OliPrivacy Policy — Oli
Last updated: November 9, 2026
This policy explains what data Oli (“the app”, “we”) handles, why, who helps us process it, and how you can delete it. In short: your food diary, weight and body data stay on your phone. We have no user accounts. Health data never leaves your device.
1. Who is responsible
Oriol Paradeda Daniel is the data controller. Contact: support@olicalories.com. Postal address and tax ID: see the Legal notice.
2. What stays on your phone
The following is stored only on your device and never sent to us or to anyone else:
- Your profile and plan: sex, date of birth, height, weight, target weight, goal, pace, activity level and your onboarding answers (for example meal times, diet or cuisine).
- Your food diary: meals, ingredients, portions, nutrition values and meal photos.
- Weight entries, water, exercise, fasting, saved meals and portion corrections.
- Data read from Apple Health (iOS) or Health Connect (Android), only if you allow it: steps, active calories burned and weight. The app only reads this data; it never writes to it, never sends it off the device and never uses it for advertising.
- Settings, reminders and notification preferences. Notifications are scheduled locally on your phone.
If you delete the app, or use Settings › Privacy › Delete my data, this data is erased.
3. What leaves your phone, and why
| Data | Sent to | Why | Legal basis (GDPR) |
|---|---|---|---|
| Meal photos, meal descriptions you type or dictate, optional notes and corrections, and your usual cuisine and diet (as context) | Our AI provider Anthropic (Claude), through our servers on Google Firebase | To estimate the calories and nutrients of your meal | Your consent, asked before the first use; you can withdraw it in Settings › Privacy |
| Barcode numbers you scan | Open Food Facts (directly or through our servers) | To look up the product's nutrition label | Performance of the service |
| Food searches that use AI | Anthropic, through Firebase; the search text is cached on our servers without any link to you | To estimate foods that are not in our database | Your consent (same as above) |
| A random anonymous user ID, created on first launch (no name, email or phone number) | Google Firebase (Authentication, App Check, Cloud Functions), RevenueCat, PostHog, Crashlytics | To run the service, check your subscription, protect our servers from abuse and count daily AI use | Performance of the service; legitimate interest (security) |
| Subscription status and purchase history | RevenueCat, which receives it from Apple or Google | To know whether you have an active subscription | Performance of the service |
| Usage events (e.g. “onboarding step viewed”, “meal logged”, the screen or step name, technical details such as how long an analysis took, and the codes of a few non-sensitive onboarding answers such as units or the reasons you chose). Never health data, body data, what you eat, amounts or anything you type | PostHog (servers in the EU) | To understand how the app is used and improve it | Legitimate interest. Only after you confirm you are 16 or older |
| Crash reports (device model, OS version, the error) | Firebase Crashlytics (Google) | To find and fix bugs | Legitimate interest |
| Advertising attribution (which ad led to the install; the advertising ID only if you allow tracking) | AppsFlyer, and through it to ad networks such as Meta and TikTok | To measure our ads | Your consent: Apple's App Tracking Transparency prompt on iOS, and our consent screen in the EU. Only if this measurement is enabled in the app; if you never see these prompts, it is not used. |
| Feedback you write in the app | Sent from your own email app to support@olicalories.com | To read and answer it | Your decision to send it |
| Voice when you dictate a meal | Your phone's speech recognition (Apple or Google may process the audio under their own terms) | To turn your words into text; we only receive the text | Your decision to use it |
What we never do: sell your data; send health, body or food data to analytics or advertising partners; use your photos to train AI models. Anthropic, under its commercial terms, does not use data sent through its API to train its models. We do not keep your meal photos on our servers: they are sent for analysis and discarded.
4. How long we keep data on our servers
- Daily AI usage counters (anonymous ID, date, number of analyses): 7 days.
- Cached AI food searches and barcode lookups: up to 30 days, not linked to you.
- Usage events (PostHog) and crash reports (Crashlytics): up to 12 months.
- Subscription records (RevenueCat): as long as needed to provide the subscription and to comply with tax and accounting obligations.
5. Service providers
We use these providers (data processors) under contracts that protect your data. Some are based in the United States; transfers are covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
- Anthropic PBC (AI analysis) — United States
- Google LLC / Firebase (servers, authentication, app integrity checks, crash reports) — EU and United States
- RevenueCat, Inc. (subscriptions) — United States
- PostHog, Inc. (product analytics) — EU servers
- AppsFlyer Ltd. (ad attribution, only if enabled and with your consent)
- Open Food Facts (barcode database) — France
- Apple and Google (payments, app distribution, Health / Health Connect, speech recognition) under their own privacy policies.
6. Your rights and how to delete your data
You can ask to access, correct, delete, restrict or export your data, object to processing based on legitimate interest, and withdraw consent at any time.
- Delete everything on your phone: Settings › Privacy › Delete my data. It erases your diary, photos, weight, profile, settings and scheduled notifications, resets the analytics ID and deletes the anonymous user. Your subscription is not cancelled (manage it in your App Store or Google Play account).
- Export your data: Settings › Privacy › Export my data (CSV files and your photos).
- Delete data on our servers or our providers' servers (analytics events, crash reports, usage counters): email support@olicalories.com with the subject “Delete my data”. Because we don't know your name or email, please tell us the approximate dates you used the app and, if you can, the device model; if you still have the app, using “Delete my data” first also resets these identifiers. We will answer within 30 days.
- Withdraw consent: AI analysis in Settings › Privacy; tracking in your phone's settings (iOS: Settings › Privacy & Security › Tracking) or, in the EU, in Settings › Privacy.
You also have the right to complain to a data protection authority. In Spain it is the Agencia Española de Protección de Datos (www.aepd.es).
7. Age
The app is for people 16 or older. If someone indicates they are younger during setup, the app stops, sends nothing and deletes what was entered.
8. Health information
The app gives general nutrition estimates based on published formulas and AI. It is not a medical device and is not medical advice.
9. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.
10. Contact
Oriol Paradeda Daniel · support@olicalories.com · Legal notice