Privacy Policy
Last updated: July 16, 2026
CalculEat processes your personal data in accordance with the EU General Data Protection Regulation (GDPR). Here we explain what we collect, why, and what rights you have.
1. Data controller
CalculEat is the data controller for the processing described here. Contact us via the in-app support chat.
2. Data we process
Account data: email address and username. Health-related data you enter yourself: weight, height, sex, date of birth, body measurements, food and weight logs. Payments: handled entirely by Stripe — we never see your card details, only subscription status. Technical information required for login and security.
3. Purposes and legal basis
We process your data to deliver the service (contract, Art. 6(1)(b) GDPR). Health-related data is processed with your explicit consent (Art. 9(2)(a)) — you give it by entering the data yourself, and you can withdraw it at any time by deleting the data or your account. Security and abuse protection is based on legitimate interest (Art. 6(1)(f)), and bookkeeping of payments on legal obligation (Art. 6(1)(c)).
4. Who receives the data
We use data processors to run the service: Supabase (database and authentication), Stripe (payments), Vercel (hosting), and Google (AI reading of nutrition label photos when you use label scanning — the image is sent to Google's Gemini service for interpretation and is not stored by us). GDPR data processing agreements are in place with all of them. For transfers outside the EU/EEA, the European Commission's standard contractual clauses are used.
5. Retention
Your data is kept as long as your account exists. If you delete your account, all your personal data is permanently deleted. Payment records are kept for seven years under the Swedish Bookkeeping Act.
6. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing. You can get a free export of all your data by contacting us via the in-app support chat. You can also lodge a complaint with the Swedish Authority for Privacy Protection (imy.se).
7. Cookies and local storage
CalculEat only uses necessary local storage in your browser for login and settings. We use no advertising cookies and no third-party tracking.
8. Changes
Changes to this policy are announced in the app. For material changes concerning health data, we ask for renewed consent.