Privacy Policy for Calco Effective Date: January 22, 2026 Last Updated: January 22, 2026 Introduction Calco ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Calco (the "App"). Information We Collect Personal Information We collect the following personal information: Email Address: Used for account authentication and communication Name: Used for personalizing your app experience Profile Photo: Optional, for account customization Health and Fitness Data Weight and Height: For BMI calculations and health tracking Nutrition Goals: Calorie, protein, carbs, and fat targets Food Entries: Daily food logs with nutrition information Workout History: Exercise sessions, reps, duration, and calories burned Weight History: Historical weight entries for progress tracking Dietary Preferences: Vegetarian, vegan, or other dietary restrictions Food Allergies: Allergen information for safety warnings Photos and Device Data Photos: Food images captured via camera (stored locally on device, not uploaded to our servers) Device Information: Device type, operating system version (for compatibility) Usage Data App Usage: Features used, screen views (via Firebase Analytics) Crash Reports: Error logs for improving app stability How We Use Your Information We use your information to: Provide App Functionality: Track nutrition, workouts, and health goals Personalize Experience: Customize recommendations based on your preferences Account Management: Authenticate users and manage subscriptions Improve the App: Analyze usage patterns to enhance features Send Notifications: Meal reminders and achievement notifications (if enabled) Customer Support: Respond to inquiries and troubleshoot issues Data Sharing and Third Parties We share your data with the following third-party services: Firebase (Google LLC) Purpose: Authentication, database, analytics Data Shared: Email, name, user profile, food entries, workout history Privacy Policy: https://firebase.google.com/support/privacy Location: United States (Google Cloud servers) RevenueCat Inc. Purpose: Subscription management for premium features Data Shared: User ID, subscription status Privacy Policy: https://www.revenuecat.com/privacy Location: United States Open Food Facts Purpose: Nutrition data lookup (barcode scanning) Data Shared: Product barcodes only (no personal data) Privacy Policy: https://world.openfoodfacts.org/privacy Location: France We do NOT sell your personal data to third parties. Data Storage and Security Storage Cloud Storage: Firebase Firestore (Google Cloud, encrypted at rest) Local Storage: Device database for offline access Photo Storage: Photos remain on your device only (never uploaded) Security Measures Encryption in Transit: All data transmitted via HTTPS (TLS 1.3) Encryption at Rest: Firebase Firestore encryption Authentication: Secure Firebase Authentication with OAuth 2.0 Access Control: Firestore security rules prevent unauthorized access Code Protection: ProGuard obfuscation in production builds User Rights You have the right to: Access Your Data: View all data we store about you Update Your Data: Edit your profile, goals, and entries anytime Delete Your Data: Request complete account deletion Opt-Out: Disable notifications via app settings Data Portability: Export your data in CSV format (premium feature) How to Delete Your Data Option 1: In-App Go to Settings → Account Tap "Delete Account" Confirm deletion (irreversible) Option 2: Email Request Email us at support@calcoapp.com with subject "Data Deletion Request" including your registered email address.We will delete your data within 30 days of your request. Children's Privacy Calco is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately. Data Retention Active Accounts: Data retained while your account is active Inactive Accounts: Data retained for 2 years, then automatically deleted Deleted Accounts: Data permanently deleted within 30 days Crash Logs: Retained for 90 days maximum Analytics Data: Aggregated, anonymized data retained indefinitely International Data Transfers Your data may be transferred to and stored on servers located in the United States (Google Cloud, RevenueCat). We ensure all transfers comply with applicable data protection laws including GDPR. Your California Privacy Rights (CCPA) If you are a California resident, you have additional rights: Right to know what personal information is collected Right to delete personal information Right to opt-out of sale of personal information (we don't sell data) Right to non-discrimination GDPR Compliance (European Users) If you are in the European Economic Area (EEA), you have rights under GDPR: Right to access, rectify, or erase your data Right to restrict or object to processing Right to data portability Right to withdraw consent Right to lodge a complaint with supervisory authority Legal Basis for Processing: Contract performance (app functionality) Consent (notifications, analytics) Legitimate interests (app improvement, security) Changes to This Privacy Policy We may update this Privacy Policy periodically. We will notify you of significant changes via: In-app notification Email to your registered address Continued use of the App after changes constitutes acceptance of the updated policy. Contact Us If you have questions about this Privacy Policy, please contact us: Email: support@calcoapp.com Developer: Rishu Sejwar Mailing Address: Kanpur, Uttar Pradesh, India Website: https://github.com/Rishusejwar By using Calco, you consent to this Privacy Policy and agree to its terms. Last Updated: January 22, 2026 Version: 1.0