Privacy Policy
Last updated: July 7, 2026This Privacy Policy explains how Acosta Tech LLC ("Calfo," "we," "us," or "our") collects, uses, and shares information when you use the Calfo mobile application (the "Service"). We aim to collect only what we need to run the app and to be plain about where your data goes.
1. Information We Collect
Account information
You can start using Calfo with an anonymous session before creating a full account. When you create a permanent account, we collect your email address. Authentication and account management are handled by our backend provider, Supabase.
Content you enter
We store the content you add to the app, including pantry and grocery items, quantities, expiry dates, and household membership and sharing information. This is the core data that makes Calfo work.
Profile and demographic information
During onboarding you can provide your name, and optionally your date of birth and gender. Your name is tied to your account. Date of birth and gender are optional; we use them to understand who our users are so we can improve and prioritize the product (see "How We Use Information"). You can skip these and edit or clear them later.
Dietary preferences and allergens
You can optionally tell Calfo about your dietary preferences and food allergens so we can filter and personalize recipe suggestions. Because these choices can include allergen (health-related) information and options such as Halal or Kosher that may indicate a religious belief, we treat them as sensitive information. They are used only to personalize your experience in the app, are linked to your account, and are never sold or used for advertising or tracking.
Approximate location
You can optionally enter your country, region or state, and city. This information is typed by you. Calfo does not access your device's GPS or location services and contains no location-tracking code. We use this approximate, self-reported location to understand which markets our users are in (analytics). It is optional and can be left blank or cleared at any time.
Fridge and pantry scans (Calfo Pro)
When you use the AI fridge-scanning feature, the photos you take of your fridge or pantry are sent to OpenAI (GPT-4o vision) to identify the food items in the images. The identified items are returned to the app and added to your inventory.
Receipt scanning
When you scan a grocery receipt, the image is processed on your device using Apple's Vision text recognition (OCR). Receipt images are never uploaded to Calfo's servers. The recognized text lines from the receipt are then sent through Calfo's server to OpenAI (GPT-4o mini), a third-party AI provider, to filter out non-product lines (store names, totals, tax, payment details) and turn abbreviations into readable item names. Calfo does not store or log your receipt text; it is used only to return the cleaned-up items for your review, and only the items you choose to save (including any prices shown on the receipt) are stored in your inventory.
Recipe and nutrition queries
When you search for recipes or request nutrition information, the relevant query (such as ingredients or a search term) is sent to Spoonacular to return recipe and nutrition results.
Barcode lookups
When you scan a product barcode, the barcode number is sent to the public OpenFoodFacts database to look up product details.
Household invitations
If you invite someone to your household, you can send the invitation using the native iOS Messages composer. This is user-initiated: you choose the recipient and send the message yourself, and the message content is handled by Apple Messages, not by Calfo.
Push notifications
If you opt in, we send optional push notifications for expiry reminders. You can turn these off at any time in your device settings.
Diagnostics and crash reports
To keep the app stable, we use Sentry to collect crash reports and error diagnostics (such as error messages and basic device information like model and OS version). These reports are associated with your account's user ID so we can trace issues, but we do not send your email, name, demographic information, or scan images to Sentry. This data is used only to diagnose and fix problems.
Product analytics
We use Mixpanel, a product-analytics provider, to understand how features are used so we can improve the app. These are in-app usage events (such as screens viewed and actions taken) associated with your account ID. We do not use this data for cross-app tracking or advertising.
2. How We Use Information
We use the information we collect to: provide and maintain the Service; build and update your inventory; identify items from fridge scans and receipts; return recipe, nutrition, and product results; personalize recipe suggestions based on your dietary preferences, allergens, and pantry contents; enable household sharing; send expiry reminders you have opted into; understand our audience and the markets we serve using demographic and approximate-location information (analytics); diagnose crashes and errors; and secure, troubleshoot, and improve the Service.
3. Payments
If you subscribe to Calfo Pro, payment is processed by Apple through the App Store, and subscription status is managed by RevenueCat. Calfo never receives, sees, or stores your payment card details.
4. Sub-Processors and Sharing
We do not sell your personal information. We share data with the following service providers ("sub-processors") only as needed to operate the features described above:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database hosting, backend functions | Email, account data, and the content you enter |
| OpenAI | AI image analysis for fridge scanning; AI text cleanup for receipt scanning | Fridge/pantry photos you submit for scanning; receipt text lines (never receipt images) |
| Spoonacular | Recipe and nutrition data | Recipe and nutrition queries |
| RevenueCat | Subscription and receipt management | Subscription status and purchase receipts |
| Sentry | Crash and error diagnostics | Crash/error reports and basic device diagnostics, associated with your user ID (no email, name, or images) |
| Mixpanel | Product usage analytics | In-app usage events associated with your account ID |
| Apple | App Store payments and push notification delivery | Payment processing; push notification tokens |
| OpenFoodFacts | Barcode product lookups | Scanned barcode numbers |
These providers process data on our behalf or, in some cases, as independent controllers under their own privacy policies. We encourage you to review their policies for more detail on their practices.
5. Data Security
We take reasonable measures to protect your information. Data is encrypted in transit, and our backend uses row-level security to isolate each user's and each household's data so that you can only access data you are authorized to see. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, your associated data is removed as described below. We may retain limited information where required for legal, security, or fraud-prevention purposes.
7. Your Rights and Choices
You can permanently delete your account and all associated data directly from within the app. You may also request to access, correct, or delete your personal information. Depending on where you live, you may have additional rights, described below. To exercise any of these rights, use the in-app controls or contact us at nelson@calfo.app.
If you are in the EEA or UK (GDPR)
You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Our legal bases for processing include performing our contract with you (providing the Service), your consent (for example, optional push notifications), and our legitimate interests in operating and securing the Service. You may withdraw consent at any time and have the right to lodge a complaint with a supervisory authority.
If you are in California (CCPA/CPRA)
You have the right to know what personal information we collect, to request deletion of your personal information, and to correct inaccurate information. We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
8. International Transfers
Some of our sub-processors are located in the United States, so your information may be processed in the U.S. or other countries that may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for these transfers.
9. Children's Privacy
Calfo is not directed to children under 13 (or under 16 in regions where 16 is the minimum age for digital consent), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice in the app.
11. Contact
If you have questions about this Privacy Policy or your data, contact us at nelson@calfo.app, or by mail to Acosta Tech LLC, c/o Republic Registered Agent LLC, 501 Union St, Ste 413, Nashville, TN 37219.