Calkub Privacy Policy
Last Updated: 10 November 2026
This Privacy Policy ("Policy") describes how Arctis Labs ("Calkub", "we", "our" or "us") collects, uses, discloses and otherwise processes your personal information when you use the Calkub mobile application and the website calkub.app (together, the "Services"), and the rights and choices you have. This Policy forms part of our Terms of Use.
Calkub is built so that most of your information never reaches us. Your meal log, meal photos, weights, targets and settings are stored on your device, and the Services work fully without an account.
Personal Information We Collect
Information you provide directly
- Meal photos you choose to analyse, and any hint you type with them, when you tap scan. Our service receives the photo with this install's random identifier, the subscription provider's random user identifier and the app's security check, passes the photo to our AI model provider, and does not keep it. For each scan it records that the call was made: the time, this install's identifier, a one-way hash of your IP address, the model used and whether it was a retry with another model, how many tokens it took, how long it took, whether you typed a hint (never the hint itself), whether it worked and, if it didn't, the reason it failed.
- Barcode numbers of products you scan.
- Nutrition label photos you scan: the figures on the label are read on your device. If you subscribe to Calkub Premium, the same photo is also sent once to our service, which passes it to our AI model provider only to read the product's name as printed on the package, so the app can offer it as the food's name. The AI model provider receives the photo without your name, account or any other identifier. The name comes back to your phone and is shown only to you: our server does not store it or share it with anyone, and does not keep the photo. Our service receives the photo with the same app details as a meal photo (this install's random identifier, the subscription provider's random user identifier and the app's security check), and records only that the call was made: the time, this install's identifier, a one-way hash of your IP address, the model used and whether it was a retry with another model, how many tokens it took, how long it took, whether it worked and, if it didn't, the reason it failed.
- Nutrition labels you photograph for a barcode we couldn't find: the label is read on your device, and when you log it, only the barcode number and the figures read from it (energy, protein, carbohydrate, fat, sugar, sodium and serving size) are sent to us. Never the photo, never the product's name and never any text you type. They are shown to anyone who scans the same barcode. They are stored with a one-way code made from this app's install identifier using a secret key only our server holds, which we use only to limit how many labels and reports one install makes and to remove its labels if they are wrong. We don't link that code to your install identifier, and we do not store the identifier, your IP address or your account with them. If a label is reported as wrong or removed, the reports and the removed label's figures are kept for 90 days, then deleted.
- Support messages: the topic, your message, the language you used, and an email address if you choose to give one so we can reply.
- Why you turned off renewal, if you answer the one question Calkub asks when you open the app after switching off your subscription's renewal: your answer (one of five), which plan you are on and the day, and, only if you choose "Something else", the words you type (up to 200 characters). The app sends them with this install's random identifier, the subscription provider's random user identifier and the app's security check, which we use only to check the request and to limit how often one install can answer. We store the answer without any of those identifiers, your IP address, your account or anything else that identifies you, and delete it two years later. If you answer that the price is too high and a lower price is available to you, the app asks our service to sign Apple's offer, sending the same three things; nothing from that request is stored except a daily count of requests under a one-way code, deleted after two days. We never store the subscription provider's user identifier from either request.
- Your name, if you choose to use Sign in with Apple. It is kept on your device.
- Calorie calculator: the calculator on calkub.app works entirely on your device and sends us nothing you type into it. Plan codes made up to 22 October 2026 still hold the answers they were made with (gender, age, height, weight, workouts per week, goal, weekly pace and goal weight, with the page's language, and no name or other identifier) until they expire; see "How We Retain Your Information".
Information collected automatically
- Device information sent with a support message from the app: app version, iOS version and device model (for example "iPhone17,2", never your device's name).
- Request information that our hosting provider processes to deliver the website and our services, such as IP address, browser type and time of request, kept in short-lived logs.
- A one-way hash derived from your IP address, which cannot be turned back into the address, used to limit repeat support submissions and screen for spam. We do not store your IP address itself.
- Photo scan results: for each photo you scan, the dishes and calorie estimate our model gave and, when you save or delete the result, the calories and dish name you kept. They are stored under a random number made for that one scan, with no install identifier, IP address, account or other identifier, and we do not link them to you or to your other scans. Never the photo or the hint you typed.
- How often you correct a photo scan: the app counts, on your device, how many photo scan results you saved from the result screen and how many of those you changed first (the calories or the dish). It sends our service a note once, the first time you correct one; once at your fifth saved result, saying how many of those five you corrected; and once if you log anything in the app, however you add it, two weeks or more after that fifth result. Each note carries its name, this install's random identifier and the subscription provider's random user identifier, of which we keep only a one-way code (see “Which install a subscriber uses” below). The app also sends the two counts to the subscription provider below. Never the dish, the calories, the photo or when you scanned, and we do not match any of it to the photo scan results above. We use it only to see whether people who often have to correct the estimates stop using Calkub, so we can fix what the model gets wrong.
- A reminder after you subscribe: if you already allow Calkub's notifications and haven't scanned a meal photo in the day after paying for a subscription, the app schedules up to two notifications on your device, and cancels them when you scan. It sends our service a note once when it schedules them and once if you tap one, each with its name, this install's random identifier and the subscription provider's random user identifier, of which we keep only a one-way code (see below).
- Which install a subscriber uses: the app also sends our service a note, once each, as you reach each onboarding screen, finish setting up, first see the subscription screen and use your free scan, alongside the notes above. Each note, and each scan request, carries this install's random identifier and the subscription provider's random user identifier. From the latter we store only a one-way code made with a secret key only our server holds, next to this install's identifier; never the identifier itself. Only our server, holding the key and reading the subscription provider's records, can tell whose code it is. We use it only to see, when someone stops their subscription, whether their scans worked and how much they used Calkub before, so we can fix what makes people leave. It is never linked to the photo scan results above, and is deleted 90 days after the last request that carried it.
Information from third parties
- Apple: your name if you use Sign in with Apple, and the status of any subscription you buy through the App Store.
- Apple Health, if you allow it: see "Health Information" below.
How We Use Personal Information
We use personal information to:
- identify the dishes in a photo you submit and estimate their nutrition;
- read the product name on a nutrition label photo you scan;
- look up the nutrition of a product you scan;
- respond to your support messages and fix the problems they report;
- let the app fill in your calculator answers when you enter a plan code made up to 22 October 2026, and count how many are used;
- measure how accurate our photo estimates are, and improve them;
- protect the Services against abuse, spam and misuse; and
- comply with legal obligations and enforce our Terms.
We do not sell or rent your personal information, and your meals, photos, weight and health data are never used for advertising. The one exception to “no advertising use” is measuring our own ads on Meta: see Cookies and Tracking.
How We Disclose Personal Information
We share personal information only with the following, and only as needed to provide the Services:
- Hosting and infrastructure providers that run our website and services.
- A third-party AI model provider that analyses the meal photos you submit and reads the product name on the nutrition label photos you scan. Photos are sent without your name, account or any other identifier, are not kept by our servers, and are processed under the provider's service terms.
- A public product database, which receives only the barcode number you scanned. If it doesn't have the product, our own service is asked for the same barcode number.
- Customer support tools that deliver your messages to our support inbox.
- Meta (advertising measurement): on calkub.app only if you accept cookies; in the app as described in Cookies and Tracking, with the advertising identifier only if you allow tracking.
- A subscription management and analytics provider, which receives the App Store record of any subscription you buy (the plan, price, dates, renewals, refunds and your App Store country) with a random identifier for this install of the app, your answer to "Where did you hear about Calkub?" if you gave one, how many photo scans you saved from the result screen and how many of those you corrected, the reason you gave for turning off renewal if you answered (one of five answers, never your own words), and, if you installed Calkub from an ad in App Store search results, Apple's record of which ad that was. It does not receive your name, email, meals, photos or health data. We use it to see how many free trials become subscriptions, which ways of finding Calkub lead to them, and to answer questions about a charge. It also passes trial and subscription events to Meta to measure our ads (see Cookies and Tracking).
- Apple, which handles payments, Sign in with Apple, iCloud and Health under its own privacy policy.
- Authorities or other parties where the law requires it, or to protect the rights, safety and property of our users, the public or us.
- A successor, if Calkub is involved in a merger, acquisition or sale of assets, in which case this Policy continues to apply to your information.
Our service providers may use your information only to provide their services to us, and must protect it to a standard at least equal to this Policy.
Health Information
If you switch on Apple Health, Calkub reads two kinds of data: workouts and active energy, so it can add them back to your daily calorie budget. Calkub never writes to Health. Health data is read on your device, is never sent to us or to any third party, and is never used for advertising or marketing. You can turn access off at any time in the Health app.
International Transfers of Personal Information
Our service providers may process personal information outside Thailand, including in Singapore and the United States. Where information is transferred abroad, we rely on providers that protect it to a standard at least equal to this Policy and to applicable law.
How We Protect Your Information
Information sent from the Services travels over encrypted connections. Our servers do not keep the photos you submit, and do not write your photos, messages or email address to their logs. No method of transmission or storage is completely secure, but we work to protect your information and limit what we hold.
How We Retain Your Information
- On your device: kept until you delete it. Deleting the app deletes it.
- iCloud backup (optional, off by default): stored in your own private iCloud database, which we cannot access. Remove it under Settings → [your name] → iCloud → Manage Storage → Calkub.
- Support messages: kept only as long as needed to handle your request and meet legal obligations.
- Plan codes made up to 22 October 2026, and the calculator answers stored with them: deleted 90 days after the code was made.
- Photo scan results: deleted 14 days after the scan.
- Answers about turning off renewal: deleted two years after the day they were given.
- Records of scan requests (meal photos and nutrition label names: the time, this install's identifier, a one-way hash of your IP address and the other details described above): deleted 90 days after the request.
- Which install a subscriber uses (the one-way code and this install's identifier): deleted 90 days after the last request that carried it.
- Whether this install has used its free scan (this install's identifier and the identifier of the app's security key): kept for as long as Calkub offers a free scan, so each phone gets it once.
- Request logs kept by our hosting provider are short-lived.
Your Privacy Rights
Under Thailand's Personal Data Protection Act B.E. 2562 (2019) and other applicable laws, you may have the right to access, correct or delete the personal information we hold about you, to object to or restrict its processing, to receive a copy of it, and to withdraw any consent you have given. You also have the right to complain to Thailand's Office of the Personal Data Protection Committee.
To exercise a right, email hello@calkub.app or contact us through our support page. Include the reference number of any support message it concerns. Most of your information lives on your own device, where you control it directly.
Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to This Policy
We may update this Policy as the Services change. When we do, we will update the date at the top of this page.
Contact Us
Arctis Labs is the controller of the personal information described in this Policy. For any question or request about your personal information, email hello@calkub.app or use our support page.