Privacy Policy
At PureCal: No-BS Calorie AI ("PureCal", "we", "our"), developed for Android under package name com.purecal.calorietracker, we believe that your dietary habits, health stats, and personal nutritional journey belong exclusively to you. PureCal is built from the ground up as an offline-first utility with zero dark patterns, zero invasive tracking, and zero mandatory cloud accounts.
1. Offline-First SQLite Architecture & Zero Mandatory Accounts
PureCal operates entirely without requiring account registration, social login, email collection, or continuous server connections. All core application features:
- Daily food logs, custom meals, and portion records,
- Offline USDA Nutrition Database (FTS5 SQLite full-text search),
- OpenFoodFacts barcode caching and manual lookup,
- Meal Prep templates and multi-day calendar batch distributions,
- Streak Freeze shield calculations and custom macro goals,
are stored 100% locally on your Android device inside an isolated SQLite database powered by drift. We do not operate a remote user profile database, nor do we sell, monetize, or harvest user telemetry.
2. On-Device Encrypted Backups & Zero-Network PDF Export
- Local Cryptographic Backups: PureCal provides user-controlled JSON backup import/export. Exported archives are protected using industry-standard key derivation with
PBKDF2-HMAC-SHA256and encrypted withAES-256-GCMauthenticated encryption. Your backup passphrase is never transmitted over any network. - Zero-Network Clinical PDF Reports: All exported 7-day and 30-day clinical macro and micronutrient PDF summaries are synthesized strictly on-device using local vector drawing and document rendering libraries. No health metrics leave your device when generating or previewing reports.
🌿 Android Health Connect Limited Use Policy Statement
PureCal requests access to Android Health Connect solely to improve your daily energy balance accuracy. We strictly comply with Google Play's Health Connect Permissions and Limited Use Requirements:
- Permitted Data Scopes: PureCal requests read-only permission strictly for
Steps(Daily Steps count) andActiveCaloriesBurned(Active energy expenditure excluding basal metabolic rate). PureCal explicitly never requestsTotalCaloriesBurned, heart rate, sleep, reproductive health, or location data. - Strict Client-Side Processing: Health Connect data is queried on-device via Android Health Connect API to adjust your remaining calorie allowance according to your selected rollover setting (Off, 50%, or 100%). Health Connect data is never uploaded to our servers, never sent to external third parties, and remains inside your device's local database.
- No Secondary Uses: PureCal never transfers, sells, licenses, or provides Health Connect data to advertising platforms, data brokers, insurance providers, or information resellers.
- No AI Model Training: PureCal never uses Health Connect data to train, fine-tune, or validate artificial intelligence, machine learning, or large language models.
- Retention & Revocation: Health metrics are stored solely in your local SQLite cache for historical dashboard rendering. You can revoke access at any time in Android Settings > Security & privacy > Health Connect > PureCal.
3. Multimodal AI Recognition (Camera & Voice Input)
PureCal features optional AI-powered meal recognition via meal photos (AI Snap) or short audio descriptions (<15 seconds):
- Stateless Transient Processing: When using standard AI recognition, compressed meal images or audio clips are transmitted over encrypted TLS/HTTPS directly to a stateless Google Cloud Platform (GCP) Cloud Run proxy executing Google Vertex AI (
gemini-3.8-flash/gemini-3.5-flash-lite). Images and audio are parsed in-memory solely to produce structured nutritional JSON data (item names, estimated grams, calories, protein, carbs, fat, and fiber) and are immediately discarded. PureCal does not store, log, or train on your food photos or voice recordings. - Bring Your Own Key (BYOK) Hardware Isolation: Users who configure their own Google Gemini API key communicate directly with Google's API endpoints (
generative-language.googleapis.com) without routing through any intermediary server. Your custom API key is encrypted and stored in your device's hardware-backed Keystore viaflutter_secure_storage.
4. Google Play Billing & AdMob Rewarded Ads
- Google Play Billing: PureCal integrates official Google Play In-App Billing for optional Pro and Lifetime purchases. Payment information, credit cards, and billing addresses are handled directly by Google Play. We only verify the cryptographic purchase token via Google Play Developer API without storing credit card details.
- Opt-in Rewarded Ads: PureCal does not display intrusive banner ads, interstitial popups, or auto-playing videos. Users on the free tier may voluntarily choose to watch a Google AdMob Rewarded Video to earn additional AI recognition scans (+2 scans per ad). AdMob operates according to Google Mobile Ads SDK privacy guidelines.