Legal Information

Privacy Policy for CalPocket

Last Updated: 2026-10-01

CalPocket is called Kalorikollen in Swedish.

1. Introduction

Thank you for choosing CalPocket, an app that helps you log what you eat, track your weight and reach your calorie goal. The App is provided by Netblast AB ("we", "us"), which is the controller of the personal data described in this policy. By using CalPocket, you agree to the terms outlined in this policy.

In short: CalPocket has no account and no login. Your profile, goals, food diary, weight history, recipes and photos are stored only on your device and are never uploaded to us. The App only sends data when it needs to look up food, when you share nutrition values, when you choose to have a photo analysed in the cloud, and when it reports a crash. Each of these is described below.

2. Data Stored on Your Device

Everything you enter stays on your device:

• Your profile: sex, age, height, weight and activity level, used to calculate your calorie goal.
• Your goals, food diary, daily totals and weight log. Photos of plates you scan are saved with the diary entry.
• Your own foods, recipes, saved meals, favourites, achievements and settings.

Some of this, such as what you eat and what you weigh, is health-related data. We cannot see it. Nothing is deleted automatically: it stays on your device until you delete it (see section 11).

3. Food Search and Lookups

To find foods and nutrition values, the App contacts our food server. Depending on what you do, it sends your search text, a scanned barcode, the id of a food you open, or which search result you chose (used to improve the ranking of results). After a photo scan on your device, the names of the recognised foods are sent as search text, never the photo. Barcodes are read by the camera on your device, and no image is sent.

Each request also includes technical information: the App's platform and version, your language, your chosen food country and a random device identifier. The device identifier is created when the App is installed. It is not derived from your hardware or any advertising identifier, and it is used to protect the service from abuse, for example by limiting how often a single device can make requests. Our server also sees your IP address. These requests never include your diary, weight, profile or goals.

Pictures in the recipe library are loaded from image servers, which also see your IP address.

4. Nutrition Contributions

When you save your own food with a barcode, the App can share its nutrition values with us so that other users can find the product. The "Share with CalPocket" switch is on by default for foods with a barcode, and you can switch it off before saving. If you share, we receive the barcode, product name, brand, package size, nutrition values, portion size, country and language, together with the technical information described in section 3. Contributions are reviewed before anyone else sees them. By sharing, you allow us to use, edit and publish the values as part of our food database, which may be shared under open licences.

5. Photo Analysis

You can log a meal by photographing your plate, and fill in a new food by photographing its nutrition label. The first time you scan a plate, you choose how your photos are analysed:

• On your device: the photo is analysed by an AI model on your device and never leaves it.
• In the cloud: the photo is sent encrypted to our scan server, which forwards it to OpenRouter, Inc., an AI service in the United States. OpenRouter passes it on to a third-party AI model provider, which may keep the photo under its own terms.

Nutrition label scans always use the cloud. If you have not chosen cloud analysis, the App asks you before each label photo is sent. You can change your choice at any time in Settings.

For cloud analysis we send a copy of the photo reduced to at most 1,024 pixels, with its metadata (including location) removed, your app language, any correction you type when you ask the App to fix a result, and the technical information described in section 3. Our scan server handles the photo in memory only. It does not save the photo or write it to logs, and it does not log the result together with anything that identifies you.

6. Downloading AI Models

To analyse photos and write recipes on your device, the App can download an AI model after you confirm the download. The model files are delivered by Cloudflare. The download contains none of your data, but Cloudflare sees your IP address.

7. Apple Health and Health Connect

If you turn it on in Settings, the App can read your weight and active energy from Apple Health (iPhone) or Health Connect (Android), and save the weights you log there. This is off by default. The data is only exchanged between the App and your device's health store. It is never sent to us or to any third party, and never used for advertising. Turning the feature off stops syncing. Weights already saved to Apple Health or Health Connect stay there, and you remove the App's access in your device's health settings.

8. Crash Reports

If the App crashes or runs into an error, it automatically sends an error report to Sentry (Functional Software, Inc.), which stores it in the EU. A report contains technical details about the error, your device model, operating system, app version and language. The App is set up so that reports are not linked to your IP address and do not include your search terms, food names or the contents of your diary.

9. App Updates

When the App starts, it checks for updates through Expo (650 Industries, Inc.) in the United States. The check sends the platform, app version and a random identifier, and if the App failed to start, a short error message. It contains none of your data.

10. Reminders and Widgets

Meal reminders are scheduled on your device, and no server is involved. If you add a CalPocket widget to your home or lock screen, it shows today's calories and nutrients, so anyone who can see your screen can see them.

11. Backups, Export and Deletion

• Device backups: your diary and settings may be included in your device's own backup with Apple or Google, under their terms.
• Backup file: in Settings you can create a backup file with everything you have entered, including plate photos. The file is not encrypted, so keep it somewhere safe.
• Export: you can export your diary and weights as spreadsheet (CSV) files.
• Delete all data: in Settings you can delete your diary, weights, foods, recipes, settings and photos from the App. This cannot be undone. It does not remove downloaded AI models (which you can remove separately in Settings), the random device identifier, data already saved to Apple Health or Health Connect, device backups, or backup files you have saved elsewhere.
• Uninstalling the App removes its data from your device. On iPhone, the random device identifier may remain if you reinstall the App.

12. Legal Basis

• Food lookups and the technical information they need are processed to provide the App you have bought (performance of a contract, Art. 6(1)(b) GDPR).
• Cloud photo analysis is based on your explicit consent (Art. 6(1)(a) and 9(2)(a) GDPR), which you give when you choose cloud analysis or approve a label photo. You can withdraw your consent at any time by switching to analysis on your device in Settings.
• Nutrition contributions are based on your consent (Art. 6(1)(a) GDPR), which you give by sharing them.
• The device identifier, IP addresses and crash reports are processed based on our legitimate interest in keeping the App secure, reliable and free from abuse (Art. 6(1)(f) GDPR).

13. How Long We Keep Data

• Photos sent for cloud analysis are not stored by us and are discarded once the analysis is done. AI model providers may keep them under their own terms (see section 5).
• IP addresses used to limit requests are only stored in pseudonymised (hashed) form and are deleted within 48 hours.
• Accepted nutrition contributions are kept as part of the food database.
• Technical logs on our servers are kept only as long as needed to operate and secure the service.

14. Third-Party Services

CalPocket uses the following service providers, which have their own privacy policies:

• Cloudflare: delivery of AI model files
• OpenRouter and the AI model providers it uses: cloud photo analysis
• Sentry: crash reports
• Expo: app updates

Apple and Google handle purchases, refunds, device backups and Apple Health or Health Connect under their own terms. We receive no health data from them.

15. Data Transfers

We adhere to the General Data Protection Regulation (GDPR). OpenRouter and Expo are based in the United States, and the AI model providers and Cloudflare may process data outside the EU/EEA. Such transfers are protected by appropriate safeguards, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

16. Your Rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Since your data is stored on your device, you can view, change, export and delete it yourself in the App. For data on our servers, contact us. Because there is no account, we usually cannot link that data to you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the data protection authority in your country.

17. Health Disclaimer

CalPocket provides estimates, not medical advice. Calorie goals, nutrition values and photo analysis may be inaccurate. The App does not replace healthcare, a dietitian or a doctor, and it is not intended for people with an eating disorder, for people who are pregnant or breastfeeding, or for medical conditions that require a special diet. Talk to a doctor before making major changes to your diet.

18. Children

CalPocket is not intended for children under 16.

19. Cookies and Trackers

We do not use cookies, analytics, advertising or other tracking mechanisms, and we do not share data for personalized advertising.

20. Data Breach Procedures

In the unlikely event of a data breach, we will follow our stringent breach policy to address the situation and notify affected users as required by law.

21. Changes to This Policy

This policy may be updated from time to time. The "Last Updated" date at the beginning of this policy will change accordingly. Since we do not have your email address, significant changes will be announced in the App or on this page.