Last updated: 20 August 2026 · Operated by WEAF AI Creations (Australia)
This Privacy Policy explains how the OzCal mobile app ("OzCal", "we", "us") collects, uses, stores and discloses your personal information. We handle your information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. Information we collect
Account details: your name and email address, used to create and secure your account.
Profile & goals: age, sex, height, weight, activity level, your selected goal and pace, and your preferred supermarket — used to calculate your daily energy and macronutrient targets.
Food diary: the foods you log, servings, meal types and the resulting nutrition figures.
Apple Health data (optional): if you grant permission, OzCal reads your step count and active energy burned from Apple Health to adjust your daily calorie allowance.
Device & usage data: basic technical information needed to operate the app reliably.
2. Apple Health (HealthKit) data
Health data accessed through Apple HealthKit is used solely to provide features within OzCal — specifically, to adjust your daily calorie target based on activity. We do not use HealthKit data for advertising or marketing, and we will never sell or disclose it to third parties or data brokers. You can revoke OzCal's access at any time in the iOS Health app or Settings.
3. How we use your information
To calculate and personalise your nutrition targets.
To store and display your food diary and progress.
To operate, secure, maintain and improve the app.
To respond to your support requests.
We do not sell your personal information.
4. Who we share it with
Supabase — our cloud database and authentication provider, which stores your account, profile and diary data (hosted in the Asia-Pacific (Sydney) region).
Open Food Facts — when you scan a barcode, the barcode is sent to the Open Food Facts database to retrieve product nutrition information. We do not send your identity with these lookups.
Google (Gemini AI) — only if you opt in. When you use the AI photo scan, the meal photo you take is sent to Google’s Gemini API so it can identify the food. We ask for your explicit permission the first time, and you can decline and keep using barcode scanning and search instead. Photos are sent without your name, email or account identifier, are used only to return a nutrition estimate, are not used to train AI models, and are not retained by OzCal after the estimate is returned.
We may also disclose information where required by law.
5. Storage & security
Your data is stored on secured Supabase infrastructure with access controls and encryption in transit. While no system is perfectly secure, we take reasonable steps to protect your information from misuse, loss and unauthorised access.
6. Data retention & deletion
We retain your information for as long as your account is active. You may request access to, correction of, or deletion of your personal information at any time by contacting us (see below). On account deletion, your profile and diary data are removed from our active systems.
7. Children
OzCal is not directed at children under 16. We do not knowingly collect personal information from children under 16.
8. Your rights
Under the APPs you may request access to and correction of your personal information, and may make a privacy complaint. We will respond within a reasonable period.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified in-app or by updating the date above.