Privacy Policy
Orakcal is a calorie and weight tracking app run by Hunter Levesque of Ontario, Canada ("we", "us"). This policy explains what the app keeps, what it sends us, who helps us process it, and how you can delete it. The short version: your food, water, weight and setup details stay on your phone and are never uploaded to us. What reaches our servers is an anonymous account ID, crash reports, and usage counts you can turn off. We do not sell anything, we do not use it for advertising, and we do not share it with data brokers.
If you live in Washington State, or want the health-data details in one place, see our Consumer Health Data Privacy Policy.
What the app keeps, and what it sends
Information you enter: kept on your phone
Everything below is saved in the app's storage on your phone and used there to run the app. It is not sent to us or to anyone else.
- Setup and goals: age, sex, height, current and goal weight, activity level, pace, and the targets calculated from them.
- Food and water logs: the foods, meals and recipes you log or save, their nutrition values, serving sizes, times, schedules, and water totals.
- Weigh-ins: your weight entries and any notes you add.
- Foods you create or scan: names, brands, barcodes and nutrition values, and any photos you add to a recipe.
- Your name: setup asks what to call you, which you can skip. It is used only to greet you in the app.
- Preferences: units, display settings and which nutrients you track.
Health data from your phone (only if you allow it)
If you connect Apple Health or Health Connect, Orakcal reads your step count to show it next to your logs. It is read and shown on your phone only, never sent to us, and never used for advertising or marketing. Orakcal never writes to or changes your health data.
Steps from your Google account (only if you turn it on)
Some trackers, such as Fitbit, send only part of their steps to Health Connect. If you turn on Steps From Google in the app, you sign in with your Google account and allow Orakcal to read your activity and fitness data from the Google Health API (read-only). Orakcal uses it for one thing: to show your step count, and the step-based numbers built from it, on your phone.
- The data is requested by the app on your phone and read there. It is never sent to our servers, never stored by us, and never shared with anyone.
- Orakcal does not use it for advertising, does not sell it, does not use it to build profiles, and does not use it to train AI models.
- No person at Orakcal can read it.
- Turning Steps From Google off removes Orakcal's access to your Google account. You can also remove access at any time from your Google Account's security settings.
Orakcal's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Reminders (only if you allow it)
If you turn on Reminders in Settings, Orakcal schedules local notifications on your phone for the foods you've scheduled. These are generated and stored entirely on your device by your phone's operating system — not through a push notification service, and not sent through our servers — so we never see when you get one. Turning Reminders off, or signing out, cancels all of them.
Your anonymous account: on our server
Orakcal does not ask for an email, a password or your name to get started. On first launch the app creates an anonymous account on our server: a random identifier with no name, email or tracking data attached. It ties together your crash reports and usage counts (below), and lets the app sign back in after your phone is restored from its backup.
So that an account without an email can still be recovered from your phone's own backup, the app also gives it a hidden sign-in: a random password and an address that cannot receive mail. It is stored in the app's storage on your phone, which your phone's backup includes, and is used only to sign the app back into your account after that backup is restored. You never see or type it, and it is deleted when you sign out.
Like any sign-in service, our server also records the IP address and the device and app details (the "user agent") that each sign-in to your account comes from, to keep the account secure.
Marketing waitlist
If you join the waitlist on our website, we collect the email address you enter so we can send launch updates for Orakcal. We also store basic technical information, such as your browser user agent, to help prevent spam and troubleshoot form submissions. With your email we also save where your visit came from: the name of the site that linked you here (never the full address), any campaign tags in that link, and the first page you saw, so we know which places people find us. Nothing about it is stored on your device after you leave, and no cookies are used. We view the list in a private Google Sheet, which reads it from our database; it is never shared.
When you join, we send one email with a link to confirm your address, and we send launch updates only to addresses that confirmed. If you don't confirm within 30 days, we delete your sign-up.
Website visits
Our website uses Cloudflare Web Analytics to count visits: which pages are viewed, the site that linked you here, your browser, device type and country. It sets no cookies, stores nothing on your device, and does not fingerprint or follow you across visits or other sites. We only see totals, never who visited.
Usage and diagnostic information: sent to our providers
- Crash reports (Sentry): when the app crashes, a report with the error, the screen it happened on, your device model and OS version, the app version, and your anonymous account identifier. Reports never include your food logs, weight, targets or screenshots.
- Usage analytics (PostHog): which screens are opened and events like "a food was logged by barcode" or "a meal was saved", with counts grouped into ranges, your device model, OS and app version, your phone's time zone and language setting, a random ID for this install of the app, and your anonymous account identifier. An event can say that you logged something, never what: analytics never include what you ate, nutrition values, your weight, search text or barcodes. IP addresses are discarded, and no session recordings are made. You can turn analytics off in Settings → Privacy & About → Share Usage Analytics.
Barcode lookups
When you scan a barcode, the barcode number is sent to the food and supplement databases listed under "Who processes it for us" to look up the product. Nothing about you is sent with it, though a database you contact directly sees your phone's IP address, as any website does.
On Android, the camera reads barcodes on your phone using Google's ML Kit. The camera picture is not sent anywhere, but ML Kit sends Google its own usage and diagnostic information about how the scanner is working.
How we use it
- On your phone: saving your logs, calculating and adjusting your targets, and showing your progress.
- On our side: finding and fixing crashes, and understanding which features are used so we can improve them.
- To send launch updates if you joined the website waitlist.
We do not sell your personal information or consumer health data, and we do not use it for advertising.
Where your data is stored
Your tracking data is stored on your phone, where your phone's own encryption protects it. We do not keep a copy, so we cannot see it, and we cannot restore it if it is lost.
On Android, the app's data is included in your phone's own backup (Google's, if you have it turned on), so it comes back when you restore that backup to a phone. That backup is between you and Google; we never receive it.
Your anonymous account is held by our database host in the United States (US West, Oregon), and crash reports and usage analytics are processed in the United States by the providers listed below. We are based in Canada. While information is in the United States, it is subject to United States law and may be accessible to courts, law enforcement and government authorities there.
How we protect it
Keeping your tracking data off our servers is the main protection: there is no copy of it for anyone to breach. What does reach us travels encrypted, our database host encrypts it where it is stored, each account can reach only its own record, and our service providers get only what they need for their job. No system is perfectly secure, so we cannot promise that data will never be accessed without permission.
If a breach of our systems creates a real risk of significant harm to you, we will tell you and report it to the Privacy Commissioner of Canada, as the law requires.
Who processes it for us
We use a small number of service providers who process data only to provide their service to us:
- Supabase: hosts your anonymous account, and runs our server functions (the USDA lookup below, and account deletion).
- Sentry: crash reporting, as described above.
- PostHog: usage analytics, as described above.
- Cloudflare: website hosting and visit counts, email routing, and waitlist database hosting.
- Google: a private Google Sheet where we view the waitlist (email address, sign-up date, the form you used, and where your visit came from).
- Resend: sends the email that confirms your waitlist sign-up (your email address and the confirmation link).
- Open Food Facts: when you scan a barcode, the barcode number is sent to Open Food Facts to look up the product. No other information is sent with it.
- USDA FoodData Central: if Open Food Facts does not know a barcode, our server asks the U.S. Department of Agriculture's food database for it. Only the barcode number is sent, and the USDA sees our server, not your phone.
- NIH Dietary Supplement Label Database: when you scan a supplement, its barcode, or the brand and product name found for it, is sent to the U.S. National Institutes of Health's database to look up the label. No other information is sent with it.
- Apple and Google: app distribution, your phone's own backup, and, if you connect it, the step count your phone provides. On Android, Google's ML Kit reads barcodes on your phone and reports its own diagnostics to Google, as described above.
We may also disclose information if required by law, or to protect the safety of our users or the public.
How long we keep it
Your tracking data stays on your phone until you delete it in the app or uninstall the app; a copy in your phone's own backup lasts as long as that backup does. We keep your anonymous account until you delete it. Usage analytics are kept until you delete your account, when we ask PostHog to delete them. Crash reports expire on Sentry's retention period; Sentry cannot delete one person's reports early, but they carry only the anonymous identifier, which points to no one once your account is gone. Waitlist emails are kept until you ask us to delete them or we no longer need the launch list.
Deleting your data
To delete everything at once, use Settings → Account & Data → Delete All Data. It erases everything Orakcal keeps on your phone, deletes your anonymous account from our server, and asks PostHog to delete your usage analytics. Deletion is immediate and cannot be undone.
Uninstalling the app also erases what it keeps on your phone, but leaves the anonymous account on our server, which holds no tracking data. To remove that as well, use Delete All Data before you uninstall. If you need help, email support@orakcal.com.
Your rights
Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, to withdraw consent, and to not be discriminated against for using these rights. That includes rights over consumer health data under laws such as Washington's My Health My Data Act. To make a request, email support@orakcal.com. We will respond within 30 days, or sooner if the law where you live requires it. Your tracking data is on your phone, where you can see, correct and delete it yourself; we hold no copy to send you. Before acting on a request, we may need to confirm that it comes from the account's owner; deleting your data in the app already does this.
Who is responsible for your privacy
Hunter Levesque is responsible for how Orakcal handles personal information and answers every privacy request. Reach us at support@orakcal.com. If you are in Canada and are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Children
Orakcal is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has used the app, contact us and we will delete their data.
Not medical advice
Orakcal is for general tracking and awareness. It is not medical advice and does not diagnose or treat any condition. If tracking food, weight or calories is unsafe or distressing for you, stop using the app and seek appropriate support.
Do Not Track
Orakcal and its website do not track you across other websites or apps, and there are no advertising or cross-site tracking tools, so there is nothing for a browser's "Do Not Track" setting to turn off.
Changes to this policy
If we change this policy, we will update the date at the top. For significant changes, we will let you know in the app before they take effect. If we add an optional feature that sends your tracking data to our servers, such as a paid cloud backup, it will be off unless you choose it, and this policy will describe it before it is offered.
Contact
Questions about privacy or your data: support@orakcal.com.