Privacy Policy
What we collect, and what we never do
The short version
- You can use Calebonne without an account. Your scan history and profile live on your device by default.
- We collect only what a feature needs: the barcodes you scan, the label photos you choose to submit, the goals and restrictions you enter, an optional account email, an optional ZIP code for store lookup, and basic usage analytics keyed by a random device id.
- We never sell personal data, never use precise location, never show ads and never share your data with manufacturers, retailers or advertisers.
- Delete your account and its data at any time in the app at Profile → Account settings → Your data → Delete account. Get a copy of your data from Profile → Account settings → Your data → Export my data.
What we collect and why
| Data | Why | Where it goes | Kept for |
|---|---|---|---|
| Camera | To read barcodes and to take the label photos you choose to submit. Nothing is recorded in the background; frames that are not a barcode or a photo you take are never stored or sent. | On your device | Not stored |
| Barcodes you scan | To look up and score the product. When a product is not in our catalogue, the barcode (and nothing else about you) is forwarded to the Open Food Facts database to fetch its public record. | Our servers; Open Food Facts on a cache miss | History on your device until you clear it; server request logs 30 days |
| Label photos you submit | To extract the nutrition panel and ingredient list when a product is unknown or incomplete. | Our servers and our AI processing provider, for extraction only | Deleted within 24 hours of extraction. If you opt in to "help improve product data", the extracted text (not the photo) is kept without your identity. |
| Random device id | To keep your free-tier limits, preferences and analytics consistent on one device without an account. It is generated by the app and is not an advertising identifier. | Our servers | Until you delete the app or your account |
| Account email and password (optional) | To sign in, sync your history and profile between devices, and attach a Calebonne Pro subscription to you. Passwords are stored only as salted hashes. | Our servers | Until you delete your account |
| Goals, diets, allergens and avoid-lists | To compute Personal Fit. Treated as sensitive: never used for advertising, never shared. | On your device; our servers only with an account and sync on | Until you remove them or delete your account |
| ZIP code (optional) | To find nearby stores when you ask. We never use precise device location. | Our servers and the store-lookup source, for that request only | Not stored beyond the request logs (30 days) |
| Questions you ask Calebonne | To answer them with the product's label data. | Our servers and our AI provider, tied to your device or account id | 90 days |
| Corrections you submit | To fix product data through a moderation queue. | Our servers | Kept as product-data history; your identifier is removed after review |
| Purchases | To unlock Calebonne Pro. Payments are taken by Apple (App Store), Google (Google Play) or, on the web, by RevenueCat web billing with Stripe. We never see or store your card number. | Apple, Google, RevenueCat and Stripe under their own privacy policies; we store only your subscription status and the store's transaction identifier | Life of the account, plus billing records we must keep by law |
| Server logs | To keep the service running and to investigate abuse and errors. Logs contain the IP address, request path, timestamp and device or account id. | Our hosting provider | 30 days |
| Analytics events | To learn which screens are used and whether scans resolve (for example "scan_resolved", "paywall_viewed"). Keyed by the random device id; no advertising identifiers, no cross-app tracking. | Our servers | 13 months |
| Launch-news email (website) | To send launch updates if you sign up on calebonne.com. Collected through Netlify Forms. | Our website host (Netlify) | Until you unsubscribe or ask us to remove it |
| Username, display name and profile photo (optional, Friends & chats) | So friends can find you by username and recognise you in chats. Photos are resized to a small square and served only inside the app. | Our servers | Until you remove them or delete the account |
| Messages and product cards you send (Friends & chats) | To deliver them to the people in that chat. Never used for advertising or to train models. Blocking hides a person's messages; reports send the reported item to us for review. | Our servers | Until the chat is deleted by its members or the account is deleted |
| Push notification token (optional) | To notify you of new messages and friend requests when you allow notifications. Each kind can be switched off in Account settings. | Our servers and Apple's push service | Until you sign out or turn notifications off |
| Transactional email | Account confirmation, password resets, email-change confirmations and Pro receipts are sent through our email provider (Resend). No marketing email without a separate opt-in. | Our email provider | Provider logs, 30 days |
We do not collect precise location, contacts, health records, or anything from your camera other than the barcode frames and photos you deliberately capture.
AI processing
Label extraction, the wording of explanations and Ask Calebonne answers are generated by a third-party large-language-model provider under an agreement that prohibits training on your data. We send only the label photo or product context and your question, never your name, email or history. Scores themselves are never produced by a model; they come from the published, versioned rules.
Sharing
We share data only with the service providers needed to run Calebonne (hosting and database providers, our AI processing provider, Open Food Facts for barcode lookups, Apple, Google, RevenueCat and Stripe for payments, Netlify for the website) and with authorities when the law requires it. We do not sell personal data and we do not share it with manufacturers, retailers or advertisers.
Your rights and controls
- Delete your account and all server data attached to it in the app: Profile → Account settings → Your data → Delete account. Deletion completes within 30 days; billing records are kept as long as the law requires.
- Export your data: Profile → Account settings → Your data → Export my data downloads a machine-readable copy of everything attached to your account, instantly.
- Clear history and turn personalization off at any time from Profile.
- Withdraw the "help improve product data" consent at any time from Profile.
- Depending on where you live (for example California, the EU or the UK) you may also have rights to access, correct, port or restrict the processing of your data and to object to certain processing. Write to support@calebonne.com; we answer within 30 days and never discriminate for exercising a right.
Security
Traffic is encrypted in transit; stored data is encrypted at rest by our managed providers. Access to user data is limited to what is needed to run and support the service and is logged. Report security issues to support@calebonne.com.
Children
Calebonne is not for children under 13 and we do not knowingly collect their data. If you believe a child under 13 has created an account, email support@calebonne.com and we will delete it.
Health information
Calebonne provides general product information, not medical advice. The goals, diets and allergens you enter are used only to compute Personal Fit on your own results and are never shared or sold.
Website
calebonne.com sets no cookies of its own and runs no advertising or cross-site tracking. Your day/night preference is kept in your browser's local storage. Page fonts are loaded from Google Fonts, which receives your IP address when the page loads. The launch-news form is handled by Netlify Forms; every email we send has a one-tap unsubscribe link.
International transfers and changes
Our servers and providers are in the United States. We post changes to this policy here and, for material changes, tell you in the app before they take effect.