Me → Your subscription (the App Store).
- Disconnect a device: Me → Connect a device.
- Turn reminders on or off: Me → Reminders. You can also turn off notifications, in your phone's Settings.
For any other request, email info@countcalapp.com. We reply within 30 days. You also have the right to complain to your local data protection authority, such as the UAE Data Office or, in the EU, your national supervisory authority.
10. Children
CountCal is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.
11. Security
Data is encrypted in transit and at rest. Access is restricted so that each account can only read its own records, and secret keys are kept on our servers, never in the app. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of any breach as the law requires.
12. Changes
If we change this policy, we will update the date above. If the changes are significant, we will tell you in the app before they take effect.
13. Contact
Questions about privacy: info@countcalapp.com.