Cal LabPro
This policy explains how the Cal LabPro app ("the app") handles personal information. Cal LabPro Pty Ltd ("we", "us") runs the app from Queensland, Australia, and handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you live in the European Union or the United Kingdom, the GDPR also gives you the rights described in section 11.
The short version: we use your information only to run the app for you. We don't show ads, we don't sell your data, and we don't track you across other apps or websites. You can delete your account and all of your data from inside the app at any time.
1. Who we are
Cal LabPro Pty Ltd, Queensland, Australia. For anything about privacy, email privacy@callabpro.com.
2. Information we collect
Information you give us
- Account: your name, email address and password. Passwords are stored only as a secure hash; we can never see them.
- Body and goal details: sex, date of birth, height, current and target weight, goal (lose, maintain or gain), activity level, and your preferred units. We use these to work out your daily calorie and macro targets.
- Food diary: the foods you log, the meal (breakfast, lunch, dinner or snacks), the date, servings, calories, protein, carbs and fat.
- Weight history: the weights you record and their dates.
- Reminders and settings: the times you set meal reminders, and your app settings, for example reminders on or off and email preferences.
- Profile photo (optional): if you add one, we store it. See section 6 for who can see it.
- Meal photos: when you use the AI plate scan, the photo is sent to be analysed (see section 4). We do not keep meal photos after the analysis.
- Invites: your invite code, and if you join with a friend's code or a friend joins with yours, a record of who invited whom and when.
- Messages to us: anything you send when you email us for support.
Information collected automatically
- Subscription status: whether you have Premium, a free trial or the free plan, and when it renews or ends. Payments are handled by Apple or Google; we never see your card details.
- Scan usage: how many AI scans you used each day, so we can apply the free plan's daily limit.
- Technical information: your app language, and standard server logs kept by our service providers (for example IP address, time of request and error details) for security and to fix problems.
We don't use advertising identifiers, ad networks or third-party analytics trackers.
Health information
Some of this information, such as your weight, body details and diet, and any data from Apple Health or Health Connect, is health information, which Australian law treats as sensitive. We collect it only with your consent, which you give by entering it or by connecting a health app, and only to provide the app's features to you.
3. How we use your information
- to create and secure your account and keep you signed in;
- to calculate your targets, store your diary and weight history, and show your progress and streaks;
- to analyse meal photos and look up barcodes;
- to send your meal reminders, which are scheduled on your phone;
- to provide Premium, free trials and invite rewards;
- to send emails you need, such as a welcome email and password reset codes, and emails you choose to receive;
- to answer your support requests, keep the service secure, and prevent abuse.
We don't use your information for advertising, we don't sell it, and we don't use it to make decisions about you that have legal or similar effects.
4. AI meal analysis
When you scan a plate, the app sends the photo to our server, which passes it to Anthropic (the company that makes the Claude AI model) to identify the foods and estimate their nutrition. The result comes back to the app, and you decide what to add to your diary.
- We don't store the photo. Our server keeps only a count of your scans.
- Under its commercial terms, Anthropic doesn't use this data to train its models and keeps it only for a limited time.
- Please don't photograph people or anything private; point the camera at your food.
- AI estimates can be wrong. Always check them before you rely on them.
5. Apple Health and Health Connect
You can choose to connect the app to Apple Health (iPhone) or Health Connect (Android). It's off until you turn it on in Profile, and you can turn it off there at any time, or remove access in your phone's settings.
| Data | What the app does |
|---|---|
| Steps | Reads today's total to show it on the Home screen. It stays on your phone; it's not sent to our servers. |
| Active calories burned | Reads today's total to add to your calorie budget. It stays on your phone; it's not sent to our servers. |
| Weight (read) | Reads your latest weight only when you tap to import it. The imported weight is then saved to your weight history in your account. |
| Weight (write) | Saves the weights you record in the app to Apple Health or Health Connect. |
Data from Apple Health and Health Connect is used only to provide these features to you. It is never used for advertising or marketing, never sold, never shared with data brokers or other third parties, and never used to train AI models. Our use of data from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
6. Who can see your information
Other users
- Invites: if you join with a friend's invite code, that friend can see your first name and last initial (for example "Sarah M."), your profile photo if you have one, the date you joined, and whether you're on the free plan, a free trial or Premium. This is how they see that their invite worked.
- Profile photo: your photo is stored at a hard-to-guess web address so it can load quickly. Anyone who has that exact address could open it, so only use a photo you're comfortable with.
- Shared day cards: if you tap "Share my day", the image is shared only where you choose to send it.
Nobody else can see your diary, weights or body details.
Service providers
We use these trusted companies to run the app. They process your information for us under contracts that require them to protect it, and only for the purposes below.
| Provider | What for | Information |
|---|---|---|
| Supabase | Database, sign-in, and file storage | Account, profile, diary, weights, reminders, photos, invites |
| Anthropic | AI meal photo analysis | Meal photos you scan, your app language |
| RevenueCat | Managing subscriptions and invite rewards | A random account ID and your purchase and subscription status |
| Apple and Google | App Store and Google Play payments, notifications on your phone | Handled under their own privacy policies |
| Resend | Sending emails | Your email address, your name, and the email content |
| Open Food Facts | Packaged food lookups | Only the barcode number you scan; nothing about you |
| Cloudflare | Hosting this website and forwarding our email | Standard web request logs, and emails you send us |
We may also disclose information if the law requires it, or to protect someone's safety, or as part of selling or reorganising our business, in which case this policy would continue to apply to your information.
7. Information stored outside Australia
Our service providers store and process information on servers outside Australia, mainly in the United States, and may use other countries too. We choose providers with strong security and privacy commitments, and we take reasonable steps so that they handle your information consistently with the Australian Privacy Principles. For users in the EU or UK, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.
8. Notifications
Meal reminders are local notifications: your phone schedules them itself, and they don't come from our servers. You can turn them off in the app (Profile) or in your phone's settings.
9. How we protect your information
Data is encrypted in transit (HTTPS). Database rules make sure each account can only read and change its own records. Secret keys are kept on our servers and never in the app. No system is perfectly secure, but if a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC), as the law requires.
10. How long we keep it
- We keep your information while you have an account.
- When you delete your account, your profile, diary, weights, reminders, photos, invite records and subscription record with RevenueCat are deleted straight away. Copies may remain in our providers' encrypted backups for up to 30 days before they are overwritten.
- Apple and Google keep their own purchase records under their policies.
- Support emails are kept for as long as needed to help you, and then deleted.
See Delete your account for how to do it.
11. Your rights and choices
- Access and correction: you can see and change most of your information in the app at any time. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it.
- Deletion: delete your account in the app (Profile, then Delete account), or email us.
- Choices: the profile photo, health app connection, reminders and invites are all optional.
- Anonymity: you need an email address for an account, but you don't have to use your real name.
If you live in the EU or UK, you also have the right to data portability, to object to or restrict processing, and to withdraw your consent at any time (this doesn't affect processing done before you withdrew it). We process your information to provide the service you signed up for (contract), with your consent for health information, and for our legitimate interests in keeping the service secure. You can complain to your local data protection authority.
To make a request, email privacy@callabpro.com from the email address on your account. We will reply within 30 days.
12. Children
The app is not meant for anyone under 16, and we don't knowingly collect information from children under 16. If you think a child has given us information, email us and we will delete it.
13. Changes to this policy
We may update this policy as the app changes. We will change the date at the top and, for important changes, tell you in the app or by email.
14. Questions and complaints
Email privacy@callabpro.com. We will look into your concern and reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Questions about your privacy?
We reply within 30 days, usually much sooner.