Privacy Policy
Effective Date: August 7, 2026
We process personal data solely for the purposes listed below. Data will not be used for any other purpose without prior separate consent. If the purpose changes, we will take necessary steps including obtaining separate consent.
- •Service delivery — Food image analysis, nutritional calculations, and personalized health management
- •AI model improvement — Enhancing recognition engine performance, algorithm training, and new feature development based on user-provided data
- •Partner integrations — Sharing data with user-selected partners (gyms, pilates studios, clinics, etc.) for expert coaching
- •Paid service operation — Subscription billing, access management, fraud prevention, and purchase history
- •Marketing & advertising — Interest-based ads via AdMob, usage analytics, and event notifications
- •Community (friend sharing) — Sending and accepting friend requests, showing records and posts you share with friends, handling comments and likes, and processing reports and enforcement actions
This service is available to users aged 14 and above. We do not knowingly collect personal data from children under 14. Any accounts identified as belonging to children under 14 will be deleted immediately.
| Category | Items |
|---|---|
| Registration & Auth | (Social) Apple / Google / Kakao unique identifiers, email address / (Direct) Email address |
| Health & Body Data | Height, weight, body composition (muscle mass, body fat %, etc.), meal photos, nutrient intake, and health records |
| Community (friend sharing) | Nickname, friend relationships and friend requests, records you share with friends (meal and daily photos, notes, nutrition data, timestamps), posts, comments and replies you write, likes, and report and block records |
| Payments & Subscriptions | In-app purchase confirmation numbers, subscription status, billing history |
| Auto-collected | Advertising identifiers (ADID/IDFA), IP address, usage logs, access logs, cookies, device info (OS, model) |
We delete personal data promptly upon account termination, except as outlined below.
| Category | Retention Period & Basis |
|---|---|
| Fraud prevention records | 6 months post-withdrawal (internal policy) |
| Payment & supply records | 5 years (Korean E-Commerce Act) |
| Contract / cancellation records | 5 years (Korean E-Commerce Act) |
| Consumer complaint records | 3 years (Korean E-Commerce Act) |
| Access logs | 3 months (Communications Privacy Act) |
| Community posts & comments | Deleted when you delete them or close your account (content under an open report or dispute is kept until the case is resolved) |
| Report & block records | 3 years after the case is closed (dispute handling and repeat-violation checks — internal policy) |
| Anonymized AI training data | Retained in irreversibly anonymized form for service improvement (no fixed retention period) |
We share data with third parties only when users explicitly consent via a dedicated in-app consent screen.
| Category | Details |
|---|---|
| Recipients | Partner fitness centers, clinics, and healthcare partners |
| Purpose | Personalized diet coaching, workout guidance, professional consultations, and product recommendations |
| Data shared | Body data, meal photos, and nutritional analysis records |
| Retention | Until the user disconnects the integration or withdraws from the service |
| Service | Details |
|---|---|
| Infrastructure (GCP) | Data storage and server operations |
| Ad analytics (Google AdMob) | Targeted ad delivery and effectiveness analysis (cross-border transfer) |
| Authentication (Apple, Google, Kakao) | Social login and identity verification |
Personal data is deleted promptly once it is no longer necessary. Electronic files are destroyed using technical methods that prevent recovery or reconstruction.
You can delete your data yourself in the following ways:
- •Individual records, posts and comments — tap the more menu (⋯) on the item > Delete
- •Stop showing a record to friends — turn off sharing on the record, or turn off Profile > Auto-share
- •Your account and all data — Settings > Delete account, in the app
- •If you cannot use the app — request it on the web account deletion page
Depending on your jurisdiction, you may have the following rights:
- •Access, correction, or deletion of your personal data
- •Restriction of processing
- •Data portability (GDPR users)
- •Right to object to automated decision-making / profiling
- •Withdrawal of consent at any time (without affecting prior lawful processing)
Certain data may be retained beyond your deletion request where required by applicable law. If you cannot install or use the app, you can submit a request on the account deletion page.
To exercise any of your rights, contact us at: support@calonote.com. We will respond within 30 days.
For users in the European Economic Area (EEA) and United Kingdom, we process personal data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account management & core service | Performance of a contract (Art. 6(1)(b) GDPR) |
| Health & body data | Explicit consent (Art. 9(2)(a) GDPR) |
| Payments & fraud prevention | Legal obligation / Legitimate interests (Art. 6(1)(c)(f) GDPR) |
| Marketing & analytics | Consent (Art. 6(1)(a) GDPR) |
| AI model training (anonymized) | Legitimate interests (Art. 6(1)(f) GDPR) |
We implement technical and organizational measures to protect your personal data, including SSL/TLS encrypted data transmission, access controls, and anti-intrusion security systems.
| Category | Details |
|---|---|
| Privacy Officer | YUNHO NOH (CEO) |
| Team | CaloNote Operations Team |
| support@calonote.com |
This policy is effective as of August 7, 2026. Material changes will be notified at least 30 days in advance; other changes 7 days in advance, via in-app notices.
| Effective Date | Summary of Changes |
|---|---|
| August 7, 2026 | Added disclosures for the community (friend sharing) feature — data collected (nickname, posts and comments, shared records, report and block records), who can see it, retention periods, and how to delete it |
| March 23, 2026 | Initial version |