Privacy Policy

This privacy policy applies to the Zero Cal app for mobile devices and web browsers and to related services operated by Oleg Filimonov. Together, these are the "Application." This policy refers to Oleg Filimonov as the "Service Provider."

Information collection and use

The Application collects information when you download or use it. This may include:

Your device's Internet Protocol address
The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
The time spent on the Application
Your operating system

Health data, Health Connect, and Apple Health

Zero Cal accesses and collects health and fitness data to provide calorie tracking, nutrition logging, and weight and activity trends. Connecting Health Connect on Android or Apple Health on iOS is optional. Zero Cal requests your permission through the operating system before accessing these services. You can use food logging without connecting either service.

With your permission, Zero Cal accesses the following data:

Active calories burned: Zero Cal reads daily active energy totals to show calories burned alongside the food calories you log.
Weight: Zero Cal reads body weight measurements and their dates to show your weight history and trends in Progress.
Apple Health activity summaries: On iOS, Zero Cal also reads active energy and the active energy goal from activity summaries to show progress toward your activity goal.
Nutrition and dietary energy: Zero Cal writes the calories from meals you log to Health Connect nutrition records or Apple Health dietary energy records. On Android, these records include the meal name, meal type, calories, and time. On iOS, they include calories and time. Zero Cal updates its exported records as your meal log changes. It does not read nutrition records from either service.

Activity and weight data read from Health Connect or Apple Health are processed on your device and may be cached locally for up to seven days. Zero Cal does not upload these imported records to its servers or send them to advertising, analytics, or AI providers. The connection preference is stored on your device. The general server retention periods below do not apply to these imported records.

Separately, Zero Cal collects the food descriptions, meal photos, meal times, calories, macronutrients, and nutrition goals you enter or generate in the Application. Your meal entries, calorie and macronutrient values, and nutrition goals are stored with your account on our servers to provide your food diary, nutrition totals, and progress across devices. When you use AI food analysis or nutrition features, relevant food descriptions, photos, or meal details are processed through Vercel AI Gateway and its model providers to produce the requested results. This is separate from importing activity and weight records from Health Connect or Apple Health.

Zero Cal does not sell health data or use it for advertising, marketing, or data brokerage. Health Connect and Apple Health data are used only for the health and fitness features described here. Exported records are stored in the health service you connect and may be accessible to other apps you authorize through that service. The general third-party sharing provisions below do not authorize sharing imported health records with advertising, analytics, or AI providers.

You can stop future health access and exports by turning off the connection in Zero Cal settings. You can revoke individual permissions in Health Connect under App permissions → Zero Cal, or in Apple Health under Apps → Zero Cal. Turning off the connection clears Zero Cal's cached imported health records. It does not delete records already stored in Health Connect or Apple Health. You can review and delete those records in the relevant health service. Clear the app's local storage or uninstall it to remove remaining local cached data.

You can delete meal entries in Zero Cal or delete your account in account settings to remove the associated server data. You can also request deletion or ask questions about health data at themraction@gmail.com. Account deletion does not delete records already exported to Health Connect or Apple Health; manage those separately in the health service.

Cookies and tracking technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

Your rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at themraction@gmail.com.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at themraction@gmail.com.

Artificial intelligence

The Application uses artificial intelligence (AI) for some features. AI requests pass through Vercel AI Gateway to the selected model provider. When you use web search, the Application sends the search query and relevant context to Exa. AI features may process user data to provide personalized content, recommendations, or automated results. This processing follows this privacy policy and applicable law. Contact the Service Provider if you have questions about AI features or data processing.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

To provide the Application, the Service Provider may ask for personally identifiable information such as your email address, user ID, name, profile photo, or phone number. The Service Provider retains and uses this information as described in this policy.

Third-party access

The Application periodically sends aggregated, anonymized data to external services to help improve the service. The Service Provider may also share information with third parties as described below.

International data transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

The Application uses third-party services with their own privacy policies:

The Service Provider may disclose User Provided and Automatically Collected Information:

As required by law, such as to comply with a subpoena, or similar legal process
When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
With trusted service providers that work on the Service Provider's behalf, cannot use the disclosed information for their own purposes, and agree to follow this privacy statement

Opt-out rights

You can stop further collection of information from your mobile device or computer by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

You can stop further collection of information from your device by ceasing to use the website. Ceasing to use will stop the website from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at themraction@gmail.com.

Data retention policy

The Service Provider keeps personal data for as long as it is needed for the purposes described here:

User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
Data required for legal compliance: Retained as long as required by applicable law

You may ask the Service Provider to delete your personal data unless the law requires it to be kept. To request deletion of data you submitted through the Application, email themraction@gmail.com. Some data may be necessary for the Application to work.

Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where applicable law requires consent from a parent or guardian, children may not use the Application without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 in violation of applicable law. If the Service Provider learns that a child supplied personal information, it will delete that information from its servers. A parent or guardian who knows that a child supplied personal information should email themraction@gmail.com.

Security

The Service Provider uses physical, electronic, and procedural safeguards to protect the information it processes and stores.

Data breach notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at themraction@gmail.com.

This privacy policy is effective as of 2026-10-22

Your consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

Contact us

For questions about privacy or these practices, email the Service Provider at themraction@gmail.com.

This privacy policy was created with App Privacy Policy Generator.