kcalPrivacy policy
Contact karlis@kane.pe about your information or this policy. This policy describes the current, access-limited service.
Information we process
- Account and sign-in: an internal account ID, your Google account identifier and verified email for account linking and access checks; OAuth client registrations, authorization grants and token-related records.
- Food diary: food names, descriptions you provide, quantities, nutrition values, dates, sources, and estimate confidence or ranges.
- Weight and goals: readings, proposed and active nutrition goals, and the inputs used to calculate them. Optional inputs can include age or date of birth, height, activity level, formula sex, body-fat percentage, and safety-related information you supply.
- Preferences and history: timezone, units, reminder settings, saved foods, changes and undo history, and reminder status.
- Operations: request identifiers, tool names, timing, status, error codes and maintenance counts. Cloudflare processes network requests as the hosting provider.
Food, body weight and safety-related information can be sensitive. Supply only information needed for the tracking or calculation you request. Do not submit medical records, diagnoses, prescriptions, government identifiers, passwords or payment details in diary entries.
Why we use it
We use this information to authenticate you, keep your records separate from other accounts, save and calculate your diary, provide reports and requested goal proposals, support corrections and undo, and operate and troubleshoot the service. Optional profile fields are not required for basic meal logging.
Photos and conversation content
Your assistant interprets photos. kcal's tools receive structured values, not image files, image URLs or the full conversation. Photos and conversations kept by your assistant are governed by that provider's policies. Free-text descriptions you send to kcal become part of your saved records.
Service providers and sharing
- Cloudflare: hosts the Worker, D1 database, KV authorization storage and operational logs.
- Google: provides sign-in and account identity. The sign-in flow uses a short-lived state cookie to protect the authorization request.
- Open Food Facts and USDA FoodData Central: receive food-search queries when used. kcal does not add your account identifier, email or profile to those queries.
- Your connected assistant: receives the tool results needed to answer your request, including diary and report data.
The service does not include advertising trackers on these pages. Application logging is designed to exclude diary content, weights, profile values and authentication secrets. Provider infrastructure may process network metadata separately.
Retention and deletion
Diary, profile, saved-food and goal records have no automatic expiry in the current service. Removing a food or weight entry is a soft deletion: the entry and mutation history remain available for undo. Disconnecting the plugin does not erase those records.
OAuth access tokens are issued for one hour and refresh tokens for up to 30 days; refreshes rotate tokens. Expired authorization data is periodically purged. These token lifetimes do not determine how long diary records are kept.
For permanent deletion or account closure, contact karlis@kane.pe. This requires an operator-assisted process and an identity check; there is no automatic account-erasure tool. We will explain what can be removed and any backup or operational retention that applies. Do not assume erasure is complete until you receive confirmation.
Backups and infrastructure logs follow the hosting account's retention settings. The current service does not publish a fixed retention period for those copies. Contact us before providing data if you need a specific retention commitment.
Your controls
Ask the plugin to export your records as JSON or CSV, correct an entry, or remove it from active totals. You may skip optional profile fields and stop using or disconnect the plugin at any time. Contact us to request access, correction, restriction or permanent deletion, or to raise a privacy concern. Rights available under applicable law are not limited by this policy.
Changes
Updates appear on this page with a revised date. Review it before supplying new categories of information or resuming use after a change.