CalClaw privacy policy
Effective date: October 25, 2026
Last updated: October 25, 2026
CalClaw is an iPhone app that logs what you eat and estimates calories and nutrients. It is in an invite-only test for adults 18 and over in the United States.
Our Consumer Health Data Privacy Policy is at https://calclaw.app/health-data-privacy.
Who we are
In this policy, "we" means CalClaw. Email support@calclaw.app with questions, for help with your account, or to make a privacy request.
What CalClaw collects
- Account. You sign in through Clerk, our sign-in provider, with Apple, Google, or an email address. Clerk keeps your email address and sign-in details.
- Meal messages. CalClaw stores the text you type or dictate in the chat, and the AI's replies.
- Photos. You take meal and nutrition label photos with the camera or choose them from your photo library. CalClaw receives only the photos you choose.
- Dictation. Voice dictation runs on your iPhone, and the audio never leaves it.
- Nutrition log. CalClaw stores the foods you log, by chat or by hand, with their calories, nutrients, portions, sources, and corrections. If the message you log a food from contains a web link, CalClaw saves the link with that food. Saving the link does not open the page. It also stores your daily totals, goals, calorie and nutrient targets, and your time zone.
- Profile. CalClaw uses your age, height, weight, and sex to estimate your targets. You can type them, or import them from Apple Health.
- Saved memory. After you allow AI processing, the AI saves short notes to remember your food habits. It also writes a short summary of each day.
- AI permission choice. CalClaw records whether you allowed AI processing, which version of the disclosure you saw, and when you allowed or withdrew it.
- Device and network data. Our server and our database receive your IP address and request details, such as the time and headers, with each request. Our server's logs record these details.
- Usage information. We collect information about how you use CalClaw, such as the outcome of your requests, how long they take, and how many foods you log. It does not include your messages, the AI's replies, or photos.
We treat your profile, nutrition log, targets, meal messages, photos, saved memory, and daily summaries as health data.
This data comes from you, from Apple Health when you tap Import, and from CalClaw itself, which calculates your targets and uses AI to write your saved memory and daily summaries.
No other company collects information about your activity across other apps or websites through CalClaw. Because CalClaw does not collect your activity across other websites or apps, a Do Not Track signal does not change what we collect.
Apple Health data
CalClaw reads Apple Health only when you tap Import during setup. It asks for read access to four types: height, weight (body mass), date of birth, and biological sex.
CalClaw stores your age in years, height, weight, and a "female reference" or "male reference" profile used for the estimate. It does not store your date of birth or raw Health samples.
Your Apple Health values are not sent to AI or search companies. The AI receives only the calorie and nutrient targets calculated from them.
CalClaw never uses your Apple Health data for marketing or advertising, and never shares it with anyone for marketing or advertising.
Location
Location is optional. If you allow it, CalClaw uses your location only to find food places near you when you ask. It does not track where you go.
Your iPhone sends your location to Apple Maps to find nearby places, under Apple's privacy policy. Your exact location never reaches CalClaw. Our server receives only the nearby places' names, types, websites and rounded distances, and your neighborhood, city and state. It sends them to our AI and search providers to answer you and does not store them. If Share my chats is on, the places list and the replies about it are included in the chats you share with us, like any other chat. Unless Share my chats is on, the places list never reaches our analytics provider.
You can turn location off at any time in the iPhone Settings app under CalClaw > Location.
How we use your data
We use your data to:
- log your foods and estimate calories and nutrients from your messages and photos
- calculate and show your daily targets from your profile
- remember your food habits, so you repeat yourself less
- run your account, sign you in, and export or delete your data
- keep CalClaw working, and find and fix errors
- answer your support requests
We read your chats, photos, or log only when you ask us for help with a problem, or when you turn on chat sharing as described under "Sharing chats to improve CalClaw".
We do not sell your data, and we do not use it for advertising. We do not collect, use, or sell your personal data to train large language models or other AI models.
Who receives your data
We share data only with the companies and kinds of providers described in this policy, and only so they can run part of CalClaw for us. Each may use its own providers, such as cloud hosting.
These companies receive data whether or not you allow AI processing:
- Clerk, Inc. signs you in. It receives your email address, sign-in details, IP address, device details, and a sample of events about which sign-in screens opened.
- If you sign in with Apple or Google, Apple Inc. or Google LLC receives your sign-in request.
- Convex, Inc. hosts our database. It stores your account ID, profile, Apple Health values, goals, nutrition log, AI permission choice, chat messages, AI replies, photos, saved memory, and daily summaries.
- Hostinger International Ltd hosts our server. After you allow AI processing, the server receives your meal messages and photos. It stores your photos and its logs.
- Hugging Face, Inc. provides the speech model that runs dictation. Your iPhone downloads it from Hugging Face, which receives your IP address and device details, but no audio or text.
We share usage information with our analytics provider, which helps us understand how CalClaw is used and find errors. The app sends usage information and crash reports only after you turn on Share usage analytics, and it is off until you do. With them, the analytics provider receives your device type, app version, and IP address. Our server also sends the outcome and timing of each AI request, under a scrambled ID instead of your name or email. It does this only while Share usage analytics is on. The choice is saved on your account, so it applies on every device you sign in on.
AI processing
With your permission, CalClaw sends your messages, photos, food log, targets and saved memory to AI models from OpenAI to log your food. Photos and the text you send with them also go to Google's Gemini. Food lookups send search terms to Parallel and Open Food Facts.
- OpenRouter, Inc. currently carries every AI request to OpenAI or Google.
- OpenAI's models understand your meal, estimate nutrition, write the reply, and decide which notes to save.
- Google's Gemini, through Google's Vertex AI service, reads food and nutrition labels in photos.
- Parallel Web Systems, Inc. finds nutrition facts on the web. The AI writes the search queries from your messages, so a query can contain your own words or your area. Parallel's terms allow it to use the search queries it receives to train and improve its own models.
- Open Food Facts, a French non-profit association, looks up packaged foods.
CalClaw sends nothing to these companies until you allow AI processing.
To withdraw your permission, open the You tab, tap Permission and data sharing under AI processing, and tap Withdraw permission. Withdrawing stops new AI requests. It does not delete stored data or recall data already sent.
Sharing chats to improve CalClaw
Chat sharing is off unless you turn it on. To turn it on or off, open the You tab, tap Permission and data sharing, and use Share my chats.
When it is on, our server sends the full text of each chat to our analytics provider. That includes your messages, the AI's replies, and what the AI read to answer, such as your saved memory, food log, and targets. Photos are not sent, but what the AI read from them is. We do not attach your name or email, but anything you type is sent as written.
The person who runs CalClaw reads these chats to find and fix mistakes in it, sometimes with AI tools from Anthropic, PBC or OpenAI that receive the chats being reviewed. No one else at CalClaw reads them.
Our analytics provider deletes each chat's full text within about two months of when it was sent. When you turn sharing off, the server stops sending new chats right away, and a reply already in progress may finish. Turning it off does not delete chats already sent. Our analytics provider deletes them on the same schedule.
How long we keep data
CalClaw keeps your data for these periods:
| Data | How long CalClaw keeps it |
|---|---|
| Chat messages, AI replies, and daily summaries | 30 days, then deleted |
| Photos in our database | 30 days after you last send the photo, then deleted |
| Photos on our server | Until you delete your account |
| Web links saved with a logged food | Until you delete your account, even if you delete the food |
| Nutrition log, profile, goals, targets, saved memory notes, and AI permission choice | Until you delete your account |
| Our server's application logs | Up to about 30 MB for each part of the server. New entries replace the oldest, so how long an entry stays depends on how busy the server is. |
| Our host's system log, which records the IP address and details of a request that fails | About five weeks |
| Usage information | As long as we need it for the purposes in this policy |
The companies that receive your data keep it for their own periods:
- OpenAI may keep AI requests, including photos, for up to 30 days to monitor for abuse, or longer if the law requires it.
- Google may keep a request to Vertex AI that its abuse checks flag for up to 90 days, and authorized Google staff may review it.
- OpenRouter's terms say it deletes each request and reply soon after it answers, unless prompt logging is turned on for the account. It keeps details about each request, such as its size and timing.
- Parallel's terms do not say how long it keeps search queries.
- Open Food Facts keeps logs of lookups, which carry our server's address and the product looked up, for 3 years.
- Our analytics provider deletes the full text of each shared chat within about two months of when it was sent.
When you delete your account, we delete your photos from our server, your data from our database, and your Clerk sign-in account. We keep a one-way scrambled form of your sign-in ID and the time you asked for deletion, which stops an old sign-in from restoring your account. Deletion does not recall data already sent to AI and search companies, which keep it for the periods above, or chats already shared with our analytics provider. You can ask us to delete your usage information by emailing support@calclaw.app. In some cases we may not be able to delete all of it. Our logs keep some of your data for the periods above. Backups that our hosting providers keep may hold some of your data for a time after you delete your account.
Your rights and choices
You can ask us to confirm whether we hold data about you, give you a copy, list the companies that received it, correct it, delete it, or stop sending it to AI and search companies. Email support@calclaw.app for any of these. You can also use the app:
- To get a copy, open the You tab and tap Export CalClaw Data. The export does not include photos, so email us for those.
- To correct a logged food, tap Edit next to it on the Today tab. To correct your profile, open the You tab and tap Edit.
- To delete your account, open the You tab and tap Delete my account.
- To stop AI processing, withdraw your permission as described under "AI processing".
- To stop sharing chats, turn off Share my chats as described under "Sharing chats to improve CalClaw".
If we decline a request, you can appeal by emailing support@calclaw.app. Nevada residents can send requests not to sell their data to the same address.
Children
We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we delete the account and its data.
Changes to this policy
When we change this policy, we post the new version at this address and update the dates at the top. Before we use your data for a new purpose or share it with a new kind of company, we ask you in the app.