Privacy policy

Overview

This Privacy Policy describes how the Operator of your NutraTrak / Calzone deployment collects, uses, and shares information when you use the Service.

This policy applies to the deployment you are using. Self-hosted operators are responsible for their own compliance programs and subprocessors.

Information we collect

Account information: email address, display name, authentication credentials (stored as a password hash), and profile or goal settings you provide.

Usage and diary data: foods logged, hydration entries, custom foods, analytics derived from your logs, gamification progress, and optional AI meal suggestions or ratings.

Payment information: subscription tier and Stripe customer identifiers. Card and bank details are collected and processed by Stripe, not stored on our servers.

Referral program data: referral codes, partner commission accruals, and Stripe Connect account identifiers for partners who opt into payouts.

Technical data: device/browser type, IP address, session cookies required for authentication, and optional push notification tokens if you enable alerts.

How we use information

We use information to provide and improve the Service, authenticate users, process subscriptions and one-time purchases, calculate referral commissions, send optional notifications, prevent abuse, and comply with legal obligations.

AI features, when enabled, send meal descriptions or images to configured AI providers to generate estimates. Do not submit sensitive health information you do not want processed by those providers.

Sharing and subprocessors

We share information with service providers that help operate the Service, including:

Stripe (payments, subscriptions, Connect partner payouts), hosting and database providers, optional email or push delivery services, and optional AI providers configured by the Operator.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with notice where required.

Retention and security

We retain account and diary data while your account is active and as needed for backups, billing records, referral commission audits, and legal compliance.

We use reasonable administrative, technical, and organizational measures to protect data. No method of transmission or storage is completely secure.

Your choices and rights

You may update profile settings in the app, manage marketing notifications where offered, and cancel paid subscriptions through the billing portal.

Depending on your location, you may have rights to access, correct, delete, or export personal data. Contact the Operator to exercise those rights.

Browser cookies essential to sign-in cannot be disabled while using authenticated features.

Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

International users

If you access the Service from outside the United States, your information may be processed in the United States or where our subprocessors operate.

Changes and contact

We may update this Privacy Policy from time to time. The “Last updated” date below reflects the latest revision.

Privacy questions or requests: support@example.com.