Effective date: April 10, 2026 · Last updated: April 10, 2026
Keto Cal AI ("the App") is operated by Joseph Bornstein ("we," "us," or "our"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
Account data. When you sign in with Apple, we receive your Apple user identifier and, if you choose to share it, your email address. We store a SHA-256 hash of your email for analytics attribution — we never store your raw email address.
Food photos. Photos you take in the App are sent to Google (Gemini) for food analysis. Photos are also stored in our database (Supabase) so you can view your meal history. We do not sell or share your photos with any third party beyond the analysis provider.
Usage data. We collect anonymous usage events (e.g., "photo scanned," "paywall shown") via PostHog to improve the App. These events do not contain personally identifiable information.
Subscription data. Your subscription status is managed by RevenueCat and Apple. We store your subscription status (active, expired, cancelled) but not your payment details — Apple handles all billing.
Device data. We collect your Expo push token if you opt into notifications. We collect basic device info (platform, OS version) for crash reporting via Sentry.
We use the following third-party services that process your data:
When you scan a food photo, it is sent to Google's Gemini API for analysis. Google processes the image to identify food items and estimate nutritional content. By using the App, you consent to this processing. You can revoke consent at any time in the App's AI consent settings — this will disable the photo scanning feature.
Your food logs and account data are retained as long as your account is active. If you delete your account, all associated data (logs, photos, daily summaries, subscription records) is permanently deleted within 30 days.
You have the right to:
The App is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, contact us immediately.
We use Supabase Row Level Security to isolate user data, HTTPS for all data transmission, and secure token storage on your device. No system is 100% secure, but we take reasonable measures to protect your data.
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or email. Continued use of the App after changes constitutes acceptance.
Questions about this Privacy Policy? Contact us at: