Legal

Privacy Policy

Last updated: September 21, 2026

This Privacy Policy describes how Anvarion (“we”, “us”, or “our”) collects, uses, and shares information when you use the Calories AI mobile application, website (anvarion.com), and related services (together, the “Service”). Contact: no-reply@anvarion.com.

1. Information we collect

Depending on how you use the Service, we may collect:

• Account information such as email address and password (stored as a hash), or identifiers from Google Sign-In or Sign in with Apple. Social sign-in uses Firebase Authentication. We may store Google or Apple account identifiers linked to your Bloom account. The app may create a guest session before you register or sign in.
• Profile information you provide, such as name, gender, date of birth, height, weight, activity level, nutrition goals, and an optional profile photo. If you upload a profile photo, it is stored using Amazon S3.
• Usage content such as chat messages, meal descriptions, logged meals, food items, and calorie and macro estimates. This text is stored with your account.
• Photos and scans you submit to log meals, including camera photos, photo-library images, and barcode or nutrition-label pictures. These images are processed to identify food and are not stored as image files on our servers. We store the resulting meal log (text and nutrition values).
• Voice recordings you submit so we can transcribe speech and log meals. Audio is processed for transcription and is not stored as an audio file on our servers. The transcribed text is stored as a chat message.
• App settings such as language, theme, units, and reminder preferences.
• Subscription information such as plan, status, expiration, and identifiers from Apple, Google, RevenueCat, and (for web purchases) Stripe. We do not receive or store full payment card numbers.
• Health and activity data you choose to share by connecting Apple Health or Health Connect. Connecting is optional and requires your permission. See section 3.
• Device identifier. The app generates a device ID, stored on your device and on our servers, to continue a guest/trial session on the same device (including guest message limits) and to avoid creating another guest account on a device that already has an account. This is not used for advertising.
• Session information such as authentication tokens stored on your device so you can stay signed in. We do not currently use Firebase Analytics, Crashlytics, or advertising SDKs.
• Website preferences on anvarion.com, such as language and theme stored in your browser. We do not use advertising cookies.

2. How we use information

We use information to:

• Provide calorie and macro estimates from your meal descriptions, photos, scans, and voice
• Calculate and display daily targets, history, statistics, and achievements
• Authenticate your account and sync data across devices
• Process subscriptions and unlock paid features
• Improve accuracy, reliability, and product experience
• Respond to support requests and communicate service updates
• Send transactional emails such as password reset, email verification, welcome, and subscription notices
• Comply with legal obligations

3. Health data

We only read Apple Health (HealthKit) or Health Connect data if you connect those services and grant permission on your device. If you grant access, the app can read: steps, workouts, active energy, total calories burned when active energy is unavailable, distance, weight, and body fat percentage. Access is read-only; the app does not write data to Apple Health or Health Connect. Activity data is used in the app to show activity and calorie-related features; some activity summaries may be cached locally on your device. If you sync weight (and body fat when available), we may store those readings with your account as weight history and may update your profile weight. We do not sell health data. If you do not grant permission, we do not collect this health data. You can disconnect access in your device settings and in the app.

4. AI processing

When you use chat, photo, scan, or voice, we send that content to OpenAI, Inc. (openai.com), a third-party AI service, so it can estimate calories and macros and transcribe speech. We send only: food messages you type and recent messages in that conversation; and, when you use those features, food photos, nutrition-label scans, and voice about food. We do not send your name, gender, email, password, payment details, nutrition goals, Apple Health data, or your full account to OpenAI. Do not submit information you do not want processed for this purpose.

We do not send this data to OpenAI until you give permission in the app. The first time you send a message, photo, scan, or voice recording, we show a disclosure that names OpenAI, lists the data that will be sent, and asks you to Allow or Don’t Allow. You can turn this off later in Settings (AI data sharing). If you decline, chat, photo, scan, and voice will not send personal data to OpenAI.

OpenAI processes this data as our service provider under its terms and privacy policy. We require that OpenAI protect this data with safeguards at least as protective as this policy. Under OpenAI’s API terms, API customer content is not used to train OpenAI models by default.

If you scan a barcode, we may query Open Food Facts using the barcode number to look up product name and nutrition. Open Food Facts does not receive your profile or account information.

We store chat text and meal logs with your account. Meal photos and voice audio are processed to produce those logs and are not stored as media files on our servers. Profile photos are stored on Amazon S3 if you upload one.

5. Payments

Mobile subscriptions are purchased through the Apple App Store or Google Play. RevenueCat helps us verify those purchases and determine which features you have. We receive subscription and entitlement status, product identifiers, and related purchase metadata. Apple or Google processes the payment. We do not collect your card number from Apple or Google purchases.

Web subscriptions, when offered, are processed by Stripe. We receive confirmation of payment, plan, and Stripe customer and subscription identifiers so we can provide paid features. Card details are handled by Stripe and are not stored by us.

6. Sharing

We do not sell your personal information. We share information with service providers only as needed to operate the Service, including: Firebase Authentication and Google (sign-in); Apple (Sign in with Apple and App Store purchases); Google Play (purchases); RevenueCat (mobile subscription verification); Stripe (web subscriptions); OpenAI (chat, image analysis, and transcription); Open Food Facts (barcode product lookup); Amazon Web Services S3 (profile photos); and GoDaddy Professional Email (SMTP) to send transactional email. These providers process data under their own terms. We may also disclose information if required by law or to protect rights, safety, and the integrity of the Service.

7. Data retention and account deletion

We retain account, profile, meal, chat, settings, weight-log, and subscription records in our database while your account is active. Guest data is kept until you create an account, sign in to an existing account, or the guest account is removed. Profile photos are kept on Amazon S3 until replaced or deleted.

If you delete your account in Settings, we delete your Bloom user record and associated application data in our database, and we delete the current profile photo from Amazon S3 when one exists. If you had a Stripe web subscription, we also try to cancel that Stripe subscription and delete the Stripe customer. Account deletion does not remove records held independently by third parties, including Firebase Authentication, RevenueCat, OpenAI, Open Food Facts, Apple, or Google. Deleting your Bloom account does not cancel an Apple App Store or Google Play subscription. Billing continues until you cancel in your Apple or Google account settings. Deleting the app from your device also does not cancel a store subscription.

8. Your choices

• Update profile and settings inside the app
• Connect or disconnect Apple Health or Health Connect
• Allow or turn off sharing personal data with OpenAI in Settings (AI data sharing). Chat, photo, scan, and voice require this permission
• Manage or cancel a subscription in the app (including Restore Purchases for store purchases), or through Apple or Google account settings if you subscribed there
• Delete your account in Settings. This deletes the Bloom account data we store as described above. It does not cancel Apple App Store or Google Play subscriptions.
• Request access, correction, or deletion by emailing no-reply@anvarion.com

9. Children’s privacy

The Service is not directed to children under 13 (or 16 where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it.

10. International transfers

Your information may be processed in countries other than your own, including by our service providers. Where required, we take steps to protect transferred data appropriately.

11. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.

12. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date.

13. Contact

For privacy questions or requests, email no-reply@anvarion.com. See also our Terms of Service.