Policies
Last updated June 2026
What We Collect
Account information: your email address, display name, and a hashed (irreversible) password. Body metrics: height, weight, age, date of birth, and gender, which you provide during onboarding to personalise your calorie and macro targets. These are stored on our servers. Nutrition logs: food items, portion sizes, and caloric values you log in the app. Workout data: exercises, sets, reps, weights, session duration, and active calories burned per session. Workout session summaries are stored on our servers to enable history and progress tracking. Health store integration (optional): with your permission, we read step counts, active calorie data, and sleep duration from Apple Health or Google Health Connect. Step and calorie data are used to calculate your daily net calorie deficit on the dashboard, and sleep duration is used to display your average nightly sleep in the weekly report. This data is read-only, used locally for display, and not shared with third parties or used for advertising. Raw health store streams are not uploaded to our servers.
How We Use Your Data
To calculate your personalised daily calorie budget, macro targets, and BMR based on your body metrics and activity level. To store and display your meal and workout history so you can track progress over time. To power the AI food scanner: when you scan a barcode or food photo, that image or barcode data is transmitted to Google Gemini (Google LLC) to return nutritional estimates. No personally identifiable information — such as your name or email — is attached to these requests. To send optional in-app reminders if you have enabled them in Settings.
Third-Party Services
Google Gemini (AI food analysis): food images and barcodes are forwarded to Google's Gemini API solely to return nutritional estimates. We do not share personally identifiable information with Google for this purpose. Google's Privacy Policy applies to their processing of this data. Apple App Store / Google Play (payments): subscription billing is handled entirely by Apple or Google. We receive only a subscription status indicator — no payment card data is stored on our servers.
Data Retention
Your account data is retained for as long as your account remains active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required to retain it for legal or compliance purposes.
Your Rights
Access: you may request a copy of the personal data we hold about you at any time. Correction: you can update your profile details directly in the Settings screen. Deletion: contact us to request complete deletion of your account and all associated data. European users: if you are in the European Economic Area, you have additional rights under the GDPR, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.
Security
Passwords are stored as irreversible hashed values and are never readable by us. All data is transmitted over encrypted HTTPS connections. Authentication tokens are stored in your device's secure storage (iOS Keychain or Android Keystore). No system is completely secure. In the event of a data breach affecting your personal data, we will notify affected users as required by applicable law.
Children's Privacy
This app is not directed at children under 13. We do not knowingly collect personal data from anyone under 13 years of age. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
Contact & Privacy Requests
For any privacy questions, data access requests, or deletion requests, please contact us at: support@inandoutcalories.com We will respond to all requests within 30 days.