Privacy Policy

Last updated: October 15, 2026

Your privacy matters. This policy explains what data TrackCalori collects, why, who processes it and what your rights are. TrackCalori is operated from France and complies with the EU General Data Protection Regulation (GDPR), which applies to all users wherever they live.

1. Who we are

Lucas Larange, sole proprietor (micro-entreprise), publisher of TrackCalori — 36 rue Washington, 94210 La Varenne-Chennevières, France. Contact: contact@trackcalori.com.

2. Data we collect

• Account: your email address and password (encrypted; we can never read it).
• Profile & tracking: sex, age or date of birth, weight, height, activity level, goal, logged meals, steps and weight history — the information you enter to use the app.
• Meal photos: when you use photo scanning, the photo is sent to our AI provider to identify the foods. We do not keep the photo after the analysis.
• Coach conversations: the messages you send to the AI coach, together with the tracking data it needs to answer (for example calories left today or your goal). Voice requests are transcribed by your phone's or browser's speech recognition service (Apple or Google) before the text is sent to us.
• Purchases: on iPhone, subscriptions are billed by Apple; on the web, by Stripe. We receive your subscription status, never your card number.
• Usage data: anonymous session events (pages viewed, buttons tapped, onboarding answers) stored in our own database and linked to your account once you sign in; and, only with your consent, the Meta advertising pixel (see section 7).

3. Signing in with Google or Apple

If you create your account or sign in with Google or Apple, we only receive basic profile information: email address, name and profile picture (Google scopes "email" and "profile"). We do not access your contacts, emails, calendar, Drive or any other data in your Google or Apple account.

This information is used only to create and secure your TrackCalori account, recognize you when you sign in again and send you service-related messages. It is never sold, rented or used for advertising, and is not shared with third parties except the technical providers listed in section 5 (Supabase for authentication) or when required by law.

TrackCalori's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google is not used to train AI models and is not read by humans, except with your consent, for security purposes or when required by law.

4. Why we use your data (purposes and legal basis)

• Provide the service (calorie targets, tracking, photo analysis, AI coach, workouts) — performance of our contract with you.
• Manage your account and subscription — performance of the contract.
• Improve the app with anonymous usage statistics — legitimate interest.
• Advertising measurement (Meta pixel) — your consent.
• Answer your support requests — legitimate interest.

Health-related information you enter (weight, meals, goals) is used only to provide the service to you. We do not use it for advertising and do not sell it.

5. Service providers

Your data may be processed by the following providers, only to run the service:

• Supabase — authentication and database (hosted on AWS in the EU)
• Vercel — hosting of the website, app and server functions
• Anthropic — AI that analyzes meal photos and powers the coach, weekly review and workouts
• ElevenLabs — text-to-speech for the coach's voice (receives the text of the coach's answer)
• Apple and RevenueCat — in-app purchases and subscription status on iPhone
• Stripe — payments on the web
• Open Food Facts — food search and barcode lookup (receives the search terms or barcode only)
• Meta (Facebook/Instagram) — advertising measurement, only if you consent

Some of these providers are located in the United States. Transfers outside the EU rely on the safeguards provided by the GDPR (such as the EU–US Data Privacy Framework or Standard Contractual Clauses). We never sell your data.

6. How long we keep it

Your data is kept while your account is active. You can delete your account and all associated data at any time from the app (bottom of the screen → "Delete my account") or by emailing contact@trackcalori.com. We erase it within 30 days, except where the law requires us to keep certain records (for example billing). You can also remove TrackCalori's access from your Google account settings (myaccount.google.com/permissions) or your Apple ID settings.

7. Cookies and trackers

The website and app use the Meta Pixel to measure the effectiveness of our ads. It is only loaded if you accept it. Our own anonymous usage statistics use a random session identifier stored on your device. You can clear these at any time in your browser or device settings.

8. Your rights

You have the right to access, correct, delete and export your data, and to restrict or object to its processing. Where processing is based on consent, you can withdraw it at any time. To exercise these rights, email contact@trackcalori.com — we answer within 30 days. EU residents can also file a complaint with the French data protection authority (CNIL, cnil.fr) or their local authority.

US residents: depending on your state (for example California, Colorado, Virginia or Washington), you may have additional rights to know, access, correct or delete your personal and health data. We grant these rights to every user, through the same email address. We do not sell your personal data.

9. Children

TrackCalori is not intended for anyone under 15 and we do not knowingly collect data from children under 13. The nutrition guidance in the app is an estimate and does not replace advice from a doctor or registered dietitian.

10. Changes

If we make material changes to this policy, we will update the date above and let you know in the app.

The French version of this policy is available here.