Privacy Policy

1. Overview

Caloria ("we," "our," or "us") provides AI-powered nutrition tracking services through WhatsApp. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using Caloria, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our services.

2. Information We Collect

2.1 Health and Nutrition Data

• Food Information: Photos, descriptions, and voice recordings of meals you share
• Personal Health Metrics: Weight, height, age, activity level, and health goals (when provided)
• Dietary Preferences: Food allergies, restrictions, and preferences
• Usage Patterns: Meal timing, frequency of logging, and interaction history

2.2 Communication Data

• WhatsApp Messages: Text, voice, and image messages sent to our bot
• Contact Information: WhatsApp phone number and profile information
• Message Metadata: Timestamps and message types for service improvement

2.3 Technical Data

• Device Information: Operating system, device type, and app version
• Usage Analytics: Feature usage, session duration, and error logs
• Location Data: Only if explicitly provided for local nutrition recommendations

3. How We Use Your Information

3.1 Primary Services

• Analyze food photos and descriptions to provide nutritional information
• Calculate personalized daily calorie and macro targets
• Track your progress toward health and nutrition goals
• Provide personalized recommendations and insights
• Generate daily and weekly nutrition summaries

3.2 Service Improvement

• Improve AI accuracy for food recognition and analysis
• Enhance user experience and interface design
• Develop new features based on user needs
• Conduct research for better nutrition recommendations

3.3 Communication

• Send you nutrition insights and progress updates
• Respond to your questions and support requests
• Notify you of important service updates
• Provide educational content about nutrition and health

4. Information Sharing

4.1 Limited Sharing Scenarios

We may share your information only in these specific circumstances:

• Service Providers: Trusted third-party services that help us operate (cloud hosting, AI processing) under strict data protection agreements
• Legal Requirements: When required by law, court order, or government request
• Safety Concerns: To protect the safety of users or prevent harm
• Business Transfers: In the event of a merger or acquisition (with continued privacy protection)
• With Your Consent: When you explicitly authorize sharing

4.2 Aggregated Data

We may share anonymized, aggregated data that cannot identify you for research and public health purposes, such as nutrition trends and dietary patterns.

5. Data Security

5.1 Technical Safeguards

• Encryption: All data transmitted and stored is encrypted using industry-standard protocols
• Access Controls: Strict role-based access controls limit who can view your data
• Secure Infrastructure: Our servers are hosted in secure, HIPAA-compliant data centers
• Regular Audits: Periodic security assessments and vulnerability testing
• Data Backup: Secure, encrypted backups with disaster recovery procedures

5.2 Organizational Safeguards

• Employee training on privacy and security practices
• Signed confidentiality agreements for all staff
• Incident response procedures for potential breaches
• Regular privacy impact assessments

5.3 Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations:

• Active Users: Data retained while your account is active
• Inactive Users: Data deleted after 3 years of inactivity
• Legal Compliance: Some data may be retained longer to comply with legal requirements

6. Your Rights

6.1 Data Subject Rights (GDPR)

If you are in the European Union, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing
• Withdraw Consent: Remove consent for data processing

6.2 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@caloria.vip
• WhatsApp: Send "DELETE MY DATA" to our bot
• Admin Panel: Request data deletion through our interface

We will respond to your request within 30 days (or as required by applicable law).

7. WhatsApp Integration

7.1 How It Works

Caloria operates through WhatsApp using the ManyChat platform. When you interact with our bot:

• Your messages are processed through secure WhatsApp Business APIs
• Food photos and voice messages are analyzed by our AI systems
• Responses are sent back through WhatsApp's encrypted channels
• All data processing follows WhatsApp's privacy standards

7.2 WhatsApp's Role

WhatsApp/Meta acts as a data processor for messages sent to our bot. Their privacy policy applies to:

• Message transmission and delivery
• WhatsApp account information
• Message encryption and security

We recommend reviewing WhatsApp's Privacy Policy for complete information.

8. Cookies and Tracking

8.1 Website Cookies

Our website (caloria.vip) uses cookies for:

• Essential Functions: Login sessions and security
• Analytics: Understanding website usage patterns
• Preferences: Remembering your settings

8.2 WhatsApp Bot

Our WhatsApp bot does not use cookies, but may collect:

• Message interaction data for service improvement
• Usage patterns for personalization
• Error logs for technical support

8.3 Your Choices

You can control cookies through your browser settings. Disabling cookies may affect website functionality but will not impact the WhatsApp bot service.

9. Children's Privacy

Caloria is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

For users aged 13-18, we recommend parental supervision and guidance when using nutrition tracking services.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, for the purposes described in this policy.

We ensure appropriate safeguards are in place for international transfers:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Encryption and security measures during transfer
• Compliance with local data protection laws

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We will notify you through WhatsApp or email
• We will post the updated policy on our website
• We will update the "Last updated" date
• Continued use constitutes acceptance of changes

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us