Privacy Policy
Last updated: August 1, 2026
Calculeat processes your personal data in accordance with the EU General Data Protection Regulation (GDPR). Here we explain what we collect, why, and what rights you have.
1. Data controller
Calculeat is the data controller for the processing described here. Contact us via email at info.calculeat@gmail.com.
2. Data we process
Account data: email address and username. Health-related data you enter yourself: weight, height, sex, date of birth, body measurements, food and weight logs. Payments: handled entirely by Stripe — we never see your card details, only subscription status. Technical information required for login and security.
3. Purposes and legal basis
We process your data to deliver the service (contract, Art. 6(1)(b) GDPR). Health-related data is processed with your explicit consent (Art. 9(2)(a)) — you give it by entering the data yourself, and you can withdraw it at any time by deleting the data or your account. Security and abuse protection is based on legitimate interest (Art. 6(1)(f)), and bookkeeping of payments on legal obligation (Art. 6(1)(c)).
4. Who receives the data
We use data processors to run the service: Supabase (database and authentication), Stripe (payments), Vercel (hosting), and Google (AI reading of nutrition label photos when you use label scanning — the image is sent to Google's Gemini service for interpretation and is not stored by us). GDPR data processing agreements are in place with all of them. For transfers outside the EU/EEA, the European Commission's standard contractual clauses are used.
5. Retention
Your data is kept as long as your account exists. If you delete your account, all your personal data is permanently deleted. Payment records are kept for seven years under the Swedish Bookkeeping Act.
6. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing. You can download all your data in machine-readable format at any time under Settings → Export my data, and delete your account with all associated data under Settings → Delete account. For help with rectification or other questions, reach us via email at info.calculeat@gmail.com. You can also lodge a complaint with the Swedish Authority for Privacy Protection (imy.se).
7. Cookies and local storage
Calculeat only uses necessary local storage in your browser for login and settings. We use no advertising cookies and no third-party tracking.
8. Changes
Changes to this policy are announced in the app. For material changes concerning health data, we ask for renewed consent.