Data Controller: MaxCalo is operated by Thao Ngo, located in Vietnam ("we", "us", or "our").
MaxCalo ("MaxCalo") is a nutrition and calorie-tracking app for iPhone. This Privacy Policy explains how we collect, use, store, and share information when you use the MaxCalo mobile application and related features (collectively, the "Service").
By using MaxCalo, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
When you use MaxCalo, you may enter or generate profile and goal data, nutrition logs, meal photos, progress photos, weight entries, saved meals, and app preferences. We do not require an email or password. The app creates an anonymous identifier with Google Firebase so we can operate AI scanning and diagnostics. Most data is stored on your device.
When you use AI meal scanning, a compressed meal photo and your selected fitness goal (lose weight, maintain, or gain weight) are sent to our servers and then to OpenAI (see Section 3). We do not send progress photos, weight logs, body measurements, or HealthKit data for AI analysis. Progress photos stay on your device and, if enabled, in your private iCloud account.
We automatically collect diagnostic and usage information through Google Firebase: an anonymous account identifier, crash reports (Crashlytics), and analytics events (screens, scans, purchases, and similar in-app actions). We attach non-identifying properties such as fitness goal, unit system, and premium or free-scan status. We also collect in-app usage needed for features such as scan limits and streaks, and summary data shared with widgets or Live Activities on your device. Firebase and RevenueCat may receive a device identifier as part of their SDKs. We do not use third-party advertising SDKs or sell your personal information.
With your permission, MaxCalo may access Apple Health (step count, active energy burned, and body weight you choose to write), iCloud for optional sync, camera and photo library for meal and progress photos, and notifications for optional meal reminders. HealthKit data is not sent to OpenAI.
Payments are processed by Apple. We use RevenueCat to manage subscriptions and receive transaction status and product identifiers. We do not receive your full payment card details.
We use your information to provide tracking, AI meal analysis, optional sync and HealthKit features, subscription management, reminders, widgets, diagnostics, analytics, crash reporting, support, and legal compliance.
When you use AI meal scanning, MaxCalo sends a compressed meal photo and your fitness goal to our Google Cloud Function, which forwards them to OpenAI for nutrition analysis. AI output is an estimate and may be inaccurate. See OpenAI policies.
Most app data is stored on your device and, if enabled, in your private iCloud account. While you use the Service, an anonymous Firebase Auth account exists on the device so we can operate AI scanning and diagnostics. Analytics events and crash reports are stored by Google for as long as needed to operate, secure, and improve the Service. Support emails are kept only as long as needed to resolve your request. To remove app data, including the anonymous Firebase Auth account on your device, see Section 6.
We do not sell personal information. We share data only with service providers such as Google (Firebase), OpenAI, and RevenueCat, with Apple when you use its services, when required by law, or to protect rights and safety. OpenAI receives the meal photo and fitness goal only when you use AI meal scanning—not progress photos, HealthKit data, weight logs, or other profile fields.
| Recipient | Purpose |
|---|---|
| Google (Firebase) | Anonymous authentication, AI scan proxy (Cloud Functions), analytics, and crash reporting |
| OpenAI | AI meal analysis (meal photo and fitness goal you scan with AI) |
| RevenueCat | Subscription management |
| Apple | App Store, iCloud, HealthKit, and system services |
In MaxCalo, open Settings and tap Delete Account. This permanently removes profile and goals, nutrition logs, saved meals, weight entries, meal and progress photos, app preferences, streaks, badges, and widget or Live Activity data from your device. It also deletes the anonymous Firebase Auth account on this device. This cannot be undone. If iCloud sync is enabled, also follow Section 6.2. Historical analytics and crash records held by Google may remain. Email us if you want additional deletion of that server-side data.
If you use iCloud sync: (1) disable iCloud sync in MaxCalo Settings, then use Delete Account on each device; (2) remove MaxCalo data under Settings → [your name] → iCloud → Manage Account Storage → MaxCalo; or (3) delete on each device — uninstalling alone may not remove iCloud copies. Data in Apple Health is not removed by Delete Account; delete entries in the Health app. Cancel subscriptions under Settings → Apple ID → Subscriptions.
You can manage permissions in iOS Settings, toggle iCloud and HealthKit in the app, delete your data as described in Section 6, manage subscriptions through Apple, and contact us with privacy questions.
If you are in the European Economic Area, UK, or Switzerland, you have rights under applicable data protection law (including the GDPR), including the right to:
To exercise these rights, email ivyvyit@gmail.com. We will respond within the time required by applicable law (generally one month under the GDPR). For erasure, follow Section 6: Delete Account removes on-device data and the anonymous Firebase Auth account on the device. Historical analytics and crash records on Google may remain; email us if you want additional server-side deletion.
MaxCalo is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Thao Ngo is based in Vietnam. Your information may be processed in Vietnam and in countries where our service providers operate.
We use reasonable measures to protect your information, but no system is completely secure.
We may update this policy and will revise the date above when we do. Continued use after an update means you accept the revised policy.
Thao Ngo
Vietnam
Email: ivyvyit@gmail.com