Privacy Policy
Effective Date: March 23, 2026
We process personal data solely for the purposes listed below. Data will not be used for any other purpose without prior separate consent. If the purpose changes, we will take necessary steps including obtaining separate consent.
- •Service delivery — Food image analysis, nutritional calculations, and personalized health management
- •AI model improvement — Enhancing recognition engine performance, algorithm training, and new feature development based on user-provided data
- •Partner integrations — Sharing data with user-selected partners (gyms, pilates studios, clinics, etc.) for expert coaching
- •Paid service operation — Subscription billing, access management, fraud prevention, and purchase history
- •Marketing & advertising — Interest-based ads via AdMob, usage analytics, and event notifications
This service is available to users aged 14 and above. We do not knowingly collect personal data from children under 14. Any accounts identified as belonging to children under 14 will be deleted immediately.
| Category | Items |
|---|---|
| Registration & Auth | (Social) Apple / Google / Kakao unique identifiers, email address / (Direct) Email address |
| Health & Body Data | Height, weight, body composition (muscle mass, body fat %, etc.), meal photos, nutrient intake, and health records |
| Payments & Subscriptions | In-app purchase confirmation numbers, subscription status, billing history |
| Auto-collected | Advertising identifiers (ADID/IDFA), IP address, usage logs, access logs, cookies, device info (OS, model) |
We delete personal data promptly upon account termination, except as outlined below.
| Category | Retention Period & Basis |
|---|---|
| Fraud prevention records | 6 months post-withdrawal (internal policy) |
| Payment & supply records | 5 years (Korean E-Commerce Act) |
| Contract / cancellation records | 5 years (Korean E-Commerce Act) |
| Consumer complaint records | 3 years (Korean E-Commerce Act) |
| Access logs | 3 months (Communications Privacy Act) |
| Anonymized AI training data | Retained in irreversibly anonymized form for service improvement (no fixed retention period) |
We share data with third parties only when users explicitly consent via a dedicated in-app consent screen.
| Category | Details |
|---|---|
| Recipients | Partner fitness centers, clinics, and healthcare partners |
| Purpose | Personalized diet coaching, workout guidance, professional consultations, and product recommendations |
| Data shared | Body data, meal photos, and nutritional analysis records |
| Retention | Until the user disconnects the integration or withdraws from the service |
| Service | Details |
|---|---|
| Infrastructure (GCP) | Data storage and server operations |
| Ad analytics (Google AdMob) | Targeted ad delivery and effectiveness analysis (cross-border transfer) |
| Authentication (Apple, Google, Kakao) | Social login and identity verification |
Personal data is deleted promptly once it is no longer necessary. Electronic files are destroyed using technical methods that prevent recovery or reconstruction.
Depending on your jurisdiction, you may have the following rights:
- •Access, correction, or deletion of your personal data
- •Restriction of processing
- •Data portability (GDPR users)
- •Right to object to automated decision-making / profiling
- •Withdrawal of consent at any time (without affecting prior lawful processing)
Certain data may be retained beyond your deletion request where required by applicable law.
To exercise any of your rights, contact us at: support@calonote.com. We will respond within 30 days.
For users in the European Economic Area (EEA) and United Kingdom, we process personal data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account management & core service | Performance of a contract (Art. 6(1)(b) GDPR) |
| Health & body data | Explicit consent (Art. 9(2)(a) GDPR) |
| Payments & fraud prevention | Legal obligation / Legitimate interests (Art. 6(1)(c)(f) GDPR) |
| Marketing & analytics | Consent (Art. 6(1)(a) GDPR) |
| AI model training (anonymized) | Legitimate interests (Art. 6(1)(f) GDPR) |
We implement technical and organizational measures to protect your personal data, including SSL/TLS encrypted data transmission, access controls, and anti-intrusion security systems.
| Category | Details |
|---|---|
| Privacy Officer | YUNHO NOH (CEO) |
| Team | CaloNote Operations Team |
| support@calonote.com |
This policy is effective as of March 23, 2026. Material changes will be notified at least 30 days in advance; other changes 7 days in advance, via in-app notices.