Privacy policy

Calio is a calorie and macro tracker for iPhone, made by Tristan Jarrett. This policy covers the Calio app and the getcalio.com website.

The short version: Calio has no user accounts, shows no ads, and carries no analytics or advertising trackers. We never receive your food diary. The sections below set out the two places data does leave your phone, Apple’s iCloud and our food service, and exactly what each one holds.

What stays on your device

Everything you log (foods, meals, recipes, goals, weights, and water) is stored on your device. There is no sign-up, no profile, and no server of ours that holds a diary.

iCloud

If iCloud is enabled, Calio uses Apple CloudKit to sync your diary between your devices. To be clear about what that means: your entries are uploaded to Apple’s servers. They go into your private CloudKit database, tied to your Apple Account. We have no access to it and no way to read it, but Apple stores it and operates the service, including its own logging and diagnostics. Apple’s handling is covered by the Apple Privacy Policy. Turning iCloud off for Calio in iOS Settings keeps your diary on the device only.

Apple Health

With your permission, Calio reads activity, workouts, water, height, and weight from Apple Health for context, and writes back the foods, water, and weights you choose to log. Health data is read and written on your device and is never sent to us. You can revoke this in the Health app at any time.

Camera

The camera is used to scan food barcodes. Frames are read on your device and are not stored or uploaded.

Food search, and what our service stores

When you search for a food or scan a barcode, the search term or barcode number goes to the Calio food service, which returns nutrition data drawn from public sources including USDA FoodData Central and Open Food Facts. If the service is unavailable, the app may query Open Food Facts directly instead.

That service keeps a record for each installation of the app. It holds an anonymous installation identifier, the App Attest key and receipt that Apple issues to prove the request came from a genuine copy of Calio, a request counter, and the times the installation was first and last seen. This is how the service tells real app installs from abuse and applies per-install rate limits, and it means requests can be associated with your installation of the app, not with a name, an email, an account, or your diary.

Search results are cached by the search term itself so the same question is not put to an upstream provider twice. That cache is shared across everyone and holds no identifier, so it is not a record of what you searched for. Requests also carry standard connection information such as your IP address, used to serve the request and to rate-limit sign-in attempts.

Nothing you log is sent to this service. It sees the food you look up, never the food you eat.

Notifications

Reminders are scheduled locally on your device. There is no push server, so nothing about them leaves your phone.

This website

getcalio.com sets no cookies and runs no analytics or tracking scripts. Our host keeps standard server logs, including IP addresses, for security and reliability.

Email

If you email support@getcalio.com we receive your address and your message, and use them only to reply.

Sharing

We do not sell your data or share it with advertisers or data brokers, and we run no advertising or analytics SDKs. The third parties involved are Apple (for iCloud, Health, App Attest, and App Store distribution), Cloudflare, who host both this site and the food service, and the public nutrition sources above.

Your control

• Export everything you have logged from inside the app.
• Delete entries, or delete the app to remove its local data.
• Turn off iCloud sync, or clear Calio's iCloud data in iOS Settings.
• Revoke camera and Health permissions in iOS Settings.

We hold no account and no copy of your diary, so there is no diary of yours for us to delete. Deleting the app ends its installation record on the food service: the record is keyed to that install, and a reinstall is treated as a new one. Email us if you would like it removed sooner.

Children

Calio is not directed at children under 13 and we do not knowingly collect personal information from them.

Changes

We may update this policy as the app changes. The date at the top always reflects the current version.

Contact

Questions? Email support@getcalio.com.