Privacy Policy

This Privacy Policy explains how Acosta Tech LLC ("Calfo," "we," "us," or "our") collects, uses, and shares information when you use the Calfo mobile application (the "Service"). We aim to collect only what we need to run the app and to be plain about where your data goes.

1. Information We Collect

Account information

You can start using Calfo with an anonymous session before creating a full account. When you create a permanent account, we collect your email address. Authentication and account management are handled by our backend provider, Supabase.

Content you enter

We store the content you add to the app, including pantry and grocery items, quantities, expiry dates, and household membership and sharing information. This is the core data that makes Calfo work.

Profile and demographic information

During onboarding you can provide your name, and optionally your date of birth and gender. Your name is tied to your account. Date of birth and gender are optional; we use them to understand who our users are so we can improve and prioritize the product (see "How We Use Information"). You can skip these and edit or clear them later.

Dietary preferences and allergens

You can optionally tell Calfo about your dietary preferences and food allergens so we can filter and personalize recipe suggestions. Because these choices can include allergen (health-related) information and options such as Halal or Kosher that may indicate a religious belief, we treat them as sensitive information. They are used only to personalize your experience in the app, are linked to your account, and are never sold or used for advertising or tracking.

Body measurements and calorie targets

Calfo includes an optional calorie calculator. You can skip it entirely and set your daily calorie target by hand instead. If you do use it, we store what you enter: your weight, height, sex assigned at birth, and activity level. This is health and fitness information, and we treat it as sensitive. Unlike the scans and spoken updates described below, which pass through and are discarded, these details are kept in your profile until you change them.

We use them to calculate your daily calorie and macronutrient targets. Your weight, height, sex assigned at birth, and activity level are never sent to OpenAI. Only the calculated targets (calories and protein, fat, and carbohydrate grams) are sent out for AI meal-plan autofill, and never the measurements behind them. Separately, when you run the calculator we record your activity level and whether you are aiming to lose, maintain, or gain weight as a product-analytics event (see "Product analytics" below). Your weight, height, and sex assigned at birth are not included in that event.

In a shared household, your body measurements stay private to you. Other household members can see the calculated targets that shared meal planning depends on, but not the measurements used to work them out. This restriction is enforced in Calfo's code, not just hidden in the interface.

Approximate location

You can optionally enter your country, region or state, and city. This information is typed by you. Calfo does not access your device's GPS or location services and contains no location-tracking code. We use this approximate, self-reported location to understand which markets our users are in (analytics). It is optional and can be left blank or cleared at any time.

Fridge and pantry scans (Calfo Pro)

When you use the AI fridge-scanning feature, the photos you take of your fridge or pantry are sent to OpenAI (GPT-4o vision) to identify the food items in the images. The identified items are returned to the app and added to your inventory.

Receipt scanning

When you scan a grocery receipt, the image is processed on your device using Apple's Vision text recognition (OCR). Receipt images are never uploaded to Calfo's servers. The recognized text lines from the receipt are then sent through Calfo's server to OpenAI (GPT-4o mini), a third-party AI provider, to filter out non-product lines (store names, totals, tax, payment details) and turn abbreviations into readable item names. Calfo does not store or log your receipt text; it is used only to return the cleaned-up items for your review, and only the items you choose to save (including any prices shown on the receipt) are stored in your inventory.

Spoken pantry updates

You can update your pantry by speaking instead of typing. This happens in two steps, and each step involves a different company.

First, your speech is turned into text using Apple's speech recognition. Calfo does not require this transcription to happen on your device, which means the audio may be sent to Apple's servers to be transcribed. Apple handles that audio under its own privacy policy. The recording is never uploaded to Calfo's servers.

Second, the resulting text, together with a snapshot of your current pantry (each item's name, quantity, unit, and category), is sent through Calfo's server to OpenAI (GPT-4o mini) to work out which items you meant to add, change, or remove. OpenAI returns a list of proposed changes for you to apply. Calfo does not store or log the transcript or the pantry snapshot, and we do not use them to train AI models.

AI meal-plan autofill (Calfo Pro)

When you ask Calfo to fill in your week, what it needs to build that plan is sent through Calfo's server to OpenAI (GPT-4o mini): your daily nutrition targets (calories and protein, fat, and carbohydrate grams), your household size, the days and meals being planned, a snapshot of up to 150 pantry items (name, quantity, unit, and days until expiry), and up to 60 candidate recipes (title, meal type, nutrition, cook time, cuisine, and ingredient names). OpenAI returns a suggested plan for your review. Calfo does not store or log what is sent for planning, and we do not use it to train AI models. The body measurements behind your nutrition targets are not included.

Recipe and nutrition queries

When you search for recipes or request nutrition information, the relevant query (such as ingredients or a search term) is sent to Spoonacular to return recipe and nutrition results.

Barcode lookups

When you scan a product barcode, the barcode number is sent to the public OpenFoodFacts database to look up product details.

Household invitations

If you invite someone to your household, you can send the invitation using the native iOS Messages composer. This is user-initiated: you choose the recipient and send the message yourself, and the message content is handled by Apple Messages, not by Calfo.

Push notifications

If you opt in, we send optional push notifications for expiry reminders. You can turn these off at any time in your device settings.

Diagnostics and crash reports

To keep the app stable, we use Sentry to collect crash reports and error diagnostics (such as error messages and basic device information like model and OS version). These reports are associated with your account's user ID so we can trace issues, but we do not send your email, name, demographic information, or scan images to Sentry. This data is used only to diagnose and fix problems.

Product analytics

We use Mixpanel, a product-analytics provider, to understand how features are used so we can improve the app. These are in-app usage events (such as screens viewed and actions taken) associated with your account ID. We do not use this data for cross-app tracking or advertising.

2. How We Use Information

We use the information we collect to: provide and maintain the Service; build and update your inventory; identify items from fridge scans and receipts; apply the pantry updates you make by voice; return recipe, nutrition, and product results; personalize recipe suggestions based on your dietary preferences, allergens, and pantry contents; calculate your daily calorie and macronutrient targets from the optional body measurements you provide; generate suggested meal plans when you use AI autofill; enable household sharing; send expiry reminders you have opted into; understand our audience and the markets we serve using demographic and approximate-location information (analytics); diagnose crashes and errors; and secure, troubleshoot, and improve the Service.

3. Payments

If you subscribe to Calfo Pro, payment is processed by Apple through the App Store, and subscription status is managed by RevenueCat. Calfo never receives, sees, or stores your payment card details.

4. Sub-Processors and Sharing

We do not sell your personal information. We share data with the following service providers ("sub-processors") only as needed to operate the features described above:

These providers process data on our behalf or, in some cases, as independent controllers under their own privacy policies. We encourage you to review their policies for more detail on their practices.

5. Data Security

We take reasonable measures to protect your information. Data is encrypted in transit, and our backend uses row-level security to isolate each user's and each household's data so that you can only access data you are authorized to see. This includes keeping the optional body measurements described above private to the individual, even inside a shared household. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, your associated data is removed as described below. We may retain limited information where required for legal, security, or fraud-prevention purposes.

7. Your Rights and Choices

You can permanently delete your account and all associated data directly from within the app. You may also request to access, correct, or delete your personal information. Depending on where you live, you may have additional rights, described below. To exercise any of these rights, use the in-app controls or contact us at nelson@calfo.app.

If you are in the EEA or UK (GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Our legal bases for processing include performing our contract with you (providing the Service), your consent (for example, optional push notifications), and our legitimate interests in operating and securing the Service. You may withdraw consent at any time and have the right to lodge a complaint with a supervisory authority.

If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion of your personal information, and to correct inaccurate information. We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

8. International Transfers

Some of our sub-processors are located in the United States, so your information may be processed in the U.S. or other countries that may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for these transfers.

9. Children's Privacy

Calfo is not directed to children under 13 (or under 16 in regions where 16 is the minimum age for digital consent), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice in the app.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at nelson@calfo.app, or by mail to Acosta Tech LLC, c/o Republic Registered Agent LLC, 501 Union St, Ste 413, Nashville, TN 37219.

Read our Terms of Service ›