Privacy Policy

Last updated 20 September 2026 · Applies to the Keto Cal iPhone app and ketocalapp.com

1. Who we are

Keto Cal (“Keto Cal”, “we”, “us”) makes the Keto Cal app for iPhone — an AI-assisted net-carbohydrate tracker for people following a ketogenic diet. This policy explains what happens to information when you use the app or visit ketocalapp.com. You can reach us any time at dbromberg1@gmail.com.

2. What stays on your device

Keto Cal has no user accounts, no sign-up and no sign-in. Everything you create in the app is written to storage on your iPhone and stays there:

• Your food diary — every meal, its ingredients, macros, net carbs and Keto Grades
• Your plan and the answers you gave in the onboarding quiz (goal, sex, age, height, weight, activity level, keto experience, net-carb target)
• Logged body weights and your progress history
• Saved meals, custom foods and quick-add staples
• Streaks, the ketosis estimate and app settings (theme, accent colour, reminders)

We cannot see any of it. It is not uploaded, backed up to us, or synced through us. It may be included in your own iCloud or computer backup of your iPhone, which is under your control and governed by Apple's terms, not ours.

3. What leaves your device

Only three things ever leave your iPhone because of Keto Cal, and only when you take the action that triggers them:

What	When	Where it goes	Kept?
Meal photo or description	You scan or describe a meal	Our analysis server, then Anthropic's Claude API	No
Barcode number	You scan a package	Open Food Facts	No
Purchase receipt	You start a trial or subscribe	Apple, and RevenueCat	Yes — see §6

That's the complete list. Your diary, your weights and your plan are not among them.

4. Meal photos and descriptions

When you photograph a meal, the image — plus any text description or correction you type — is sent over an encrypted connection to our analysis server, which passes it to the Claude API (operated by Anthropic) to identify the foods and estimate portions, carbohydrates, fiber and sugar alcohols. The result comes back to your phone and is saved there.

The photo is not stored. It is held in memory only for as long as the request takes, is not written to a database or file store, is not attached to any identifier or account, and is not used to train any model. Our own analysis server keeps no copy. Anthropic processes the image as our service provider under its commercial terms, which prohibit using it to train its models.

Requests are rate-limited per IP address to prevent abuse. An IP address is examined transiently for that purpose and is not logged against you or retained as part of a profile.

If you never use the photo or text scanner, no image or description ever leaves your phone.

5. Barcode lookups

Scanning a product sends only the barcode number to Open Food Facts, a free, open public food database, which returns the product's nutrition. No information about you is included in that request. Open Food Facts is an independent organisation with its own privacy policy. Barcode images are processed on your device and are not uploaded.

6. Subscriptions and purchases

Subscriptions are sold and billed by Apple through your Apple ID. We never see your name, card number or payment details. Apple tells us only whether a purchase succeeded.

We use RevenueCat as our subscription provider so your access is restored correctly if you reinstall the app or change device. RevenueCat receives an anonymous, randomly generated app user ID, your purchase and renewal status, and basic device and app-version information. It does not receive your name, email, or anything from your food diary. RevenueCat acts as our processor and has its own privacy policy.

7. Apple Health

Apple Health integration is off until you turn it on in Settings › Apple Health. When enabled, Keto Cal:

• writes the nutrition you log — energy, protein, total carbohydrates, fiber, sugar, fat and sodium — as one aggregate entry per nutrient per day;
• reads your body weight so your progress chart stays up to date.

Health data is exchanged directly between the app and Apple's HealthKit on your device. It is never sent to us or to anyone else, and it is never used for advertising or sold. You can revoke either permission at any time in the Health app under Sharing › Apps, or by turning the setting off in Keto Cal.

8. Notifications

If you allow notifications, Keto Cal schedules reminders — electrolyte nudges during your first two weeks, and a reminder before a free trial ends. These are local notifications created and scheduled on your iPhone. We operate no push server and send you nothing remotely. You can turn them off in iOS Settings › Notifications.

9. Crash reports

If the app crashes, it writes the error and stack trace to storage on your device so it can show you what went wrong on the next launch. This stays on your phone. It is not transmitted anywhere automatically. If you choose to email us about a problem, you decide what to include.

10. No tracking, no ads, no sale of data

Keto Cal contains no advertising SDKs, no analytics SDKs and no third-party trackers. We do not use the Advertising Identifier (IDFA), do not track you across apps or websites, and therefore never present App Tracking Transparency prompts. We do not build profiles about you, and we do not sell, rent or share personal information for advertising, cross-context behavioural advertising, or any other purpose. Under laws such as the California Consumer Privacy Act, we do not “sell” or “share” personal information as those terms are defined.

11. Retention and deletion

Because your diary lives on your device, deletion is in your hands: remove an entry in the app, use Settings › Reset data to clear everything, or delete the app, which removes all of it permanently. We hold no copy to delete on your behalf.

Purchase records held by Apple and RevenueCat persist for as long as needed for billing, tax and fraud-prevention obligations. To have RevenueCat's anonymous record deleted, email us and we will action the request.

12. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal information, to object to processing, and to complain to a data-protection authority. In practice, most of that is immediate and self-service here: the data is on your device and you control it directly. For the limited subscription data described in §6, contact us and we will help.

Where the GDPR applies, our legal bases are: performance of a contract (delivering the app's features and your subscription), our legitimate interests (keeping the analysis service available and preventing abuse), and your consent where you have granted a device permission such as camera, photos, notifications or Health — which you may withdraw at any time in iOS Settings.

Meal photos are processed on servers in the United States. Where required, such transfers rely on the European Commission's Standard Contractual Clauses via our service providers.

13. Children

Keto Cal is not directed at children under 13, and we do not knowingly collect personal information from them. A ketogenic diet is not appropriate for children except under medical supervision. If you believe a child has provided us with information, contact us and we will delete it.

14. This website

ketocalapp.com is a set of static pages hosted on GitHub Pages. It sets no cookies, runs no analytics and embeds no third-party trackers. GitHub, as the host, may process standard server request information such as IP addresses for security and delivery, as described in the GitHub Privacy Statement.

15. Changes to this policy

If we change how data is handled, we will update this page and move the “last updated” date above. Material changes will also be noted in the app's release notes. Continuing to use Keto Cal after a change means you accept the updated policy.

16. Contact

Questions, requests or concerns about privacy: dbromberg1@gmail.com. We aim to reply within a few business days.