ClariMeal Consumer Health Data Privacy Policy
Effective date: October 13, 2026
This policy applies to consumer health data handled by the ClariMeal app, operated by Anatolii Frolov ("we"). It supplements our Privacy Policy and is provided under the Washington My Health My Data Act, Nevada's consumer health data law (SB 370) and the Connecticut Data Privacy Act. We apply it to all users in the United States.
The short version
- Your diary, weight and goals are stored on your device. We do not keep a copy.
- Meal photos are analyzed by our AI processors only with your consent. They normally delete this data within 30 days and never use it to train AI; safety or legal holds on a specific item can last longer.
- We do not sell consumer health data, do not share it for advertising and do not use geofencing.
Consumer health data we collect
- Meal photos you choose to scan, and any correction text you type for a scan. When you use Fix Results, the current estimate for that photo, including any changes you made to it, is sent with them
- Nutrition estimates derived from your photos (recognized foods, calories, macronutrients and other nutrients)
- Health information you enter in the app: sex, date of birth, height, weight and weight history, activity level, goal, target weight, food diary entries
- Values the app calculates on your device: calorie and nutrient targets, weight trends and goal projections
Sources: your own input, your camera or photo library, calculations made by the app on your device and nutrition estimates returned by our AI processors. We do not buy health data and do not collect it from other companies.
Why we collect it
- To recognize your food from a photo and estimate calories and nutrients, when you ask for a scan
- To run the app's features on your device: your diary, calorie targets, progress charts and reminders
We use consumer health data only to provide the features you request. We do not use it for advertising and do not sell it.
Where it lives and who processes it
Your diary, profile and weight history are stored on your device. Device backups and files you export can contain copies. AI scans send meal photos and correction notes through our relay to our AI processors. Fix Results also sends a summary of the current estimate, including your changes. Our relay does not store this content.
You can return to an unlogged scan after the app closes. The app keeps one result on your device, including the reduced photo copy and returned estimate. Saving the result does not upload it. The saved photo is sent for analysis again only if you choose Fix Results.
When you scan a meal (only after you agree on the consent screen), the photo, any correction text and, for Fix Results, the previous estimate are processed by service providers working under binding data processing agreements with us:
| Processor | What it does | Retention |
|---|---|---|
| Cloudflare | Relays the request without storing its content. Keeps daily scan counters and short-lived request records (whether a request was a new scan or a fix, and whether the app has a subscription) tied to a pseudonymous per-install identifier (scheduled for deletion within 48 hours) and, if you used free scans, the number of free scans and fixes used, and derives a country code from the network request to determine whether AI scanning is available in your region | Daily counters and request records are scheduled for deletion within 48 hours; service failures may delay deletion. The count of free scans and fixes used has no end date, contains no meal photos, correction text or nutrition estimates, and is not removed when you delete the app or its data |
| OpenAI | Recognizes food and estimates nutrition. If the app is set to German, also translates the dish and component names from the AI answer; only these names are sent for this | Normally deletes API data within 30 days; never used to train AI models. Items under a legal hold or flagged by its safety systems can be kept longer |
| Anthropic | Recognizes food and estimates nutrition (backup service: receives the same request when the request to OpenAI ends with an error response, unless our relay refused it because of a usage limit or because AI scanning is not available in your region) | Normally deletes API data within 30 days; never used to train AI models. Items flagged by its automated safety systems can be kept longer under its safety policies |
Separately, the app sends usage events to Amplitude to understand how people use the app. These events contain no food names, calories, diary entries, weight values or photos. They include setup step numbers, subscription screen activity, AI consent choices, badge celebration settings and weekly app activity. Subscription events identify the screen they came from, including the camera, scan result, progress, summary or summary history screen. Setup skips some steps when you choose to keep your current weight. The step numbers can reveal that choice. Section 2.6 of our Privacy Policy explains this analytics processing and how to turn it off.
We do not share consumer health data with anyone else, and we do not have affiliates. Our processors act on our instructions and cannot use your data for their own purposes.
Your rights
If you are covered by one of the laws above, you have the right to:
- Know and access the consumer health data we collect. Your diary, profile, weight history and photos are viewable in the app on your device. You can export your diary and profile as a file from Settings; the export file contains your entries, profile and goal history but not the photo files, which stay in the app. You can open an unlogged scan result from the Today screen. It is not included in the export file. Correction text you type for a scan is sent for processing and is not saved in the app afterwards. For any data held by our processors, our response depends on their access procedures, and we will tell you what we found
- Withdraw consent for AI photo analysis at any time: Settings, AI photo analysis. New scans stop immediately until you agree again. Turning it off also deletes an unlogged scan result. Withdrawal works on this device and does not change device backups made earlier. The app asks for consent again when a restored consent record does not match this installation. If a restore also brings back the matching installation marker, the saved consent may remain effective
- Delete your consumer health data. You can delete any entry, or everything at once with Delete All Data in Settings, or delete the app. You can discard an unlogged scan result, and Delete All Data removes it. The app cannot delete data from your Google or Apple device backups. You can delete backups in your device's backup settings. The count of free scans and fixes kept by our relay is not removed by deleting the app or its data. This record is linked to a random app identifier, which the app does not display. We cannot locate it using your name or email address alone. We will assess any additional information you provide to help us locate the record and verify that it concerns you. If we cannot verify your request, we will explain why. We will also explain how to appeal. When you send us a verified deletion request, we notify each of our processors within 30 days and instruct them to delete data covered by the request. Separately, providers normally delete API data within 30 days of a scan; safety or legal holds may last longer
- Not be discriminated against for exercising these rights. The app works the same either way
To exercise a right or ask a question, email us at [email protected]. We will confirm we received your request, and may need to verify that it concerns your device's data. We respond within 45 days. If a request is unusually complex we may extend once by another 45 days and will tell you why within the first 45.
Appeals
If we decline your request, we will explain how to appeal. We answer appeals in writing within 45 days. If you are not satisfied, you can contact your attorney general:
- Washington: atg.wa.gov/file-complaint
- Nevada: ag.nv.gov
- Connecticut: portal.ct.gov/ag
Retention and backups
Our relay does not store meal photos, correction text or nutrition estimates. It stores the quota records described above. Daily scan counters are scheduled for deletion within 48 hours. The count of free scans and fixes used has no end date and is not removed when you delete the app or its data. Service failures may delay deletion. If any consumer health data ever ends up in an archived or backup system on our side, we delete it within 6 months of your verified deletion request, as the law allows.
On your device, an unlogged scan result is deleted when you log or discard it, turn off AI photo analysis, complete withdrawal of consent for on-device health data or delete all data. It is also deleted if its saved consent details no longer match your current consent. It expires 7 days after the app first saves its reduced photo copy. Fix Results does not restart this period. The app checks for expired results when it starts or returns to the foreground. Files may remain longer while the app is closed or if deletion fails. Failed deletion is retried during a later check.
Android leaves unlogged scan results out of Google Auto Backup. On iOS the app marks them to be left out of device backups, but Apple does not guarantee this.
What we never do
- No sale of consumer health data, and no sharing for advertising or marketing
- No geofencing and no precise location: the app never asks for your location. Our relay derives only a country code from the network request to check where AI scanning is available
- No use of your photos or diary to train AI models
Changes and contact
If this policy changes, we will update it at this address and change the effective date.
Anatolii Frolov · [email protected]