HealthyCal Privacy Policy

1. Scope and controller

This Policy applies to the HealthyCal Android application (package: com.glintmote.healthycal) and its related account, subscription and cloud-recognition services.

The data controller is the HealthyCal developer identified on the Google Play store listing. Submit privacy questions, rights requests or deletion requests to support@glintmote.com. To protect accounts, we may ask you to verify your account email or provide information reasonably necessary to confirm your identity.

2. Information we process

2.1 Account and verification information

When you register or sign in, we process your email address, nickname, verification-code records, a cryptographic hash of your password, login sessions and account timestamps. We do not store your login password in plain text. Verification codes are delivered through an email service.

2.2 Profile and health-calculation information

When you complete your profile, we may process sex, date of birth, height, weight, daily activity level, walking, exercise frequency and exercise types. These details are used to estimate basal metabolic rate, exercise expenditure and nutrition targets. After sign-in, profile settings may be synchronized to HealthyCal servers so they can be restored and kept consistent with your account.

2.3 Health and activity data

With your authorization, HealthyCal may read active-calorie data within the scope you approve through Android Health Connect or Huawei Health services. It is used to calculate and display daily expenditure and energy balance. Refusing permission does not prevent use of features that do not require this data; when actual expenditure cannot be read, the app may use estimates based on the profile you provide.

The current app reads active-calorie information from health services. We do not sell this data or use it for advertising. Daily energy summaries derived from it are primarily stored on your device.

2.4 Meals, nutrition and photos

When you photograph or confirm a meal, the app may process a food photo, meal name, category and subcategory, estimated weight, calories, carbohydrate, protein, fat, fiber, recognition confidence, intake time, recognition source and raw recognition output. Confirmed meal records, nutrition summaries and photos are primarily stored in app-specific local storage.

In local-recognition mode, the photo is processed by an on-device model and is not uploaded to HealthyCal servers for food recognition.

When a subscriber actively uses cloud recognition, the app sends the current meal photo and information necessary to provide recognition to cloud services. Contracted third-party AI service providers may participate in processing this information to generate food and nutrition estimates. Results are returned to the app and may be stored locally. We process the information only to the extent and for the period necessary to complete recognition, protect service security and comply with legal obligations. We do not use meal photos for advertising, identity recognition or purposes unrelated to the recognition you request. Processing by third-party service providers may also be subject to applicable law, contractual requirements and their security policies.

2.5 Subscription and payment information

Subscriptions are processed by Google Play. We do not receive your full payment-card number. To verify and provide subscription entitlements, we may process product and base-plan identifiers, order identifiers, purchase tokens, subscription state, expiry time, auto-renewal state, billing country or region and account-region matching results, and verify transactions through the Google Play Developer API.

2.6 Region, network and service logs

To select account, data and AI service regions, prevent fraud and maintain security, our server may process your confirmed region, billing country or region returned by Google Play, country-level location inferred from your IP address, language settings, request time, endpoint status and errors. Cloud recognition also records account linkage, feature, provider type, model name, request status, request count and necessary diagnostic information. Device language alone is not treated as proof of nationality or permanent legal residence.

3. Purposes of processing

We process information only as needed to provide and maintain HealthyCal, including to:

1. register and authenticate accounts, send verification codes, secure accounts and synchronize settings;
2. log meals, estimate nutrition and calories, and display daily summaries and trends;
3. read authorized activity expenditure and calculate energy balance;
4. provide local or cloud food recognition;
5. verify Google Play subscriptions, grant entitlements and address refunds or disputes;
6. select a suitable service region, protect systems, diagnose failures and prevent abuse; and
7. comply with legal, accounting, consumer-protection and regulatory obligations.

We do not sell personal information. We do not use health data or food photos for third-party targeted advertising, and we do not use Health Connect data for advertising, credit assessment or purposes unrelated to the app's health features.

4. Legal bases and permissions

Depending on applicable law, we may process information to perform our service contract, on the basis of your consent or explicit consent, to comply with legal obligations, and for legitimate interests in securing and maintaining the service. Health data, food photos and other information that may be considered sensitive are processed only to the extent necessary for the disclosed features.

You can refuse camera or health permissions, or withdraw them in system settings, Health Connect, Huawei Health or app settings. Withdrawal does not affect processing already lawfully performed, but related features may stop working. Cloud recognition starts only when you actively take a photo and use that subscription feature.

5. Where information is stored

The device may store meal photos, meal and nutrition records, daily energy summaries, trends, health calculations, a copy of profile details, language and interface settings. Deleting relevant records, clearing app data or uninstalling the app normally removes app data from the device. If Android cloud backup or device transfer is enabled, some data may enter a system backup according to your device-account settings; those backups must be managed through the device or account provider.

HealthyCal servers may store account email and nickname, password hash, profile settings, login sessions, confirmed region and region evidence, subscription and order-verification information, verification-code and email-delivery records, cloud-recognition usage records and necessary security logs. Meal history and raw records from health services are not currently synchronized to HealthyCal servers as cloud history. If that changes, we will update this Policy and provide any required notice.

6. Recipients and third-party services

Information may be processed by the following recipients where necessary to provide features:

1. Google Play, for app distribution, payments, subscription verification and refund management;
2. Android Health Connect, for on-device management of authorized health-data access;
3. Huawei HMS Core / Health Kit, for authorized health and activity data on supported devices;
4. server-hosting, database, network-security and email-delivery providers, for accounts, verification codes and service operation; and
5. cloud AI model providers, only when you use cloud recognition, for the current photo, recognition instructions and necessary technical parameters.

Different hosting or AI providers may be configured for different service regions. We require service providers to process information only for agreed purposes and to apply appropriate safeguards. Where a third party independently determines its processing purposes, its own privacy policy may also apply.

7. Retention and deletion

We apply data minimization and use the following retention criteria:

1. local meals, photos and health summaries: until you delete records, delete your HealthyCal account, clear app data, uninstall the app or the applicable system backup expires;
2. verification codes: normally expire 10 minutes after issue; related security records may be retained as needed to prevent abuse;
3. login sessions: normally remain valid for up to 30 days; expired records may be retained as needed for security auditing;
4. account and profile information: until account deletion or a valid deletion request;
5. subscription, payment-verification and order records: through the subscription and dispute period, and longer where required for tax, accounting, fraud prevention or law;
6. cloud-usage and security logs: only as long as needed for billing reconciliation, security, diagnostics and disputes; and
7. backups: until overwritten or deleted through the normal backup rotation.

You can permanently delete your HealthyCal account, associated server data, and meals, food photos, health summaries and profile stored on this device from Me — Account security — Delete account after verifying your current login password and an email code. Deleting a HealthyCal server account does not delete orders held by Google Play and does not cancel an active subscription; manage subscriptions through Google Play.

8. Security

We use measures including HTTPS transmission, password hashing, access controls, token verification, least-privilege permissions, database access restrictions and log review. No internet service or device storage is absolutely secure, and we cannot guarantee that all risk can be eliminated. Protect your device, email account and credentials.

9. International and regional processing

HealthyCal configures data and AI services according to account region. If servers, email providers, Google, Huawei or AI providers are outside your country or region, information may be processed across borders. We use contractual protections, security measures, adequacy mechanisms or required consent as applicable. Specific rights depend on where you live.

10. Your rights and choices

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or to complain to a supervisory authority. You can also:

1. edit profile and language settings in the app;
2. withdraw camera, Health Connect or Huawei Health permissions through system controls;
3. delete meal records, clear app data or uninstall the app to manage local data;
4. manage or cancel subscriptions through Google Play; and
5. delete your account, associated server data and local personal data from Account security, or email support@glintmote.com for other data-rights requests.

We may verify your account identity to prevent deletion of another person's data. Withdrawal of consent does not affect processing lawfully performed before withdrawal.

11. Children

HealthyCal is not directed specifically to children. Anyone below the age at which they can independently consent to the relevant service or health-data processing in their location should use the service only after a parent or guardian has read this Policy and provided any legally required authorization. Contact us if you believe a child provided information without appropriate authorization.

12. Automated analysis and health information

HealthyCal uses on-device or cloud AI to estimate foods, weights, calories and nutrition. Results may be inaccurate and are not medical diagnosis or treatment advice. The app does not currently make decisions producing legal or similarly significant effects solely from automated recognition results.

13. Changes to this Policy

We may update this Policy when features, providers or laws change and will display the updated date in the app or another appropriate location. If a change materially affects your rights, or renewed consent is legally required, we will provide additional notice and take the required steps.

14. Contact us

For questions about this Policy, data security, AI processing or your data rights, email support@glintmote.com. Do not send passwords, full purchase tokens or unnecessary health details in ordinary email.