Privacy Policy

Last updated: June 03, 2026

1. Introduction

CaloGoal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by CaloGoal.

2. Data Controller

The data controller responsible for your personal data is:

INNOVA GLOBAL DEVELOPMENT S.R.L.
Strada Basarabilor, nr. 11
Sector 5, București, 050334
România
CUI: 54283488
Reg. Com.: J2026018036002
Email: privacy@calogoal.com

3. Information We Collect

We collect information you provide directly to us, such as when you create or modify your account, request customer support, or otherwise communicate with us.

Account Information: Name, email address, password.
Health Data: Height, weight, body fat percentage, age, gender, activity level, dietary preferences, and food intake history.
Usage Data: Food logs, calorie intake, macro/micronutrient data, weight history, and app interaction patterns.
Images: Food photos you upload for AI-powered nutrition analysis.
Payment Information: We do not store your financial data. All payments are processed by our Merchant of Record, Lemon Squeezy.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Performance of a contract: To provide and maintain the Service, process subscriptions, and deliver features you have paid for.
Your consent: For health data (special category data under GDPR Article 9), AI-powered food photo analysis, marketing communications, and analytics cookies. You may withdraw consent at any time via your Profile settings or by contacting us.
Legitimate interests: To improve our Service, prevent fraud, and ensure network security.
Legal obligation: To comply with applicable laws, regulations, and legal processes.

5. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service.
Calculate personalized nutritional targets (calories/macros).
Generate AI-powered food analysis, nutrition reports, and weight forecasts.
Process transactions and send related information, including confirmations and invoices.
Send you technical notices, updates, security alerts, and support and administrative messages.
Monitor and analyze trends, usage, and activities in connection with our Service.

6. Health Data (Special Category Data)

Health-related data — including body metrics, food logs, calorie intake, macro/micronutrient data, and dietary preferences — is classified as special category data under GDPR Article 9. We process this data only with your explicit consent, which you provide when creating your profile and logging health data. You may withdraw this consent at any time by deleting your account, which will permanently erase all health data from our systems.

HIPAA Disclaimer: CaloGoal is not a HIPAA-covered entity. We do not provide medical advice, diagnosis, or treatment. The Service is for informational and self-tracking purposes only.

7. AI and Photo Processing

Certain features of CaloGoal use artificial intelligence services provided by Google Gemini to analyze food photos and generate nutritional estimates. When you upload a food photo:

The image is transmitted to Google Gemini's API for processing.
We do not upload facial images, biometric identifiers, or medical records to AI services.
AI-generated analysis is an estimate and should not be treated as exact nutritional data.
Google processes this data under its own privacy terms and security standards.

8. Data Sharing and Processors

We do not sell your personal data. We may share your information with third-party vendors and service providers that perform services on our behalf, solely for the purpose of helping us provide the Service.

Key Processors:

Lemon Squeezy: Functions as our Merchant of Record for payments. They process your payment details and billing information. Lemon Squeezy Privacy Policy.
Hosting & Infrastructure: We use industry-standard cloud providers to host our application and database securely.
AI Services (Google Gemini): We use Large Language Models to process food logs and photos. Data sent to these models is used strictly for generating analysis.
Analytics: We use analytics providers to understand how our Service is being used, subject to your cookie consent.

9. International Data Transfers

We are based in Romania (European Union). Some of our service providers, including our AI processing partners, are located in the United States. When we transfer your personal data outside the European Economic Area (EEA), we do so using appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an adequate level of protection.

10. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide you the Service.

Your Rights (Right to be Forgotten): You have the right to request the deletion of your account and all associated data at any time via your Profile settings. Upon deletion, all your logs, personal measurements, and account details are permanently removed from our database.

11. Your Data Protection Rights

Under applicable data protection laws, including the GDPR, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
Right to Restrict Processing: Request limitation on how we use your data.
Right to Data Portability: Request transfer of your data to another service.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time for processing based on consent.

To exercise any of these rights, please contact us at privacy@calogoal.com. We will respond within 30 days.

12. Cookies and Tracking

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Essential Cookies: Required for the operation of the Service (e.g., keeping you logged in).
Analytics Cookies: Help us understand how our Service is being used.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. You may manage your cookie preferences at any time via the cookie consent banner.

13. Security

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

14. Children's Privacy

Our Service is intended for users who are 18 years of age or older (or the age of legal majority in your jurisdiction). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us immediately at privacy@calogoal.com and we will take steps to delete such information.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

The right to know what personal information we collect, use, disclose, and sell.
The right to delete your personal information.
The right to opt-out of the sale or sharing of your personal information.
The right to non-discrimination for exercising your privacy rights.

We do not sell your personal information. To exercise your California privacy rights, contact us at privacy@calogoal.com.

16. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy. For significant changes, we may also notify you via email or in-app notification.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@calogoal.com.