Privacy Policy

Effective 16 October 2026. Operated by Digital Infinity Group LLC. Questions: support@homekcal.com

Who we are

Homekcal is a phone app and website operated by Digital Infinity Group LLC ("we", "us"). We are the controller of the personal data described here. Contact us at support@homekcal.com.

This policy covers the app, the website and email from us. Food logs, weight and targets are health data, and we treat them with extra care. Washington residents and anyone who wants the full detail on health data should also read our Consumer Health Data Privacy Policy.

The short version

These are the promises the rest of this policy spells out.

Meal photos are deleted after analysis. We never store them on our servers.
No ads, no ad tracking, and no analytics or advertising tools of ours inside the app. On Android, Google's barcode reader sends Google its own diagnostics, described below.
We do not sell your data or share it for advertising.
The AI provider that reads your photo keeps nothing and does not train on it.
You can export everything in the app and delete your account in the app at any time.

What we collect

Only what the app needs to work, listed below.

Approximate location: the approximate city and country your connection comes from, recorded once when your account is first used. Your IP address itself is not stored for this, and the location is deleted with your account. Our host works the place out; we never see or keep the address.

Account: a private account id created on your phone, and if you save your account, your email address and the id Apple or Google gives us when you sign in with them.
Health data you give us: your goal, sex, age, height, weight, activity level, the cuisines you cook and your diet type; your targets; the meals you log, with each item, portion, oil level and the calorie and protein estimate; corrections; saved recipes; weight entries.
Health sync, only if you turn it on: weight read from Apple Health or Health Connect, and confirmed calories and protein written back to it.
Purchases: whether you have Pro, the store's transaction ids and renewal status. The store handles your payment; we never see card details.
Usage: the days you use the app, how many minutes it is open and in use, and how many photos are analysed per day (to apply the free and fair use limits and to know what the AI costs us).
Sign-in sessions: a session token, when it was created and when it expires, and the app or browser name and version your device reports, so you stay signed in. Not your IP address.
Support: what you write to us.
Diagnostics: crash reports the App Store and Google Play give us, and short-lived server logs with request bodies and health values removed.

What we never collect or keep

We do not keep any of these:

Meal photos and nutrition label photos, after analysis.
Voice recordings. Speaking a meal is turned into text on your phone; no audio is sent to us.
Your GPS location, contacts or advertising identifier.
Your IP address in our database.

Photos and AI

When you photograph a meal, the app shrinks the photo on your phone and sends it to our server, which passes it once to an AI model (Anthropic's Claude, reached through Vercel's AI Gateway) and keeps it only in memory until the answer comes back. Then it is dropped. Alongside the photo we send the cuisines, diet type and small-portions setting you chose, which help it recognise your food, and a one-way coded account number used only to stop abuse; never your name, email, weight or other meals. We ask for zero data retention on every request, so the provider keeps nothing, and the provider does not use API data to train its models.

If your phone is offline, the shrunk photo waits on your phone until it can be sent, then is deleted there too. You can discard waiting photos in Settings.

A small thumbnail of each meal stays on your phone so you can see your log. It is never uploaded to us. Full details are in our AI Processing Disclosure.

How we use it, and our legal basis

Under the EU and UK GDPR we must name a legal basis for each use:

Running your account, logging, targets, sync between devices and Pro: necessary for our contract with you.
Health data (food logs, weight, targets, profile): your explicit consent, given on the consent screen before any of it is collected. Withdrawing it means deleting your account, because the app cannot work without it; the consent screen says so.
Marketing email: your consent, which you can withdraw with one tap in any email or in the app.
Security, preventing abuse, applying usage limits and counting how the product is used from our own records: our legitimate interest in running a reliable, affordable service. Health values are not used for this.
Keeping records the law requires: legal obligation.

No ads, no selling, no ad tracking

There are no ads in the app. No advertising, analytics or attribution tool is built into the app, so none of them sees what you eat, weigh or aim for, or even that you use the app. The one exception to the last part is on Android: Google's ML Kit barcode reader, which the Android app needs to read barcodes, sends Google diagnostics that include the app's name and a per-installation id, so Google can tell that this app is installed. It sends no food, weight, photo or account details. We do not sell personal data, and we do not share it for cross-context behavioural advertising as California law defines it. We never upload email lists to advertising platforms.

Our website

Our marketing pages count visits with PostHog without cookies or local storage. A visit records the page, the site you came from, campaign tags in the link, your screen size and browser name. Your IP address is not kept, and no location is added. There is no analytics on sign-in or account pages. The website sets cookies only when you sign in, and only to keep you signed in.

Where your data is processed

Digital Infinity Group LLC is based in the United States and our providers process data in the United States. Where EU or UK law applies, transfers rely on the European Commission's standard contractual clauses, the UK addendum, or the EU-US Data Privacy Framework where a provider is certified.

How long we keep it

We keep data only as long as we need it:

Your account and everything you log: until you delete your account. Deleting it removes your meals, profile, targets, weights, recipes, corrections, consent records and usage counts from our live database at once, signs you out everywhere and destroys the key that seals your profile and weight. Database backups that may still hold a copy roll off within 30 days.
What stays after deletion: a record that an account existed and was deleted, with its random id and dates but no name, email, location or health data, and the audit trail of changes, which never contains health values. If you were on our email list, your address stays on our do-not-email list so we never mail it again.
Meal photos: not kept. They exist only in memory while being analysed.
Purchase records (the store's transaction ids, product, dates and renewal status, no health data): kept after you delete your account, linked only to the anonymous record above, because Apple or Google keep billing a subscription until you cancel it in the store and their renewal and refund notices must still find it. Apple and Google keep their own purchase records under their own policies.
Server logs: no more than 30 days, with health values removed.
Support emails: up to 24 months after the conversation ends.
"I weighed this" research entries, if you opt in: only the dish, the grams and the estimate, stored under a random research id, never your account id or a photo. Deleting your account deletes the link between you and that id, so the numbers that remain can no longer be connected to you.

Your rights and choices

Wherever you live, you can see, export, correct and delete your data. In the app: Settings, then Account, then Export my data (JSON and CSV) or Delete my account. You can also email us from the address on your account. For a guest account that was never saved, use the app, because we cannot otherwise confirm the account is yours.

In the EU, UK and Switzerland you also have the right to restrict or object to processing, to data portability, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). US state laws, including California's, Washington's and others, give similar rights. We answer within one month (45 days where US state law sets that), and we never treat you differently for using them.

Children

Homekcal is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you think a child has used it, email us and we will delete the account.

How we protect it

Data is encrypted in transit and at rest. Your profile and weight are additionally sealed with a key unique to your account, and every database query is limited to your own rows by the database itself. Access by our team is limited to what running the service needs, and every change to data is recorded in an audit log that contains no health values.

If something goes wrong

If health data is accessed or shared without your permission, we will tell the people affected, by email and in the app, without unreasonable delay and no later than 60 calendar days after we discover it, and notify the US Federal Trade Commission and, where required, the media, as the FTC's Health Breach Notification Rule requires. Where GDPR applies, we will notify the data protection authority within 72 hours of becoming aware of a breach that puts people at risk.

Changes to this policy

If we make a material change, we will tell you in the app before it takes effect, and ask for your consent again where the law requires it. The date at the top shows when this version took effect.

Contact

Email support@homekcal.com with any question or request about your data.