Privacy Policy

Last updated: March 23, 2026

1. Introduction

OnlyCal ("we", "our", "the App") is committed to protecting the privacy of its users ("you"). This privacy policy explains what data we collect, why we collect it, and how we use it.

2. Data Controller

OnlyCal
Email: contact@onlycal.app

3. Data Collected

3.1 Account Data

Email address
Password (encrypted, never stored in plain text)
Name or username
Profile photo (optional)

3.2 Nutritional Profile Data

Weight, height, age, gender
Nutritional goal (cutting, maintaining, bulking)
Physical activity level
Calorie and macronutrient targets

3.3 Food Tracking Data

Daily food entries
Meal photos (when using AI scan)
Quantities and calculated macronutrients
Daily hydration

3.4 Social Data

Posts (photos, captions, macros)
Subscriptions (followed profiles)
Likes and comments
Public username and bio

3.5 Technical Data

Device type and operating system
Push notification token
App language and theme preference

4. Purposes of Data Processing

Data	Purpose	Legal Basis
Email, password	Authentication	Contract
Nutritional profile	Calorie goal calculation	Contract
Food tracking	Core app functionality	Contract
Meal photos	AI analysis + social posts	Consent
Social data	Social features	Consent
Push token	Notifications	Consent
Technical data	App operation	Legitimate interest

5. Data Sharing

5.1 Service Providers

Service	Data Shared	Purpose
Supabase	All user data	Database, auth, storage
Google Gemini	Meal photos	AI food analysis
Expo	Push token	Notifications
Apple / Google	Email (if OAuth)	Authentication

5.2 Public Data

When you activate your social profile, the following becomes public: username, name, bio, profile photo, posts (photos + macros), follower counts, and nutritional goal.

5.3 No Data Sales

We never sell, rent, or share your personal data for advertising purposes.

6. Data Retention

Data	Retention
Active account	As long as the account exists
Deleted account	Immediate permanent deletion

7. Your Rights (GDPR)

Access — View all your data in the App
Portability — Export all data as JSON: Settings > Privacy > Export all my data
Erasure — Delete your account: Settings > Privacy > Delete my account
Rectification — Modify your info in App settings
Object — Disable notifications in settings

Contact: contact@onlycal.app

8. Security

Password encryption (bcrypt)
HTTPS/TLS encryption
Row Level Security in database
Secure authentication via Supabase Auth

9. Cookies

The mobile App does not use cookies. The web version may use technical cookies for authentication.

10. Children

The App is prohibited for children under 16. We do not knowingly collect data from minors under 16.

11. Changes

We may modify this policy. Substantial changes will be notified through the App.

12. Contact

Email: contact@onlycal.app

13. Supervisory Authority

You may lodge a complaint with the CNIL: www.cnil.fr