Privacy Policy

Last Updated: February 4, 2026

This Privacy Policy governs the use of CalPulse, an application provided by Tanoit LLC ("we," "us," or "our"). We are dedicated to ensuring the privacy and security of your data. The following outlines the information we collect, and the manner in which it is used and disclosed, in connection with your access to and use of our application and its related services (the "Services").

1. What Information Does CalPulse Collect?

To provide you with the best possible service, we collect information in a few ways. This falls into three main categories:

Information You Give Us Directly

  • Account Info: When you create an account, we collect your email address and a secure password.
  • Your Food Photos & Data: To count calories, we collect the images you take or upload, along with the food and nutrition details you log.
  • Purchase History: If you choose to subscribe, we receive details about your transaction to manage your premium access.
  • Communications: When you contact our support team, we keep a record of your messages to help solve your issues.

Information Collected Automatically

When you use CalPulse, we automatically collect some technical data to ensure the app runs smoothly and to help us fix bugs. This includes:

  • Device Data: Such as your IP address, device model, operating system, and mobile carrier.
  • Usage Data: We use tools to understand how you interact with our service to improve it.

Information From Third Parties

  • Social Logins: If you sign in with a service like Facebook or Google, we receive your basic profile information to create your account.
  • Service Providers: We work with trusted third-party partners who help us store your data and run our app. Specifically:
    • We use Supabase as our cloud database to store your account information and food logs securely.
    • We use partners like Google Firebase for app analytics and performance monitoring.
    • Our use of data from Google APIs complies with Google's API Services User Data Policy.

2. How We Use Your Information

We use your data to power CalPulse and create a better, safer experience for you. Here's how:

  • To Provide Our Services: We use your food logs, photos, and account info to give you the core features of CalPulse, like calorie tracking and progress reports.
  • To Improve & Develop CalPulse: We analyze usage trends (in an aggregated, anonymous way) to fix bugs, understand what features you use most, and build new tools to help you reach your goals.
  • To Keep CalPulse Secure: We use your information to protect our services, fight spam, prevent fraud, and keep your account safe from unauthorized access.
  • To Communicate With You: We send you important administrative messages (like service updates or security alerts) and respond to your support requests.
  • To Comply with the Law: We use your data as necessary to meet our legal and regulatory obligations.

We only use your information where we have a lawful basis to do so, such as to perform our contract with you, with your consent, or for our legitimate business interests (which we always balance with your privacy rights).

3. How We Protect Your Data

Safeguarding your personal and health information is our top priority. We implement a combination of technical, physical, and administrative measures to ensure your data is secure.

Our Security Measures

We use industry-standard practices to protect your data from unauthorized access, alteration, or destruction. Our security controls include:

  • Encryption: We encrypt your data both while it's being transmitted (in transit) and while it's stored on our servers (at rest).
  • Secure Infrastructure: We host our data with reputable partners (like Supabase) in secure, state-of-the-art data centers.
  • Access Controls: We enforce strict internal policies to ensure that only authorized personnel have access to user data, and they are bound by strict confidentiality obligations.
  • Authentication: We offer and encourage the use of strong password policies and two-factor authentication (2FA) for an added layer of account security.

Incident Response & Notification

Despite our best efforts, no method of electronic transmission or storage is 100% secure. However, we have procedures in place to deal with any potential data incidents.

If a data incident occurs that affects your security, we will promptly notify you and the relevant supervisory authorities as required by law. Our notification will describe the nature of the incident, the potential impact, the steps we are taking to address it, and how you can protect yourself.

Our Commitment & Your Contact

We have a dedicated Data Protection Officer (DPO) who oversees our data security strategy and compliance. If you have any questions about the security of your data, you can contact our DPO directly at contact@tanoit.com.

4. How We Store Your Data

Secure, Global Storage

We use trusted cloud hosting providers to store your data securely on our servers. To provide our service to you, your data may be processed in countries outside of your own. Wherever your data is, we protect it according to this policy and applicable laws.

Our Storage Partner: Supabase

We partner with Supabase to store your data. They provide a secure, state-of-the-art hosting platform. We have chosen them for their strong commitment to security and compliance. All data is protected by technical and organizational measures to prevent unauthorized access, loss, or damage.

For an extra layer of security, we encrypt your data whenever possible before it is sent to our storage providers.

Data Retention: We Don't Keep It Forever

We keep your personal data only for as long as necessary to provide CalPulse to you, fulfill the purposes described in this policy, or as required by law. Once we no longer need it, we will securely delete or anonymize your information so it can no longer be identified with you.

Children's Privacy

CalPulse is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are under 18, please do not attempt to register for our Services or provide any personal information about yourself.

If we become aware that we have collected personal information from a child under the age of 18, we will delete that information promptly. If you are a parent or guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at contact@tanoit.com.

5. Integration with Health Services (Apple Health & Google Fit)

To give you a complete picture of your health, CalPulse can connect with your device's native health platforms. These integrations are entirely optional, and you have full control over what data is shared. No data is transferred until you explicitly grant permission.

For iOS Users: Apple Health

  • Write Data: You can choose to send data from your CalPulse diary to Apple Health. This can include your total calories, macronutrients (fat, protein, carbs), and other nutrients you log.
  • Read Data: You can allow CalPulse to read specific activity data from Apple Health. This data (like calories burned and exercise details) will automatically appear in your CalPulse diary to give you a comprehensive view of your day.

For Android Users: Google Fit

Read Data: You can allow CalPulse to read activity data from Google Fit, such as your steps, active minutes, calories burned, and distance traveled. This data will automatically sync to your CalPulse diary.

How We Use This Data

Any activity data read from Apple Health or Google Fit is stored securely in your CalPulse account for your personal use only. This data is not shared with any third parties and is used solely to power your personal dashboard and insights within our app.

6. Cookies and Tracking on Our Website

(a) Essential Cookies: When you use the CalPulse website, we use necessary cookies to enable the core service to function correctly. These cookies are required for features like logging into your account.

(b) Analytics Cookies: We also use tools like Google Analytics to collect anonymous information about how visitors use our website. This data, which includes browsing behavior, helps us understand how to improve our service and your overall experience.

Your Rights Under Data Protection Laws (GDPR)

Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data. To exercise any of these rights, please contact us at contact@tanoit.com.

  • The right to access: You may request a copy of the personal data we hold about you.
  • The right to rectification: You may update your information directly in your account or request that we correct any inaccurate or incomplete data we hold about you.
  • The right to erasure ("the right to be forgotten"): You may request that we delete your personal data. We will comply where there is no compelling legal or legitimate business reason for us to continue processing it.
  • The right to restrict processing: You may ask us to suspend the processing of your personal data, for example, if you want us to establish its accuracy.
  • The right to data portability: You may request a structured, commonly used, and machine-readable copy of your personal data to transfer to another service.
  • The right to object: You may object to our processing of your personal data, particularly where it is used for profiling or direct marketing.
  • The right to withdraw consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

We will respond to all legitimate requests within one calendar month. We may need to verify your identity before proceeding. Please note that certain rights are not absolute and may be subject to exemptions under applicable law.

Privacy Rights for California Residents (CCPA/CPRA)

This section supplements our Privacy Policy and applies solely to residents of California. It explains your rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Such as your email address when you create an account.
  • Commercial Information: Records of products or services purchased (e.g., subscription transaction history).
  • Internet/Network Information: Information on your interaction with our application (e.g., usage data, device information).
  • Inferences: Derived information used to create a profile about your health and wellness preferences and goals.

We collect this information for the business purposes described in the "How We Use Your Data" section of this policy.

We Do Not Sell or Share Your Personal Information

We do not and will not sell your personal information to third parties. We also do not "share" your personal information for cross-context behavioral advertising as defined under the CCPA.

We may disclose the categories of information listed above to our service providers (data processors) who assist us in business operations (e.g., data hosting, payment processing, customer support), strictly under our instructions and for the purposes outlined in this policy.

Your California Privacy Rights

If you are a California resident, you have the right to:

  • Know & Access: Request, up to twice in a 12-month period, the categories and specific pieces of personal information we have collected about you in the last 12 months.
  • Delete: Request the deletion of the personal information we have collected about you, subject to certain legal exceptions (e.g., where we need to retain information to complete a transaction, detect security incidents, or comply with a legal obligation).
  • Correct: Request correction of inaccurate personal information we maintain about you.
  • Opt-Out of Selling/Sharing: Opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. As stated above, we do not engage in these activities.
  • Non-Discrimination: Not receive discriminatory treatment for exercising any of your CCPA rights.

How to Exercise Your Rights

To submit a verifiable request to know, access, delete, or correct your data, please contact us at:

Email: contact@tanoit.com

Only you, or an authorized agent registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request. We will need to collect certain information from you to verify your identity before processing your request. We will respond to verifiable requests within 45 days.

Limiting the Use of Sensitive Personal Information

We do not use or disclose your sensitive personal information (as defined under the CPRA) for purposes beyond those permitted by law.

How Long We Keep Your Information

We retain your personal information only for as long as necessary to provide you with our services and for the legitimate business purposes outlined in this policy.

Account Inactivity

If your account remains inactive (i.e., you do not log in or use our services) for a continuous period of three (3) years, we will automatically delete your account and all associated personal data from our systems.

Each time you actively use your CalPulse account, this three-year retention period will reset.

Consequences of Deletion

Please be aware that the deletion of your account and data is a permanent action. If you wish to use CalPulse after your account has been deleted, you will need to create a new account. Your previous data cannot be recovered or restored.

Business Transfers

In the event of a merger, acquisition, sale of company assets, financing, or in the unlikely event of bankruptcy, user information may be transferred as a business asset to the new owning entity.

We will notify you of any such change via email or a prominent notice in our app. The recipient of your personal data will be required to use it in a manner that is consistent with this Privacy Policy.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons.

When we make changes, we will update the "Last Updated" date at the top of this policy and post the new version on this page. We will notify you of any material changes—for instance, changes that affect how we use your personal information—by email (sent to the address associated with your account) or through a prominent notice within the CalPulse application before the change becomes effective.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of CalPulse after any modification to this Privacy Policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: contact@tanoit.com