Privacy Policy

We collect only the information needed to run the Service:

• Account details — your email address and a password. Your password is stored only as a one-way cryptographic hash (bcrypt); we never store or have access to your plain-text password.
• Profile and goals — the body metrics you choose to enter (such as weight, height, age, sex, activity level, and goal) and the calorie/macro targets calculated from them.
• Food and meal data — photos you take of food, a compressed copy of each photo that we store, food names and descriptions, estimated nutrition values, and the dates and times you log meals.
• Generated content — your saved food catalogue (including AI-generated facts, recipes, and category tags) and the AI nutrition advice generated for your account.
• Technical data — limited information needed for security and reliability, such as your IP address and standard server logs, used for authentication, rate limiting, and bot protection.

• To provide the Service — logging meals, calculating goals, and showing your history.
• To analyze the food photos you submit and generate nutrition estimates and personalized advice.
• To send you essential account emails (verification, password reset, and welcome).
• To secure your account and protect the Service from abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

We rely on a small number of trusted service providers to operate the Service. These providers process data only as needed to provide their service to us:

• Anthropic (Claude) — the food photos and meal information you submit are sent to Anthropic’s API to estimate nutrition and generate advice.
• Resend — receives your email address to deliver account emails.
• Vercel — hosts the application and provides bot-protection infrastructure.
• Turso / libSQL — hosts the database where your account and meal data are stored.

Your data may be processed or stored in countries other than your own. We encourage you to review each provider’s own privacy practices.

The Service lets you create a public link to a recipe in your food catalogue so you can share it (for example, by social media, message, or email). Sharing is entirely optional — nothing is shared unless you choose to. When you do, anyone who has the link can open a public web page, with no account required, that shows the food photo you took, the food name and description, the AI-generated fun facts and recipe, the food/cuisine tag, and any restaurant name, address and star rating you have added to that entry. Restaurant details are optional: if you do not enter them, nothing about a restaurant appears on the page.

Where you have added a restaurant, the page also shows a link to Google Maps for it. That link is normally built from the restaurant name and address already shown on the page, so it reveals nothing further; if you chose to paste your own Google Maps link for the place, yours is used instead. Opening the link is the reader’s choice, and following it takes them to Google, whose own privacy policy then applies. We do not send Google the address of the shared page itself.

These public pages are search-indexable, which means a shared recipe, its photo and any restaurant details on it may also appear in search engines such as Google — not only to the people you send the link to. The page never includes your identity, your email, your calorie or macro numbers, the dates you logged the meal, or any of your other catalogue entries.

Sharing is revocable: you can stop sharing a recipe at any time from its detail screen, after which the public link stops working and the page is removed from search results over time.

We keep your information for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Delete account. Deletion is immediate and irreversible: it removes your profile, meals, food catalogue, saved meal templates, weight and water entries, advice, and account record.

Meal photos are kept for 28 days. After that we remove the photo attached to an older meal, while keeping the meal itself — its food name, nutrition values, and the date you logged it all stay in your history. Photos saved to your food catalogue are not affected and are kept for as long as your account is active.

• Passwords are stored only as salted bcrypt hashes.
• All traffic is served over HTTPS with strict transport security.
• Sessions use secure, same-site cookies, and requests are protected against CSRF.
• Email verification helps confirm account ownership.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. You can update your profile and delete your account directly in the app. For any other request, contact us at info@keycornereducation.com.

The Service is not intended for children under 18, and we do not knowingly collect personal information from them.

KCalorie Tracker is a personal wellness tool. Nutrition values are AI-generated estimates and may be inaccurate, and the advice provided is for general informational purposes only. It is not medical, dietary, or professional advice. Always consult a qualified health professional before making decisions about your diet or health.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may also be communicated by email.

If you have questions about this policy or your data, contact us at info@keycornereducation.com. This policy is governed by the laws of Australia.