CalTrack

Privacy Policy

Effective date: July 30, 2026

CalTrack (“the app”) is published by NGN Consulting Corp. (“we”, “us”) and is built privacy-first. This policy explains what data the app handles, where it is stored, and who can see it.

The short version

Data stored on your device

The app stores the following locally on your phone:

• Your first name (used only for the greeting on the home screen)
• Your daily calorie goal and macro targets
• Your weight, starting weight, and goal weight, if you choose to enter them
• Your height, age, sex, and activity level, if you choose to enter them — used only to estimate your calorie needs, calculated on your device
• The foods and meals you log, including any water you log, and your logging streak
• Weekly insights generated on your device
• Whether you hold a valid Pro purchase (see Purchases below)

None of this is transmitted to us or stored on any server we operate — we do not operate any.

Purchases (Google Play Billing)

CalTrack offers an optional paid upgrade. If you buy it:

• Google Play processes the payment. We never see, receive, or store your card number, billing address, or any other payment details. The transaction happens between you and Google under Google’s terms and privacy policy.
• The app asks Google Play whether you hold a valid purchase, and stores only the answer — an entitlement flag and the purchase token Google issues — on your device. That check requires an internet connection and Google Play services, and it goes to Google, not to us.
• What we receive is sales reporting, not your identity. Google Play Console shows us aggregated order and payout information — units sold, country, amount, refunds. It does not include your name, email address, or payment details, and we cannot use it to identify you or link a purchase to anything you have logged.
• Your logged data is not involved in the purchase. No meal, weight, or goal data is sent to Google as part of buying or verifying an upgrade.
• If you contact us about a purchase, we will see whatever you choose to put in that message (for example your email address and order number). We use it only to help with your query.

If you never buy anything, the app performs no billing checks at all.

Android system backup

Like most Android apps, CalTrack permits Android’s built-in backup service. If backup is enabled for your device (Android Settings → Google → Backup), Android may copy the app’s data to your own Google account and restore it automatically when you reinstall CalTrack or set up a new phone. This is what keeps you from losing your logging history when you change devices.

What this means:

• The copy goes to your Google account, not to us. We have no access to it and no way to know it exists.
• It is performed entirely by Android and Google, under Google’s terms and privacy policy rather than ours.
• You can turn it off at any time in your device’s Android backup settings, and you can delete existing backups from your Google account’s backup settings.
• Because this copy can exist, uninstalling the app alone may not remove every copy of your data — see Data deletion below.

Exporting and importing your own data

The Profile screen includes Export data, which writes all of your CalTrack data to a single .json file and lets you save or send it wherever you choose — your own storage, a cloud drive of your choice, or another device. Import data restores from a file you previously exported, replacing what is currently in the app.

Both are free features and always will be — getting your own data out of the app is never behind a payment, and it keeps working whether or not you have a Pro purchase, and whether or not a subscription has lapsed.

The export file is created on your device and goes only where you send it; it is never uploaded to us. Anyone who obtains that file can read the data in it, so keep it somewhere you trust.

Internet use: food database lookups

Apart from the purchase check described above, the only network requests the app makes are to Open Food Facts (world.openfoodfacts.org), a non-profit, open food products database, in two situations:

1. Barcode scan — the scanned barcode number is sent to retrieve that product’s nutrition facts.
2. Food search — the text you type in the search box is sent to return matching products.

These requests contain no account identifier, no name, no device identifier added by us, and no logged-meal history. The app does identify itself in each request, with its name, version and a developer contact address, because Open Food Facts’ API guidelines ask callers to be reachable — that identifies us, not you. They are used solely to return results and are not stored by the app anywhere except on your device (as part of a meal, if you log it). Open Food Facts’ own privacy practices are described at world.openfoodfacts.org/privacy

Like any request made over the internet, these requests necessarily include your device’s IP address, which Open Food Facts’ servers receive in order to send a response back to you. We do not receive, log, or store this address ourselves — it is visible only to Open Food Facts, under their own privacy practices (linked above).

Requests are made over HTTPS (encrypted in transit).

Camera

The camera permission is used exclusively to scan product barcodes on the scanner screen. No photos or video are captured, stored, or transmitted. The camera is active only while the scanner screen is open.

What we do NOT do

• No user accounts or sign-up
• No ads or ad SDKs
• No analytics, telemetry, or crash-reporting SDKs
• No servers of our own, and no copy of your data on our side
• No selling, sharing, or transfer of personal data to anyone
• No tracking across apps or websites
• No profiling, and no use of your logged data for advertising or for training any model

Children

CalTrack is a general-audience app and is not directed at children. It does not knowingly collect personal information from anyone — including children — because it does not collect personal information at all: everything you enter stays on the device it was entered on.

In the United States, this means the app is not subject to COPPA’s parental-consent requirements, because no personal information is collected in the first place. In the EU/UK, GDPR sets the age at which a child can consent to their own data processing at 16 by default, though individual member states may set it as low as 13 — this doesn’t change anything for CalTrack either, because no consent to processing is required when no data is collected or transmitted to us at all.

Data deletion

To remove your data:

1. On the device — uninstall the app, or go to Android Settings → Apps → CalTrack → Storage → Clear data. This deletes everything the app stores locally, including the record of any purchase (which you can restore later through Google Play).
2. Android’s backup copy — if you have Android backup enabled, also turn it off and delete the backup from your Google account’s backup settings. Otherwise your data may be restored the next time you install the app.
3. Any file you exported — delete it yourself, wherever you chose to save it.

There is nothing for us to delete and no request to send us: we operate no servers and hold no copy of your data. Records of a purchase are held by Google as part of your Google Play account history, and are governed by Google’s policies; we cannot delete those, and we may be required to keep the corresponding sales records for tax and accounting purposes.

Legal basis for processing (GDPR)

Because CalTrack does not operate a server and does not collect your personal data, we do not process it under any lawful basis ourselves — there is nothing for a lawful basis to apply to. The narrow processing that does happen occurs outside the app, by other parties, each under their own basis:

• Open Food Facts requests (barcode scans and food searches) are sent directly from your device to Open Food Facts, at your instruction, each time you use those features. This is processing necessary to provide the specific result you’ve just asked for (GDPR Article 6(1)(b)), carried out under Open Food Facts’ own privacy policy, not ours.
• Google Play purchases, if you buy the optional Pro upgrade, are processed by Google as a party to that transaction, under Google’s own lawful basis and privacy policy — again, not ours, and not on our behalf.

Your rights under GDPR (EU/UK users)

If you are located in the European Economic Area or the United Kingdom, data protection law (the GDPR, and the UK GDPR) gives you a set of rights over your data. Because CalTrack stores your data on your own device rather than on any server we operate, most of these are already available to you directly, through the app itself, without needing to ask us:

• Right of access — everything the app holds about you is visible in the app, and can be exported in full at any time using Export data (see above).
• Right to rectification — correct anything you’ve entered at any time, in the Profile screen or by editing a logged meal.
• Right to erasure (“right to be forgotten”) — delete everything by uninstalling the app or clearing its storage (see Data deletion, above). Because we hold no copy of your data, there is nothing further for us to erase on our end.
• Right to restrict processing and right to object — we do not process your data on any server, so there is no ongoing processing by us to restrict or object to. Processing that does happen through third parties, such as a food database lookup, stops the moment you stop using that feature.
• Right to data portability — Export data produces a complete, machine-readable copy of your data (a .json file) you can move to another device or service, at any time, free of charge.
• Right to lodge a complaint — if you believe your data has been mishandled, you can complain to your local data protection supervisory authority. EU authorities are listed at edpb.europa.eu; UK users can contact the ICO.

You don’t need to submit a formal request to exercise the access, rectification, erasure, or portability rights above — they’re already available to you directly in the app, at any time. If you have a question about any of this, you can still reach us at the contact address below.

Changes to this policy

If the app’s data practices ever change (for example, if optional cloud features are added), this policy will be updated and the effective date revised before those changes take effect.

Contact

Questions about this policy: firefly.express.sales@gmail.com

NGN Consulting Corp., Illinois, United States — the publisher of CalTrack and the party responsible for this policy.