CalorieCade helps you log meals, build daily habits and, if you choose, play with a friend. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the CalorieCade website, web app and any CalorieCade mobile apps (together, the "Services").
CalorieCade ("CalorieCade," "we," "us," or "our") is based in California, United States, and is responsible for your personal information as its controller.
The short version
- We never sell your personal information, and we never use your health information, like what you eat, your body details or your activity, for advertising. If we add ads in the future, we'll update this policy first.
- Your food log, weight and body details are private. Your Duo partner sees only the basics of your day, and your food log only if you choose to share it.
- You can delete your account and your data in the app at any time.
- CalorieCade is only for adults 18 and older.
1. Information we collect
Information you give us
- Account information: your email address, password (stored only in scrambled, hashed form) and display name.
- Body and goal information: birth month and year, sex used for calorie calculations, height, weight entries, goal, pace, goal weight, activity level, whether you are pregnant or breastfeeding, your 18+ confirmation, and the calorie and macro targets we calculate.
- Food and activity logs: meals, foods, portions, meal types and times, notes, saved and custom foods, foods you submit for review, water, workouts (type, duration, intensity, notes, estimated calories) and daily check-ins (how your day felt and any note you add).
- Settings: time zone, units, appearance, water goal and score preferences.
- Duo and League activity: invites, the groups you join, weekly matchups, quests, XP and your food-sharing choices, including a record of when you turned sharing on or off.
- Messages: chat messages, stickers and reactions you send, and any reports or blocks you make.
- Communications with us: what you send us when you contact support.
Information collected automatically
- Usage information: a small set of events, such as which screen was opened or whether a feature was used, tied to a random session ID. These events never include what you eat, your body details or your messages.
- Device and log information: IP address, browser and device type, operating system, pages requested and timestamps, collected by our hosting, security and sign-in providers to deliver and protect the Services.
- Error reports: when something breaks, the page, error details and browser information, so we can fix it.
- Browser storage: we use your browser's storage to keep you signed in, remember your theme and pick up an invite or tour where you left off. We don't use advertising cookies or cross-site trackers.
- Camera: when you scan a barcode, the camera image is read on your device. We receive only the barcode number, never images.
Information from other sources
- Food databases: nutrition details for the foods you search or scan. We send these databases your search words or barcode numbers, never who you are.
- Other users: for example, when a friend invites you to a Duo or reports a message.
About health information. Much of what you log, such as meals, calories, weight, body details, workouts and how you feel, can reveal something about your health. We treat all of it as sensitive information ("consumer health data" under some state laws). We use it only to provide the Services you ask for, and we never sell it or use it for advertising.
2. How we use information
- To provide the Services: create your account; calculate your targets, totals and daily score; run Duo matchups, quests and XP; deliver chat; and show your Duo partner the parts you've chosen to share.
- To keep CalorieCade safe and fair: confirm users are 18+, prevent abuse, spam and cheating, limit message rates, filter blocked words in chat, review reports, and enforce our Terms.
- To improve the Services: understand which features are used and fix problems, using the usage events and error reports described above.
- To communicate with you: account emails such as sign-up confirmation, password resets, security notices and important changes. We don't send marketing emails unless you choose to receive them.
- For legal reasons: to comply with the law, respond to lawful requests, and establish or defend legal claims.
We may create aggregated or de-identified information that no longer identifies you, for example to understand how many people use a feature, and we won't try to re-identify it. We don't use automated decision-making that has legal or similarly significant effects on you.
3. How we share information
We share personal information only as described here.
- With your Duo partner (and League members, when League launches): the information the game needs, as shown in the table below. Your food log is shared only if you turn on food sharing. You can stop at any time, and your partner isn't notified. Chat messages you send are seen by the members of that chat.
- With service providers: companies that work for us and may use your information only to provide services to CalorieCade, under contracts that require them to protect it. They include our cloud hosting and database provider, website hosting and content delivery provider, sign-in and authentication provider, email delivery provider, and error monitoring provider.
- With food databases: your search words and barcode numbers, without anything that identifies you, so we can find nutrition information.
- For legal and safety reasons: when we believe in good faith it's required by law or legal process, or needed to protect the rights, safety or property of our users, the public or CalorieCade.
- In a business transfer: if CalorieCade is reorganized, sold or merged (including into a company formed to run it), your information may transfer to the new owner, who must keep honoring this Privacy Policy.
- With your permission: when you ask us to or agree to it.
We do not sell personal information, share it for cross-context behavioral advertising, or give advertisers or data brokers access to it.
Who sees what
| Information | You | Your Duo partner | CalorieCade |
|---|---|---|---|
| Display name | Yes | Yes | Yes |
| Whether you logged and checked in today | Yes | Yes | Yes |
| Daily scores, weekly matchup and quests | Yes | Yes | Yes |
| Meals, foods and calories | Yes | Only if you share | Yes |
| How your day felt (check-in details) | Yes | No | Yes |
| Weight, body details and targets | Yes | No | Yes |
| Water and workouts | Yes | No | Yes |
| Chat messages | Yes | Yes (chat members) | When a message is reported |
4. How long we keep information
We keep personal information while your account is open and for the periods below, then delete it.
| Information | How long we keep it |
|---|---|
| Account, body details, logs, check-ins, scores | Until you delete them or your account |
| Meals you delete | Removed from your log right away and permanently erased within 30 days |
| Chat messages | Deleted after 90 days, unless everyone in the chat turns on "Keep forever". You can delete your own messages at any time. |
| Reports about messages | 180 days |
| Usage events | 180 days |
| Technical records of saves | 30 days |
| Backups | Overwritten on a rolling schedule, within 30 days |
When you delete your account, we delete your personal information from our active systems right away, and it leaves our backups as they roll over. Messages you sent are deleted too. We may keep limited information longer when the law requires it or to resolve a dispute.
5. How we protect information
We use safeguards designed to protect your information, including encryption in transit, strict access controls that keep each person's data separate, and limited internal access. No service can be completely secure, so we can't guarantee absolute security. If a breach affects your information, we'll notify you and the authorities as the law requires.
6. Your rights and choices
Wherever you live, you can:
- Access and get a copy of your personal information.
- Correct information that is wrong. Most of it you can edit in the app.
- Delete your information. You can delete your account in Account → Settings, or ask us to.
- Withdraw consent, for example by turning off food sharing or deleting body details.
- Object to or restrict some uses of your information.
To make a request, email support@caloriecade.com from the email address on your account. We'll confirm it's you before acting and respond within 30 days, or within 45 days where the law allows, and tell you if we need more time. Requests are free. If we decline your request, you can appeal by replying with "Appeal" in the subject line; we'll answer within 45 days and, if we still decline, tell you how to contact your state attorney general or data protection authority. We'll never treat you differently for using these rights.
Account emails such as password resets and security notices are part of the Services and can't be turned off while your account is open.
7. Notice for U.S. state residents
California, Colorado, Connecticut, Virginia, Texas, Oregon and other states give residents specific privacy rights. This section supplements the rest of this policy.
- Categories we collect: identifiers (email, display name, IP address); personal characteristics (sex and age range used for calculations); internet activity (usage events, device and log information); and sensitive personal information (health information, account sign-in details, and the contents of chat messages). We collect them from you, your device and the sources described in section 1, for the purposes in section 2, and disclose them only to the recipients in section 3. We keep them for the periods in section 4.
- No sale, sharing or targeted advertising: we have not sold personal information, shared it for cross-context behavioral advertising, or used it for targeted advertising in the past 12 months, including information about anyone under 16.
- Sensitive personal information: we use it only to provide the Services you request, keep them secure, and as the law otherwise permits. We don't use it to infer characteristics about you.
- Your rights: to know, access, correct, delete, and not be discriminated against, and to appeal a decision. An authorized agent may make a request for you with your signed permission; we may ask you to verify your identity directly.
- Browser privacy signals: we don't track you across other websites, so there's nothing to opt out of; we treat a Global Privacy Control signal as an opt-out anyway.
- Washington and Nevada: our Consumer Health Data Privacy Policy explains how we handle consumer health data under those states' laws.
8. Notice for people in the EEA, UK and Switzerland
- Controller: CalorieCade, based in California, United States. Contact: support@caloriecade.com.
- Legal bases: we process your information to perform our contract with you (your account, logs, Duo and chat); with your explicit consent for health information, which you can withdraw at any time; for our legitimate interests in keeping the Services secure and improving them; and to meet legal obligations.
- International transfers: we're based in the United States, and your information is stored there. When we transfer it from the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum.
- Your rights: in addition to the rights in section 6, you can ask us to transfer your information to another service (portability), and you can complain to your local data protection authority.
9. Children
CalorieCade is only for adults 18 and older, and we don't knowingly collect information from anyone under 18. If you tell us you're under 18, we lock your account right away and delete your data within 7 days. If you believe a minor is using CalorieCade, contact us.
10. Changes to this policy
We may update this policy as CalorieCade changes. If we make material changes, we'll tell you in the app or by email before they take effect, and we'll ask for your consent where the law requires it. The date at the top shows when it last changed.
11. Contact us
For privacy questions or requests, contact support@caloriecade.com.
See also our Terms of Service.