Privacy policy

Calio is a calorie and macro tracker for iPhone, made by Tristan Jarrett. This policy covers the Calio iPhone app, its Apple Watch companion, and the getcalio.com website.

The short version: Calio has no user accounts, shows no ads, and does not use analytics or advertising trackers. Calio does not receive your food diary or Apple Health data. Some data does leave your device: Apple may store your diary in your private iCloud database, and our food service receives the searches and barcode lookups needed to return nutrition information. With your consent, Calio AI also sends your chat messages, meal photos and foods in that chat through our food service to OpenAI. The sections below explain what is involved.

Data Calio stores

Calio stores your diary and food library on your device. Depending on the features you use, this includes foods and portions, meals, recipes and ingredients, goals and daily targets, personal details used to calculate a goal (such as age, sex, height, weight, and activity level), weights, water, manually entered workouts, preferences, and records of Apple Health workouts that you have chosen to show in Calio. There is no sign-up, user profile, or Calio account.

iCloud and Apple Watch

If iCloud is enabled, Calio uses Apple CloudKit and SwiftData to sync the data above between your iPhone and Apple Watch companion, and between Apple devices using Calio. Your entries are uploaded to Apple’s servers. They go into the private CloudKit database associated with your Apple Account. Tristan Jarrett and Calio cannot access or read that database. Apple operates CloudKit and may create its own service logs and diagnostics. Apple’s handling is covered by the Apple Privacy Policy. Turning iCloud off for Calio stops Calio from syncing new changes, but does not necessarily delete data already held by Apple. Manage or delete that data using Apple’s iCloud controls.

Apple Health

With your permission, Calio reads active energy burned, step count, and workouts from Apple Health to show activity and progress context and, if enabled, adjust your calorie budget. Calio can write the nutrition for foods you choose to share, water entries, and weights to Apple Health. The iPhone app does not read your height or weight from Apple Health; details you enter for goal calculation are stored as Calio data. The Apple Watch companion reads active energy and steps and does not write to Apple Health. Health data is read or written on your devices through HealthKit and is never sent to Calio or our food service. You can change these permissions in Apple Health at any time.

Camera

The camera reads food barcodes and nutrition labels on your device, including labels photographed sideways or at an angle. A barcode number is used to look up the product; a label fills in a new food for you to review before saving. Barcode and label photos are never saved or uploaded. You can also take a meal photo for Calio AI. The photo is resized on your device, which removes its location and camera details, and is sent through Calio’s food service to OpenAI to read the foods in it (see Calio AI below). Calio keeps the photo in your chat history on your device.

Calio AI

Calio AI reads the meal descriptions and photos you give it in a chat. Before the first message is sent, Calio asks for your permission.

When you send a message, Calio sends the words, any photo, and the foods already in that chat to Calio’s food service, which passes them to OpenAI to read. OpenAI returns food names and amounts, and the food service matches them to its food catalog. Nutrition comes from the catalog. When nothing matches, Calio AI may estimate a food’s nutrition, and marks it as an estimate.

When you ask a question about food or eating, OpenAI also returns a short, general answer, which Calio shows in the chat. Calio AI does not receive your weight, goals or diary, so its answers are not about you, and nothing extra is sent to answer them.

Calio does not send your saved foods, diary, recipes, goals, weights, water, workouts or Apple Health data to OpenAI. Calio’s food service does not store your messages or photos, and OpenAI does not use them to train its models. OpenAI may keep them for up to 30 days to detect abuse, then deletes them.

Your chats and their photos are kept on your device, for up to 30 days and 20 chats. When your device is signed in to iCloud, they are also kept in your own private iCloud database so your other devices show them; Calio cannot read it. Corrections you make, such as choosing a different food, are remembered on your device only.

To limit use, the food service counts how many Calio AI chats and requests each installation of Calio makes, and whether it has Calio Pro. It keeps the chat’s random identifier and those counts, not what was said. Calio Free includes a small number of AI chats; the number is shown in the app.

Food search and the Calio food service

When you search for a food, scan a barcode, or use Calio AI to match an interpreted food, the search term, barcode number, or interpreted food name, quantity, and unit goes to the Calio food service. It returns nutrition data drawn from public sources including USDA FoodData Central and Open Food Facts. Barcode lookups can also include the language and country derived from your device settings so a product can be returned in the right language or region. If the Calio service is unavailable, the app may query Open Food Facts directly instead; that request is then subject to Open Food Facts’ own privacy practices.

The service runs on a Cloudflare Worker with a Cloudflare D1 database. To prevent abuse, it keeps a record for each installation that uses the service. That record contains a random installation identifier, the App Attest key identifier and public key, the attestation receipt Apple issues to help prove the request came from a genuine copy of Calio, an assertion counter, the App Attest environment, and first-seen, last-seen, and any revocation times. Authentication challenges are stored only as hashes and are temporary. Short-lived session tokens are issued to the app and are not stored as user accounts. Requests can therefore be associated with an installation of Calio, but not with a name, email address, Apple Account, account profile, diary, or Health record.

The service caches food catalog records and the ordering of results so the same question does not have to be sent to an upstream provider repeatedly. Search cache entries are keyed by the normalized search term, language, and country, are shared across users, and do not contain an installation identifier. Food catalog records may remain in the service so later searches can be answered without a new upstream request. Provider rate-limit counters and operational records are also kept for service protection. Cloudflare may process connection and request data, including IP address, request time, URL, headers, response status, and security or observability logs, in operating the Worker and the website.

The service does not receive your diary entries or a record of what you saved to the diary. When you use Calio AI, it receives the messages and photos you send in a chat and passes them to OpenAI, as described above, without storing them. It does not receive recipes, goals, weights, water, workouts, HealthKit data, barcode camera frames, nutrition-label photos, or exports.

Purchases

Calio Pro purchases are processed through Apple’s App Store and StoreKit. Apple handles payment, billing, subscription management, and refunds. Calio does not receive your payment card details or operate a purchase account. The app receives the StoreKit entitlement and transaction state needed to unlock or restore Pro on your devices. Purchases are associated with your Apple Account under Apple’s terms. To confirm Calio Pro for Calio AI, the app sends the food service the signed transaction record Apple provides for your purchase. The service checks Apple’s signature and keeps no copy.

Notifications

Reminders are scheduled locally on your device. There is no Calio push server, so the content of those reminders is not sent to us.

This website

getcalio.com is a statically generated site served through Cloudflare Pages. Calio sets no cookies and runs no analytics, advertising, or tracking scripts. Cloudflare may process standard request data, including IP addresses and security logs, to deliver and protect the site. The site links to Apple’s App Store and external nutrition sources, which have their own privacy practices.

Email

If you email support@getcalio.com we receive your email address, message, and any attachments you send. We use that information to respond, provide support, and handle abuse or technical reports. Please do not send Health data or your full diary unless it is necessary for your request.

Service providers and international processing

We do not sell your data or share it with advertisers or data brokers, and we run no advertising or analytics SDKs. The services involved are Apple (for iCloud, HealthKit, App Attest, StoreKit, and App Store distribution), Cloudflare (for the website, Worker, D1 database, rate limiting, and operational logging), and the public nutrition sources above. These providers may process information in Canada, the United States, or other countries where they or their service providers operate, under their own terms and privacy policies.

Retention and your control

• Export the data you choose from inside the app as a shareable report.
• Delete diary entries, foods, recipes, weights, water, and workouts in the app.
• Delete local diary data by deleting Calio, subject to any copies you exported or synced through Apple.
• Manage or delete the iCloud copy through Apple’s iCloud controls.
• Revoke camera and HealthKit permissions in iOS Settings or the Health app.

We hold no account and no copy of your diary, so we cannot delete diary data from our systems. Uninstalling Calio stops that installation from making requests, but its App Attest installation record may remain for up to 180 days after it was last seen before automated cleanup. The App Attest key identifier is held in the device-only Keychain, which may survive an app reinstall; a same-device reinstall may therefore continue the existing installation record, while a new device or a missing key creates a new one. You can email us at support@getcalio.com to ask us to delete the installation record sooner, or to ask for access to or correction of personal information we control. We may need to verify the request.

Children

Calio is not directed at children under 13 and we do not knowingly collect personal information from them.

Changes

We may update this policy as the app or its services change. The date at the top always reflects the current version.

Contact

Questions? Email support@getcalio.com.