This Privacy Policy explains how the OzCal mobile app ("OzCal", "we", "us") collects, uses, stores and discloses your personal information. We handle your information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
Website newsletter and beta sign-ups: if you subscribe to the OzCal Weekly or ask for a beta invite on ozcal.com.au, we collect your email address and the page you signed up from, and use them only to send that newsletter or invite. Website form submissions are stored by our website host, Netlify, whose servers may be outside Australia (APP 8). Every newsletter email includes an unsubscribe link, and you can ask us to delete your address at any time by emailing privacy@ozcal.com.au.
App email updates: when you create an OzCal account you can tick a box to receive OzCal tips and product updates by email. This is optional, off by default, and you can change it any time in Profile > Email tips and updates or by using the unsubscribe link in any email. We store this choice with your account and send these emails from our own support mailbox (hosted by Namecheap Private Email) or, as the list grows, through an email service provider such as Brevo; either way the servers may be outside Australia (APP 8). You can also unsubscribe at ozcal.com.au/unsubscribe. Transactional emails (account confirmation, password reset, purchase receipts) are sent regardless because the service needs them.
Health data accessed through Apple HealthKit is used solely to provide features within OzCal: to show your activity, heart rate, sleep and weight next to what you ate, to add active energy to today's target and to keep your weight trend current. OzCal reads Fitness rings, steps, distance, flights, active and resting energy, workouts, heart rate, sleep and weight, including anything your Apple Watch, Strava, Garmin or Fitbit sends to Apple Health. OzCal never writes to Apple Health. We do not use HealthKit data for advertising or marketing, and we will never sell or disclose it to third parties or data brokers. You can revoke OzCal's access at any time in the iOS Health app or Settings.
We do not sell your personal information.
We may also disclose information where required by law.
Snap and Say are optional. When you choose Snap, the meal photo you take is sent to Google's Gemini API to identify foods. When you choose Say, the short audio clip you record is sent to the same API to identify the foods you name. In both cases:
The same consent covers the other AI features: a nutrition label photo (when a barcode is not in the catalogue), a pantry or fridge photo and your Plan my week choices (energy and macro targets, dietary needs, cuisines, foods you like or avoid, budget and kitchen equipment). With a meal photo or voice note the app also sends your dietary preferences as a short label (for example "vegetarian, halal") so results fit your diet. Google does not receive your name, email, account identifier, height, weight, Apple Health data or location.
Google processes this data under its API terms as a processor for OzCal. We do not use your photos or voice clips to train AI models. For voice specifically: the microphone is used only when you tap Voice or Say what you ate, the short recording is sent to Google's Gemini API to identify the foods, it is not stored by OzCal, and it is never used to train AI models.
Cross-border disclosure (APP 8): photos and voice clips are processed by Google in data centres that may be located outside Australia. Nothing that identifies you is sent with them, and no other personal information leaves Australia for this purpose.
Your data is stored on secured Supabase infrastructure with access controls and encryption in transit. While no system is perfectly secure, we take reasonable steps to protect your information from misuse, loss and unauthorised access.
We retain your information for as long as your account is active. You can request a copy of your data by emailing privacy@ozcal.com.au from the address on your account and we will provide it within 30 days; in-app export is coming. You can delete your account from inside the app (Profile, then Delete account), which removes your profile and diary data from our active systems. You may also request access to, correction of, or deletion of your personal information by contacting us (see below).
Retention schedule:
OzCal is not directed at children under 16. We do not knowingly collect personal information from children under 16.
Under the APPs you may request access to and correction of your personal information, and may make a privacy complaint. We will respond within a reasonable period. If you have a complaint, contact privacy@ozcal.com.au first and we will work with you to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this policy from time to time. Material changes will be notified in-app or by updating the date above.
Packaged-food data © Open Food Facts contributors, available under the Open Database License (ODbL): world.openfoodfacts.org · opendatacommons.org/licenses/odbl/1-0/. Whole-food and survey-food data: AUSNUT 2023 and AUSNUT 2011-13 © Food Standards Australia New Zealand, used under the Creative Commons Attribution 4.0 licence (foodstandards.gov.au/legal-policies/copyright).
Privacy questions: privacy@ozcal.com.au. General support: support@ozcal.com.au. ABN 55 386 617 220.