Privacy Policy
42apps LLC ("we", "us", or "our") operates the CalZen mobile application and website (calzen.ai). This Privacy Policy explains how we collect, use, share, and protect your personal data when you use CalZen (the "App" and "Website"). It applies to users worldwide, including those protected by the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Data Controller
The data controller responsible for your personal data is:
- 42apps LLC
- 49 building, Mamyr-4, 050039 Almaty, Kazakhstan
- Email: calzen@42apps.io
2. Information We Collect
2.1 Information You Provide
- Health and nutrition data: age, gender, height, weight, body fat percentage, calorie and macro goals, food diary entries, water intake, weight log
- Food photos: images you take or upload for AI calorie analysis
- Support requests: email address and message content when you contact us
2.2 Information Collected Automatically
- Device data: device model, operating system version, app version, language, time zone
- Usage data: features used, screens viewed, session duration, interaction events
- Analytics identifiers: anonymous IDs assigned by analytics services (not tied to your real identity)
2.3 Information from Third-Party Integrations
- Apple Health / Health Connect: steps, active calories burned (only with your explicit permission; we read but do not write to these services)
- Subscription data: purchase status, subscription plan, expiration date (via Apphud; we do not receive payment card details)
2.4 Website Data (calzen.ai)
- Analytics: Google Analytics collects anonymized page views, referral source, device type, and approximate location (country/city level)
- Cookies: we use essential cookies and analytics cookies. See Section 10 below
- Calculator inputs: data entered into our online calculators is processed locally in your browser and is never sent to our servers
3. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing the App and its features | Contract performance (Art. 6(1)(b)) |
| Processing food photos via AI | Contract performance (Art. 6(1)(b)) |
| Sending push notifications | Consent (Art. 6(1)(a)) |
| Analytics and product improvement | Legitimate interest (Art. 6(1)(f)) |
| Reading Apple Health / Health Connect | Explicit consent (Art. 6(1)(a)) |
| Processing subscription payments | Contract performance (Art. 6(1)(b)) |
| Responding to support requests | Legitimate interest (Art. 6(1)(f)) |
4. How We Use Your Information
- Provide AI-powered food recognition and calorie/macro tracking
- Calculate personalized nutrition goals and health scores
- Sync activity data from Apple Health or Health Connect
- Process and manage your subscription
- Send push notifications (reminders, progress updates) — only with your consent
- Analyze usage patterns to improve the App (aggregated, anonymized)
- Respond to support requests
- Comply with legal obligations
5. AI Processing (OpenAI API)
When you scan a food photo, the image and any accompanying text description are sent to OpenAI's API for analysis. OpenAI processes this data solely to return nutrition results and does not use it to train their models (per OpenAI's API data usage policy). We do not send your name, email, or any identifying information to OpenAI — only the food image and description.
6. Data Sharing
We do not sell your personal data. We share data only with the following categories of service providers, solely for the purposes described in this policy:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | Food photo AI analysis | Food images, text descriptions |
| Apphud | Subscription management | Purchase events, subscription status |
| Firebase (Google) | Analytics, crash reporting | Anonymous usage data, crash logs |
| Amplitude | Product analytics | Anonymous usage events |
| AppsFlyer | Attribution analytics | Install source, anonymous device ID |
| Google Analytics | Website analytics | Anonymized page views (website only) |
All service providers are contractually obligated to process data only on our behalf and in accordance with this policy.
7. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (OpenAI, Firebase, Amplitude, AppsFlyer). These transfers are necessary for providing the App's functionality. Where required by GDPR, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's adequacy certification, to ensure appropriate safeguards.
8. Data Retention
- Nutrition data: stored locally on your device. Deleted when you uninstall the App
- Food photos: processed in real-time by OpenAI and not stored on our servers after analysis is complete
- Analytics data: retained for up to 26 months (Google Analytics default), then automatically deleted
- Support correspondence: retained for up to 12 months after resolution
- Subscription records: retained as required by tax and accounting regulations (typically 3–7 years)
9. Your Rights
9.1 Rights Under GDPR (EU/EEA/UK Users)
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure ("Right to be Forgotten") — request deletion of your personal data
- Restriction — request that we limit processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — withdraw consent at any time (for consent-based processing)
- Lodge a complaint — file a complaint with your local data protection authority
9.2 Rights Under CCPA (California Residents)
California residents have the right to:
- Know — request disclosure of the categories and specific pieces of personal information we collected
- Delete — request deletion of your personal information
- Opt-out of sale — we do not sell personal information, so this right does not apply
- Non-discrimination — we will not discriminate against you for exercising your rights
9.3 How to Exercise Your Rights
To exercise any of these rights, contact us at calzen@42apps.io. We will respond within 30 days (GDPR) or 45 days (CCPA). We may ask you to verify your identity before processing your request.
You can also delete all locally stored data by uninstalling the App from your device.
10. Cookies
Our website (calzen.ai) uses the following cookies:
- Essential cookies: remember your cookie consent preference
- Analytics cookies (Google Analytics): help us understand how visitors use the website. These cookies collect anonymized data. You can opt out by declining cookies via the consent banner or by installing the Google Analytics Opt-out Browser Add-on
The App does not use cookies.
11. Security
We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS/HTTPS), secure cloud infrastructure, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
12. Children's Privacy
CalZen is not intended for children under 16 (or under 13 in jurisdictions where that is the applicable age). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at calzen@42apps.io.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via push notification or email. We encourage you to review this page periodically.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
- Email: calzen@42apps.io
- Mail: 42apps LLC, 49 building, Mamyr-4, 050039 Almaty, Kazakhstan