PRIVACY POLICY FOR "CAL SHOT"

Last Updated: September 2026

1. Introduction

Welcome to Cal Shot ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a transparent, secure experience while using our mobile application (the "App"). This Privacy Policy outlines how we collect, use, process, and protect your information.

2. Information We Collect

To provide accurate calorie tracking and AI meal analysis, we collect the following types of data:

• a. Personal & Account Information: When signing in with Google, we collect your name, email address, user ID, and profile photo to authenticate and manage your account.
• b. Camera & Meal Photos: Access to your camera and photo library is required to photograph or upload food meals. These images are processed in real time by AI for nutritional estimation.
• c. Health, Fitness & Nutrition Data: We store your logged meals, calorie count, macronutrients (protein, carbs, fats), daily water intake, step activity, weight logs, and fitness goals to render your analytics and tracking charts.
• d. Device & Diagnostic Data: Anonymous diagnostic data, device specifications, and crash logs may be collected through Firebase Crashlytics to improve application stability.

3. How We Use Your Information

We use your data strictly to:

• Analyze food photographs and calculate estimated calories and macronutrients using AI models.
• Maintain your daily nutritional history and synchronize your logs across your devices.
• Authenticate your identity securely via Firebase Authentication.
• Provide customer support and resolve technical issues.

4. AI Processing & Third-Party Services

We integrate trusted industry-standard service providers:

• Google Gemini AI: Food photos are sent securely via encrypted API connections to Google's Gemini models for visual nutrition analysis. Images are processed ephemerally and are not retained, sold, or used to train external public models without consent.
• Google Firebase (Authentication, Cloud Firestore, Crashlytics): Used for secure cloud sync, account verification, and crash reporting.
• Google Play Billing / RevenueCat: Manages subscription and purchase entitlements securely without storing your financial payment details on our servers.

5. Data Security & Storage

We implement robust safeguards to protect your data, including TLS encryption in transit, strict Cloud Firestore Security Rules, App Check verification, and AES-256 local data encryption.

6. User Rights & Data Deletion

You maintain full ownership of your personal data. You can permanently delete your account along with all your meal logs, health history, and profile data at any time directly in the App under Profile > Account > Delete Account, or by emailing us at sanishfx@gmail.com.

7. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" revision date.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please reach out to us at: sanishfx@gmail.com