Privacy Policy
Effective Date: March 11, 2026
Developer: Gaurav Dhungana
Contact: my first name+inthevalley (remove the `+`) at gmail
1. Introduction
Welcome to CalCrunch. This Privacy Policy explains how Gaurav Dhungana ("I", "me", or "my") collects, uses, stores, and protects your personal information when you use the CalCrunch application (the "App"). By using the App, you agree to the practices described in this policy.
2. Information I Collect
2.1 Information You Provide
- Account information: email address and password (or OAuth credentials via Google or GitHub) used to create and access your account.
- Food log data: the natural language messages you type, the food items logged, quantities, units, and timestamps you record.
- Food photos: images you optionally attach to food log entries.
- Communications: any messages you send to me for support or feedback.
2.2 Information Collected Automatically
- Usage data: features you use, pages you visit, and actions you take within the App.
- Device and technical data: browser type, operating system, IP address, and session identifiers.
- Authentication tokens: session tokens managed by Supabase to keep you logged in.
2.3 Information from Third Parties
- If you sign in with Google or GitHub, I receive your email address and basic profile information from those providers in accordance with your permissions.
- Nutritional data: when a food is not in the local catalog, your message may be sent to OpenAI's API for nutrient estimation. OpenAI processes this data subject to their own privacy policy.
3. How I Use Your Information
I use the information collected for the following purposes:
- To provide, operate, and maintain the App and its features.
- To log and display your food entries, nutritional totals, and history.
- To improve the local food catalog using AI-estimated nutritional data.
- To authenticate your account and maintain session security.
- To respond to your support requests or feedback.
- To detect and prevent fraud, abuse, or security incidents.
- To comply with applicable legal obligations.
4. Data Storage and Security
Your data is stored using Supabase, a third-party database and authentication platform. All data is protected by row-level security (RLS) policies, meaning each user can only access their own data. I implement reasonable technical and organisational measures to protect your information against unauthorised access, loss, or disclosure.
Food photos are stored in a private Supabase Storage bucket. Photos are accessible only via time-limited signed URLs generated server-side after your identity is verified.
No security system is impenetrable. While I take your security seriously, I cannot guarantee absolute security of your data.
5. Third-Party Services
The App uses the following third-party services that may process your data:
- Supabase (supabase.com): database, authentication, and file storage.
- OpenAI (openai.com): AI-based food and nutrient estimation. Your food log messages may be sent to OpenAI when local resolution is insufficient. OpenAI does not use this data to train its models under the current API terms.
- Google / GitHub: OAuth authentication providers if you choose to sign in with them.
I do not sell your personal data to any third party. I do not use advertising networks or share your data with data brokers.
6. Data Retention
I retain your account data and food log entries for as long as your account is active. If you delete your account, your data will be permanently deleted from the primary database within 30 days, subject to any backup retention period of up to 90 days.
You may request deletion of your data at any time by contacting me at the email address below.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: the right to request a copy of the data I hold about you.
- Correction: the right to request correction of inaccurate data.
- Deletion: the right to request deletion of your data.
- Portability: the right to receive your data in a machine-readable format.
- Objection: the right to object to certain types of processing.
To exercise any of these rights, please contact me at my first name+inthevalley (remove the `+`) at gmail. I will respond within 30 days.
8. Children's Privacy
CalCrunch is not directed at children under the age of 13. I do not knowingly collect personal information from children under 13. If you believe a child has provided me with personal data, please contact me and I will delete it promptly.
9. International Users
I am based in Nepal. If you are accessing the App from outside Nepal, including from the European Union, United States, or elsewhere, your information may be transferred to and processed in countries with different data protection laws. By using the App, you consent to this transfer. For EU users, I rely on your explicit consent as the legal basis for processing.
10. Changes to This Policy
I may update this Privacy Policy from time to time. When I do, I will revise the Effective Date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the revised policy. I encourage you to review this policy periodically.
11. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact: