简要说明：大部分饮食记录保存在你的设备上。使用 AI 拍照分析时，照片会在设备上压缩，再通过加密连接发送至我们的服务接口和实际处理请求的第三方 AI 服务。
01 / 本地保存
数据收集与保存
饮食记录、热量数据、个人资料和食物照片默认保存在你的设备上。你无需创建 Calmorie 账号。
本地餐食照片和详情按你选择的 3、7 或 30 天保留；日期、菜名和热量摘要最多保留 36 个月，除非你提前删除。
02 / 照片去向
AI 照片分析
使用拍照分析时，食物照片会压缩后通过加密连接发送至我们的服务接口，并转发给第三方 AI 服务，用于识别食物和估算热量、营养。
拍照分析可能使用阿里云百炼 DashScope/Qwen或火山引擎方舟/豆包。我们只向实际处理该次请求的服务发送压缩后的食物照片和分析指令。
我们不会主动发送你的姓名、手机号、联系人、位置或 Apple 健康数据，也不会把照片用于广告画像或出售。第三方 AI 服务会按其服务条款和隐私政策处理请求数据。
首次照片分析前，App 会说明数据去向并征求同意。你可以选择稍后再说；不同意时不会上传照片。
你可以随时停止使用拍照分析。只有在你主动选择照片并发起分析时，App 才会上传新的照片。
03 / 服务运行
设备标识、订阅与事件记录
为了执行每日 10/30 次额度和防滥用，服务端会接收随机设备标识、时区和经 Apple 验证的订阅信息，不接收你的 Apple ID 密码。
我们的服务端不会记录照片内容、订阅凭证全文或授权信息；可能保留不含这些内容的安全、错误和额度事件记录。第三方 AI 服务按其政策处理请求数据。
04 / Apple 服务
iCloud 与 Apple Health
如果开启 iCloud 同步，日期、菜名和热量摘要会通过 Apple iCloud 在同一 Apple ID 的设备间同步；照片、个人资料、健康数据和分析次数不会上传到 iCloud。
Apple Health 步数只用于估算活动量，保存在设备本地，不会随照片发送给 AI，也不会上传到我们的服务器。
05 / 系统权限
我们会申请哪些权限
- 相机：拍摄食物照片，用于记录和分析。
- 相册添加：把分享图片保存到相册。
- 健康数据：读取步数，帮助估算日常活动量。
你可以随时在系统设置中管理这些权限。
06 / 你的选择
数据删除
你可以在历史记录中逐条删除记录。开启 iCloud 同步时，删除会同步到使用同一 Apple ID 的其他设备；本机对应照片也会一并删除。
如需咨询或请求删除服务端相关记录，请通过下方邮箱联系我们。能否定位某条事件记录，取决于你能提供的请求时间等必要信息。
In short: most meal data stays on your device. When you use AI photo analysis, the photo is compressed on your device and sent over an encrypted connection to our service and the third-party AI service handling the request.
01 / Local storage
Data collection and storage
Meal records, calorie data, profile details, and food photos are stored on your device by default. You do not need to create a Calmorie account.
Local meal photos and details are kept for the 3, 7, or 30 days you choose. Dates, meal names, and calorie summaries are kept for up to 36 months unless you delete them sooner.
02 / Photo processing
AI photo analysis
When you use photo analysis, food photos are compressed, sent over an encrypted connection to our service endpoint, and forwarded to a third-party AI service to identify foods and estimate calories and nutrients.
Photo analysis may use Alibaba Cloud DashScope/Qwen or Volcengine Ark/Doubao. We send the compressed food photo and analysis instructions only to the service handling that request.
We do not intentionally send your name, phone number, contacts, location, or Apple Health data. We do not use your photos for ad profiling or sell them. Third-party AI services process request data under their own terms and privacy policies.
Before the first photo analysis, the app explains where the data goes and asks for your consent. You can choose Not Now; no photo is uploaded unless you agree.
You can stop using photo analysis at any time. The app uploads a new photo only when you actively choose one and start an analysis.
03 / Service operation
Device identifier, subscriptions, and event logs
To enforce the 10/30 daily allowance and prevent abuse, our servers receive a random device identifier, time zone, and Apple-verified subscription information. We never receive your Apple ID password.
Our servers do not log photo contents, full subscription credentials, or authorization data. We may keep security, error, and allowance event logs that exclude those items. The third-party AI service processes request data under its own policy.
04 / Apple services
iCloud and Apple Health
If you enable iCloud sync, dates, meal names, and calorie summaries sync through Apple iCloud across devices using the same Apple ID. Photos, profile details, Health data, and analysis allowances are not uploaded to iCloud.
Apple Health step counts are used only to estimate activity. They stay on your device and are not sent with photos or uploaded to our servers.
05 / System access
Permissions we may request
- Camera: take food photos for logging and analysis.
- Photos add-only access: save shared images to Photos.
- Health data: read step count to help estimate daily activity.
You can manage these permissions at any time in system settings.
06 / Your choices
Data deletion
You can delete records individually from History. When iCloud sync is on, deletions sync to other devices using the same Apple ID; the corresponding photo on this device is deleted as well.
To ask about or request deletion of related server records, contact us below. Whether a specific event can be located depends on necessary details such as the approximate request time.