Your information

Cayl Privacy Policy

Effective date: 15 October 2026

Cayl is a nutrition tracker for adults. This policy explains how Cayl handles information when you create an account, record meals or weight, use AI features, or subscribe.

Operator: Shabib Alazemi, Kuwait

Privacy and support contact: cayl@cayl.app

Published policy: https://cayl.app/privacy

Information we process

• Account information: your account identifier and the name and email address Apple shares when you choose Sign in with Apple. Apple may provide a private relay email address. You can edit your display name.
• Profile and nutrition information: the birth date, sex, height, weight, activity level, goals, calorie and nutrient targets, coaching tone and preferences you enter. From setup we also keep the answers you pick about what usually gets in the way and what is usually on your table, and a short summary of your goal (such as your goal weight, estimated pace and target month); you can view and delete these notes in You → What Cayl knows about you. If you record weigh-ins, we keep their dates and values. If you record body composition (InBody) tests, we keep their dates, the numbers you save (such as weight, body fat, skeletal muscle, fat mass, visceral fat level, body water, basal metabolic rate and score) and the analyzer model when one was read. We also keep the app language and relevant calendar preferences. Meal requests carry your app language and your device's region setting (for example, Kuwait), not your location, so estimates and nutrition searches reflect your home market.
• Meal information: descriptions, dates, photos you submit, estimated or manually entered calories and nutrients, saved meals, and corrections. Meal history is linked to your account so it can be restored on another device.
• Voice recordings: when you choose voice logging, your recording is sent for transcription. The resulting text is shown for review and becomes meal information only when you submit it. Cayl does not save voice recordings in its server database or photo bucket. A failed recording may remain temporarily on your device so you can retry or discard it.
• Subscription information: an account identifier, product identifiers, entitlement and transaction status, and relevant purchase and expiration dates. RevenueCat also receives your device's vendor identifier (IDFV) with billing-service requests. Apple handles payment details; Cayl does not receive your payment card details.
• Operational information: request identifiers, IP address, feature/model names, timestamps, processing duration, token counts, success/failure status, and service logs needed to operate, secure, and troubleshoot the service and limit usage. These records can be linked to your account.
• Your choices: the version and time of your AI-sharing permission, and information needed to process account deletion. Where Apple supplies revocation credentials, these are encrypted while awaiting revocation.

How we use information

We use information to maintain your account, calculate and display nutrition targets, keep your records synchronized, estimate or correct meals when you ask, provide translations and summaries, manage subscriptions, prevent abuse, handle support requests, and delete accounts. Nutrition estimates and targets are general information, not medical advice.

RevenueCat uses subscription information for receipt validation, entitlement management and subscription analytics.

We do not sell your personal information. Cayl does not include advertising SDKs or use your nutrition information for advertising or cross-app tracking.

AI features and your permission

Before AI processing, Cayl asks for your explicit permission and explains what is shared and who receives it. AI features include meal estimation, photo interpretation, reading the numbers from a photo of a body composition (InBody) result, transcription, corrections, translations, and daily or weekly summaries.

When you allow these features, the information needed for the request can include a meal photo or voice recording, a photo of a body composition result you choose to scan, meal descriptions and corrections, relevant meal history, nutrition goals, summaries of your records, or your app language and region setting. Not every request includes every category. A body composition result photo is used only to read its numbers: it is not saved by Cayl, and nothing from it is kept until you review the numbers and save them. Result sheets can print personal details such as a name or ID; Cayl asks the model not to return them, and you can crop or cover them before scanning.

• OpenRouter routes AI requests to model services. The eligible service companies are Google and OpenAI. Text, photo and voice requests are restricted to these companies' own serving providers. Voice recordings are transcribed only by Google's Gemini on the same restricted route; no other transcription service is used.
• Exa receives food-related search queries to locate nutrition sources. Search results may be used as evidence for an estimate.

For text, photo and voice AI requests, Cayl requests routes that prohibit training and provide zero data retention. Cayl does not maintain a server-side recording archive. Providers' applicable terms, security requirements and legal obligations can affect retention, so these controls are not a promise that every third party retains no information. Avoid including information unrelated to your meal in descriptions or recordings, and check photos before sharing them.

Meal logging uses AI, so it is unavailable until you allow sharing. You can decline, allow, or turn sharing off in You → AI & Privacy, or in Account → AI data sharing on the subscription screen. Turning it off stops new AI requests from the app; it cannot recall a request already sent. Existing records and account controls remain available. Subscription requirements still apply to paid features. If you turn sharing off while offline, the app blocks new AI requests immediately and retries saving the revocation when it reconnects. Other devices should reconnect to receive your latest account choice.

Other service providers

• Supabase provides account authentication, database and photo storage, and backend functions. Cayl's configured database region is Mumbai, India.
• RevenueCat processes your Cayl account identifier, device vendor identifier and subscription records to determine access, synchronize purchases and provide subscription analytics. It does not need your meal photos, recordings, or nutrition profile for billing.
• Apple provides Sign in with Apple, App Store purchases and subscriptions, and system permission controls. Apple's handling of its own account and payment information is governed by its policies.
• Microsoft 365 hosts the Cayl support mailbox (cayl@cayl.app). Messages you send to support, and our replies, are stored there.

We may also disclose information when reasonably necessary to comply with applicable law or a binding legal request, protect rights and security, or complete a business transfer with appropriate protections and notice where required.

Each service provider named in this policy (OpenRouter and the model companies it routes requests to, Exa, Supabase, RevenueCat, Apple, and Microsoft as the host of our support mailbox) may use the information it receives from Cayl only to provide its service to Cayl, and is required to protect that information with the same or equal protection as described in this policy.

Where information is processed

The database, AI, search, authentication, billing, and support services may process information outside your country. The database is configured in India; AI routing can involve other countries. Your AI-sharing choice applies to the processing described above. We are responsible for maintaining appropriate contractual and other safeguards for transfers where applicable law requires them.

Retention and deletion

• Account, nutrition, meal, saved-meal, weigh-in and body composition records remain while your account is active, unless removed through the app. Uploaded meal JPEGs are retained in private storage; Cayl does not currently promise automatic original-photo deletion after analysis. Deleting a meal hides it using a synchronization tombstone, so account deletion is the route for permanently erasing the associated stored data.
• Cached photo descriptions are eligible for cleanup after 30 days, AI request reservation records after 7 days, and AI usage records after 90 days. Cleanup runs through scheduled backend maintenance; these periods are cleanup thresholds, not a guarantee of deletion at an exact second.
• You can initiate account deletion in the app at You → Delete Account, or at Account → Delete Account on the subscription screen. The deletion process blocks further account writes and removes account records and stored photos. Provider outages can delay completion; necessary cleanup and revocation work is queued for retry. Limited deletion identifiers and encrypted revocation credentials may be retained to finish that work. Completed deletion metadata is eligible for cleanup after 7 days.
• RevenueCat and Apple may retain records they need to meet their legal obligations. Backups may retain deleted information until their normal rotation; any recovery process must preserve deletion requests. Records legally required for a limited purpose are retained only for that purpose.

Deleting a Cayl account does not cancel an Apple subscription. Manage or cancel renewal in Apple's subscription settings. The deletion screen provides that control, and you can still delete the account immediately.

Permissions and your device

Camera, photo-library and microphone permissions are requested for features you choose. Notification permission is optional. Cayl's meal and trial reminders are local device notifications; disabling notifications does not cancel a subscription. You can manage system permissions in iOS Settings.

Cayl keeps local records on your device for responsiveness and offline use. Account stores are separated by user. Signing out removes access to that account's local view; account deletion also removes its local store. Protect your device using the security controls provided by iOS.

Your choices and requests

You can review and edit profile information, meals, weigh-ins and body composition tests, manage saved meals, change AI-sharing permission, sign out, and initiate account deletion in the app. Contact us at cayl@cayl.app for access, export, correction or other privacy requests, or questions about processing. We may need to verify account ownership before responding. Applicable rights and response periods depend on your location.

Adults only

Cayl is intended for people aged 18 or older. Personalized calorie planning is not intended for pregnancy, breastfeeding, or medical nutrition needs. If you believe information about a child was submitted, contact us so we can investigate and remove it as appropriate.

Changes

We will update the effective date when this policy changes. Material changes to the information shared with AI services or its recipients require an updated in-app disclosure and permission before that new processing begins. Other material changes will be communicated as applicable law requires.