Calotri · Privacy

Last updated: September 28, 2026 · Français

What stays on your device

This data is stored on your iPhone. The contents of your export can also be backed up to your iCloud Drive, shared by you, or backed up to your Calotri account. Contributing to the Atlas catalog is a separate choice:

• your food log · foods, weights, times, meals;
• your profile and goals · height, weight, age, calorie target;
• your food catalog, your recipes and your voice phrases;
• your settings · language, units, theme, meal times.

Your voice

Transcription happens on the device, through the speech features built into iOS. No audio recording is kept, sent to Calotri, or sent to anyone else. The microphone only turns on during a dictation session visible on screen · never in the background.

Understanding what you say (recognizing the food, the weight, the meal) is done by the Apple Intelligence model running locally on your phone. If you choose Apple's private cloud in Settings → On-device intelligence, the text of the dictated phrase (never the audio) is processed by Private Cloud Compute, the Apple service designed to keep nothing. Calotri doesn't receive it.

Apple Health

If you allow it, Calotri writes your calories and macronutrients to Apple Health, so your other apps can use them.

If you allow it, Calotri also reads your body weight, active energy, steps, workouts, sleep and body fat. These readings serve one purpose: calculating your calorie needs from what you actually burn, instead of guessing them, and showing them in your goals and statistics.

What is read from Health stays on your phone. It is not part of any backup, neither in iCloud nor in your Calotri account: a new phone reads it again from Health. Your Apple Health record stays under your control and is never used for advertising or marketing. Foods you imported into your Calotri catalog are, however, part of your export and of your optional backups. You can revoke Health permissions in Settings → Privacy & Security → Health.

The Atlas · the shared catalog (optional, off by default)

Calotri can offer a food catalog built together with other users. It stays off until you turn it on, in Settings.

When on, it exchanges only this:

• what leaves · the name of a food, its values per 100 g, its unit weight, its barcode if it has one, the icon you chose and the meal it is usually eaten at;
• what never leaves · your log, your weights, your meal times, your profile, your goals, your voice, and your voice commands (the phrases you link to a food stay on your phone).

No account is created. Your device receives a random token that contains neither your name, nor your email address, nor your Apple ID, and cannot be used to recognize you elsewhere. If you choose a contributor name, it publicly accompanies the cards you share; remove it and your cards become anonymous everywhere again, older ones included. Shared values are pooled by consensus · a card offered by a single person is marked as such, and the value kept is the median of all contributions, not the latest one. Calotri regularly reviews the shared catalog, with the help of an artificial intelligence tool, to fix obvious errors (names, inconsistent values) · this review only covers the cards, with nothing that tells who offered them. You can turn the Atlas off at any time · what you entered by hand stays yours and is never overwritten.

Your account (optional)

iCloud backup. Independent of the Calotri account, it is on by default when iCloud Drive is available. Your export file goes to your iCloud Drive, Calotri → Backups folder, visible in Files, and uses your iCloud storage, never Calotri's. No file from this backup passes through Calotri. One copy per day, replaced after changes, with fourteen daily files kept. You can turn off the automatic backup, back up on demand, or restore in Settings → Your data. Apple handles syncing between your devices; it may wait for the network. iCloud copies remain in Files after the Calotri account is deleted; you can erase them there.

You can attach your account with Apple or Google, in Settings → Your data → Your account. Nothing from your export is sent to Calotri before you sign in. Apple provides an opaque identifier and, when available, your email or a relay address. From Google, Calotri only receives your identifier and your email if Google has verified it, nothing else. Calotri never receives your Apple or Google password. An account matches a single identity: Apple or Google. Sign in the same way to get your backups back; using the same email with both does not merge the accounts.

Once the account is attached, Calotri backs up on demand, and automatically when your log has changed (when you open the app, when you leave it, at least once a day) the contents of your export: food log, personal catalog, dishes, nutrition goals, settings and written corrections. This includes the written transcriptions present in the log and the corrections, never recordings of your voice. What is read from Apple Health is not part of it.

This data is hosted by Cloudflare for Calotri: backups in R2; the identifier provided by Apple or Google, its provider, the available email and backup metadata in D1. Session tokens are stored there only as cryptographic fingerprints. Backups are not published to the Atlas.

The account and its data are kept until the account is deleted, with at most ten backups. You can delete them with “Delete my account and backups” in the app, or by writing to julien@monexpansion.com. Signing out stops the account's automatic backups; copies already saved remain available the next time you sign in. Deleting the account keeps the local log and Apple Health.

Exchanges without personal data

Scanning a barcode queries the public Open Food Facts database with the barcode number only. The food catalog for your language is downloaded from calotri.com. No personal data accompanies these requests.

Diagnostics (on request only)

If something doesn't work, Settings → Your data → Send diagnostics uploads the app's latest technical traces to Calotri, with its version, the device model, the iOS version, the language and a few counters (number of entries, dates of the latest backups). The traces describe what the app did: they can therefore contain food names and dictated phrases, never audio. Nothing leaves until you tap the button, and the app tells you before sending what leaves and what stays.

You receive a six-character code: it, and it alone, links the upload to you. To limit abuse, the server keeps a fingerprint of your IP address, not the address itself. Diagnostics are hosted by Cloudflare for Calotri and are used only to fix your problem; write to us with your code to have them erased.

Writing to us from the app (on request only)

Settings → Send feedback, or the line offered after a correction, opens a sheet to write to us. What is sent: your message, the app version, the device model, the iOS version and the language. After a correction, it also includes the sentence you said, what Calotri understood and the food you chose. Technical traces are sent only if you tick the box. Your email is optional: it is used only to reply to you. Nothing leaves until you tap “Send”.

The message is stored by Cloudflare for Calotri and forwarded by email to the person who develops the app. To limit abuse, the server keeps a fingerprint of your IP address, not the address itself. Write to us to have a message erased.

What Calotri doesn't do

• no mandatory account, no Calotri password;
• no advertising trackers, no third-party analytics;
• no ads;
• no selling or renting of data; backup hosting by Cloudflare and the optional exchanges described here only serve the features you choose;
• no location, no access to your contacts.

Children

Calotri is not intended for children under 13 and does not knowingly collect any data about them.

Deleting your data

Deleting the app erases everything it contains on your device. Data already written to Apple Health stays in Apple Health · you can remove it from the Health app. To have a card you offered to the Atlas removed from it, write to us. Uninstalling the app doesn't delete your account or its backups: use the account deletion button before uninstalling, or write to us.

Changes

If this policy changes, the date at the top of the page changes with it, and the change is announced in the app's release notes.

Contact us

A question, a deletion request: julien@monexpansion.com