Privacy Policy

CalDex is a food-logging and nutrition app that turns a photo or a spoken description of your meal into a food entry, and turns healthy days into a collectible game. This policy explains what we collect, why, who we share it with, and the choices you have.

1. Who we are

CalDex (“CalDex”, “we”, “us”) is operated by Gruuw Pte Ltd, a company incorporated in Singapore. This policy applies to the CalDex mobile app and the website at caldex.app. For any privacy question, contact us at privacy@caldex.app.

2. Data we collect

We collect only what the app needs to work. This falls into a few buckets:

3. Health & fitness data

CalDex is a health and fitness app, so some of the data you provide (meals, weight, goals) and the Apple Health data you allow us to read (active energy and steps) is health-related. We treat this data with particular care:

• We read active energy and steps from Apple Health only after you grant permission. We never write anything to Apple Health.
• Health data obtained through Apple Health is never used for advertising or marketing, and is never sold or shared with data brokers, consistent with Apple’s requirements.
• You can revoke Health access at any time in the iOS Settings > Privacy & Security > Health screen. The app keeps working; burned-calorie offsets simply stop updating.

4. Photos, voice & AI processing

When you log a meal by photo or by voice, that input is sent to AI vision/language providers to identify the food and estimate portions. Calorie and macro values then come from a nutrition database, not the AI.

• Photos and voice input are processed transiently and are not stored on our servers after the entry is created.
• Image and text recognition is performed by Google (Gemini) as the primary provider and OpenAI as a fallback. Your input is sent to these providers solely to return a recognition result and is not used by us to build advertising profiles.
• Voice logging may use your device’s built-in speech recognition to convert speech to text; on Apple devices this is handled by Apple and may be processed per Apple’s policies.

5. How we use data

• Provide the core service: log meals, compute daily totals and goals, run the collectible game economy.
• Sync your data across devices and restore it when you sign in.
• Process subscriptions and unlock premium features.
• Send optional reminder notifications (you can disable these in your device settings).
• Diagnose crashes, prevent abuse and fraud, and improve features through aggregate usage analytics.
• Measure the effectiveness of our marketing (see §7).

We do not sell your personal information.

6. Who we share data with

We share data only with service providers (“subprocessors”) that help us run CalDex, under contracts that require them to protect it. We do not otherwise sell or rent your data.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of our users.

7. Advertising & attribution

We don’t show third-party ads inside CalDex. We do measure which marketing campaigns bring new users, using AppsFlyer together with Apple’s SKAdNetwork — a privacy-preserving framework that reports installs to us only at an aggregated, campaign level. CalDex does not use your device’s advertising identifier (IDFA), does not present an App Tracking Transparency prompt, and does not track you across other companies’ apps or websites. Health data is never used for marketing (see §3).

8. Data retention

We keep your account and logged data for as long as your account exists. Transient inputs (meal photos, voice) are not retained after processing. Crash and analytics data is retained on a rolling basis by our providers. When you delete your account, your personal data is deleted as described in §10.

9. Your rights & choices

Depending on where you live (for example under Singapore’s Personal Data Protection Act (PDPA), the EU/UK GDPR, or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, use the in-app deletion tool (§10) or email privacy@caldex.app. We will not discriminate against you for exercising your rights. You can also:

• Turn off Health access in iOS Settings.
• Turn off notifications in iOS Settings.

10. Deleting your data

You can delete your account and its associated data directly in the app (Settings > Delete Account). This permanently removes your account, logged meals, and game progress from our systems. Some records may be retained where required by law (for example, purchase records) or in backups for a limited period before they expire. You can also request deletion by emailing privacy@caldex.app.

11. Children

CalDex is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact privacy@caldex.app and we will delete it.

12. International transfers

We operate globally and our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

13. Security

We protect your data with encryption in transit, access controls, and a server-authoritative design in which sensitive records (such as your subscription entitlement and game economy) can only be written by our secured backend — not by a client device. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.

14. Changes to this policy

We may update this policy as CalDex evolves. We will change the “Last updated” date above and, for material changes, provide additional notice in the app. Continued use after an update means you accept the revised policy.

15. Contact

Questions or requests? Email privacy@caldex.app.