1.Who we are
Calnexia (“Calnexia”, “the app”, “we”, “us”) is a nutrition and weight-tracking application. The app is operated by Ciprian-Alexandru Frăsinescu, based in France. Once our company is formed, this operator will be updated to the registered legal entity.
For any privacy question, contact us at support@calnexia.com.
Because the personal information you enter stays on your device and is not transmitted to us, Calnexia acts as a data controller only for the limited processing described in sections 4 to 10 below.
2.Our core principle: on-device data
Everything you log in Calnexia — your profile, weight entries, meals, food logs, goals, water intake, and progress — is stored locally on your device using your browser or device storage. This information:
- stays on your device and is not uploaded to us or stored on any Calnexia server;
- is not accessible to us, to other users, or to any third party;
- remains under your control and stays on your device until you delete it.
The exceptions are the optional lookups and features described in sections 4 to 10 — most notably the barcode and food-name lookups in section 5 (sent to Open Food Facts) and the optional AI-assisted logging in section 6 (your meal text, sent through our server to Google). Aside from those, everything you log stays on your device.
3.We do not require an account
Calnexia has no sign-up, no login, and no password. We never ask for your name, email address, or phone number in order to use the app. Any name shown in the app (for example, in a greeting) is stored only on your device.
4.Camera and barcode scanning
If you choose to scan a product barcode, Calnexia asks your device for camera permission. The camera is used only while the scanner is open, and only to read a barcode.
- Barcode detection happens on your device. The live camera feed used for scanning is processed locally and is never stored or uploaded. Separately, if you choose to photograph a meal for the optional AI-assisted logging feature, that photo is sent for analysis as described in section 6.
- You can decline or revoke camera permission at any time in your device settings; the rest of the app continues to work.
5.Nutrition database lookups
When you scan a product barcode or type a food name into search, Calnexia sends that barcode number or the words you typed to Open Food Facts, a free public food database, in order to retrieve nutrition information.
This request contains the barcode number or search text and standard technical information (such as your device’s IP address) that is part of any internet request. It does not include your profile, your logs, or any other personal data. Open Food Facts handles this request under its own privacy policy — see openfoodfacts.org/privacy.
6.AI-assisted logging (optional)
Calnexia offers an optional feature that lets you describe a meal in your own words, photograph your plate, or request a recipe (for example, “two eggs and toast with butter”) and turns it into food entries automatically. This feature is off until you turn it on, asks for a one-time confirmation before first use, and the rest of the app works fully without it.
When you use it, the text you type — or the meal photo you choose to submit — is sent — through a server we operate on the Cloudflare network — to Google’s Gemini AI, which identifies the foods and estimates their nutrition. Photos are resized on your device before upload. We send only:
- the words you type to describe the meal, or the meal photo you submit, together with your app language (English or French) so results come back in your language; and
- a random identifier generated on your device, used solely to count usage against free-trial and daily limits. It is not your name or an account, and is not linked to your identity.
We do not send your profile, weight, food log, goals, or any other personal data. The text or photo is processed in transit to produce your result and is not stored on our server; our server keeps only an anonymous count of how many times the feature has been used from your device.
Google (which runs the Gemini model) and Cloudflare (which hosts the server that forwards your request) act as our service providers for this feature and process the text or photo on our instructions. We use Google’s paid API tier, under which your input is not used to train Google’s models. Google’s handling of the request is governed by Google’s own privacy terms. This processing may take place on servers located in the United States; see section 10, International data transfers, for the safeguards that apply.
You can choose not to use this feature, and stay on manual logging, at any time.
7.Health and activity data (Apple Health)
Calnexia offers an optional feature that connects to Apple Health. If you choose to turn it on and grant permission, Calnexia reads your Active Energy Burned — and, on iPhone-only setups, your step count and walking distance — from Apple Health and uses them to adjust your daily calorie budget so it reflects how much you have actually moved.
- Access is read-only: Calnexia never writes any data back to Apple Health.
- Your Health data is used on your device only. It is not sent to us, is not stored on any server, and is not shared with any third party.
- We never use Health data for advertising or marketing, and we never sell or share it.
- The feature is entirely optional and the rest of the app works without it. You can turn it off at any time, and you can revoke Apple Health permission in iOS Settings → Privacy & Security → Health.
8.Purchases and subscriptions
If you buy a subscription or a one-time upgrade, the purchase is processed entirely by Apple through the App Store. Calnexia never sees or stores your card number or billing details.
We receive only a confirmation that a purchase is valid, so the app can unlock the relevant features. Apple’s handling of payment data is governed by Apple’s own privacy policy.
9.Diagnostics, crash reports, and anonymous usage
Calnexia does not include any third-party analytics or crash-reporting tool (such as Google Analytics, Firebase, Crashlytics, or Sentry). If you have chosen, at the iOS level, to share analytics and crash data with app developers, Apple may provide us with anonymous, aggregated crash reports through its own systems — for example, the device model, the iOS version, and where in the code an error occurred. These reports are collected and anonymized by Apple, are not linked to your identity, and are used only to fix bugs.
To understand roughly how the app is used, Calnexia can send an anonymous event signal — for example, that the app was opened or that a meal was logged. Each signal is a single event name only: it carries no user identifier, no device identifier, and no profile, log, or other personal data, and the receiving server does not store IP addresses — it keeps only aggregate daily totals. This cannot be tied back to you or your device, and you can turn it off at any time in the app under Profile → Anonymous usage.
10.International data transfers
Almost everything you enter stays on your device and is never transferred anywhere. The only information that leaves your device is described in sections 5 and 6:
- AI-assisted logging (section 6): your meal text or photo is handled by Cloudflare, which hosts the server that forwards your request, and by Google, which runs the Gemini model. This processing may take place on servers located in the United States.
- Nutrition lookups (section 5): the barcode number or words you type are sent to Open Food Facts, which runs its own infrastructure under its own privacy policy.
Where this transfers data outside your country (for example, from the European Economic Area or the United Kingdom to the United States), the transfer relies on recognized safeguards, such as the EU-U.S. Data Privacy Framework (with its UK extension) and the Standard Contractual Clauses issued by the European Commission. None of these transfers includes your profile, your logs, or any information that identifies you.
11.What we do not do
- We do not show advertising.
- We do not track you across apps or websites.
- We do not build advertising or behavioural profiles.
- We do not sell, rent, or share your personal information.
- We do not use third-party analytics or marketing trackers.
12.Children
Calnexia is intended for people aged 16 and over and is not directed at younger children. If you believe a child has used the app, simply remove the app and its data from the device, as described in section 14.
13.Your rights
If you are in the European Union, the United Kingdom, or another region with similar laws, you have rights over your personal data, including the rights of access, correction, deletion, and portability.
Because Calnexia stores your information only on your device and we hold no copy, you can exercise these rights directly and immediately:
- Access and review: all your data is visible inside the app.
- Correct: edit any entry directly in the app.
- Delete: use “Reset profile” in the app’s Profile screen, or remove the app from your device, to erase all stored data.
If you have a question or a complaint, contact support@calnexia.com. You also have the right to lodge a complaint with your local data protection authority — in France, the CNIL (cnil.fr).
14.Deleting your data
You are always in control. To erase everything Calnexia has stored:
- open the Profile screen and choose Reset profile; or
- remove the app from your device, which deletes its local storage.
Once deleted, the data cannot be recovered, because no backup exists outside your device.
15.Data security
Your information is protected by the security of your own device and operating system. We recommend keeping your device updated and protected with a passcode or biometric lock. Connections the app makes to the internet (for barcode lookups, AI-assisted logging, and purchases) use encrypted HTTPS.
16.Changes to this policy
We may update this policy as the app evolves. When we do, we will change the “Last updated” date above. Significant changes will be communicated within the app where appropriate. Continuing to use Calnexia after an update means you accept the revised policy.
17.Contact
Questions about this policy or your privacy? Email support@calnexia.com.