Privacy

Effective August 18, 2026.

The short version: ZenCal works without an account, your meals and your weight stay on your device, and the only things that leave it are the ones that have to for the analysis to happen — the photo of the plate, the audio when you log by speaking, and the food name when you search.

What stays on the device only

Logged meals, weight history, calorie and macro plan, onboarding answers, language and theme. None of it is sent to us, and none of it exists on any server. Deleting the app deletes it with the app.

What leaves the device

• The meal photo. It goes to our server, which sends it to a vision model through OpenRouter (today, Google Gemini) and returns the estimate. The photo is kept in our storage under a random name, with nothing tying the image to you, because the detail screen and the history show it later.
• The audio, when you log by speaking. Same path, to become text and numbers. The audio is not stored: it is gone as soon as the answer comes back.
• The exercise description, when you type or speak a workout.
• The term you search or the barcode you scan. Our server queries Open Food Facts and the USDA database and returns the result. We query on your behalf instead of letting the app query directly — that way the external databases see our server, not your device.
• Your device language, along with the request, so the dish name and ingredients come back in your language.

Purchases

The subscription is processed by Apple or Google and managed through RevenueCat. They receive an anonymous device identifier and the subscription state — whether it is active, when it renews, whether it is in trial. Payment details stay with the store: they never pass through the app or through us.

What we do not do

• We do not sell, rent or trade data with anyone.
• We show no advertising and build no advertising profile.
• We embed no tracking, audience-measurement or session-replay SDK. There is no third-party analytics in the app.
• We do not follow you across other apps or websites.

Who processes data with us

• OpenRouter and the model provider (today, Google) — analyze the photo and the audio and return the estimate.
• Railway — hosts the server and the photo storage, in the United States region.
• Open Food Facts and USDA FoodData Central — answer the food lookups.
• RevenueCat, Apple and Google — handle the subscription.

How long we keep it

The photo stays in storage for as long as the service exists, under a random name and with no link to a person. Since there is no account, we cannot find "your" photos on our own — if you want one removed, write to support with the date and time of the log and we will locate and delete it.

Your rights

Brazil’s LGPD and the European GDPR grant you access, correction, deletion and portability. Because the app works without an account, the fastest way to exercise any of them is to write to support. We answer within seven days.

Children

ZenCal is not directed to children under 13, and we do not knowingly collect data from anyone in that age range.

Changes

When this policy changes, the effective date at the top changes with it, and the previous version stops applying from that point. Any change to what leaves your device is announced inside the app.