App Privacy Policy

This policy applies to all Zolarys mobile applications, including AI Calorie Counter: Calfinity ("Calfinity"). When you use our apps, we may collect the following types of information: Information you provide directly: • Account registration details (name, email address) • Profile and body metrics you enter (height, weight, age, gender, goals) • Food and meal logs, including photos you scan, descriptions you type or dictate, and saved foods • Water intake, streaks, and other in-app tracking entries • Health conditions, only if you choose to enable Personalized Health Insights (see "Health & Nutrition Data" below) • Feedback, support requests, and communications Information collected automatically: • Device information (model, operating system, unique identifiers) • Usage data (features used, time spent, crash reports) • Network information (IP address, connection type) • App performance and diagnostic data • Subscription status, plan type, purchase timestamps, and order IDs. Card and billing details are handled entirely by Google Play or the Apple App Store and never reach us. We minimize data collection to what is necessary for the app to function and improve.

Calfinity is a nutrition and fitness app, so some of the information it handles is health data. We treat that data as sensitive and hold it to the commitments below. What we handle: • Nutrition and body data — food and meal logs, food photos, macronutrients and micronutrients, water intake, weight history, BMI, and calorie goals • Activity data — step count and active calories, read from Health Connect (Android) or Apple Health (iOS) only after you explicitly grant permission • Health conditions (optional) — if you turn on Personalized Health Insights, the conditions you list (for example "type 2 diabetes") are stored on your device and in your account profile so that scanned foods can be flagged as suitable or unsuitable for you Personalized Health Insights is switched off by default. It operates only when you enable it and list at least one condition, and you can edit that list or turn the feature off at any time in the app's settings. Health Connect and Apple Health: • We read only step count and active calories burned. We never write data back, and we request no other health data types. • This data is used solely to show your activity in the app and, if you enable exercise calorie sync, to adjust your daily calorie budget. • You can revoke this access at any time in Health Connect or Apple Health, and the app continues to work without it. Our commitments: • We never use health, nutrition, activity, or health condition data for advertising or ad targeting. • We never sell this data, and we never share it with data brokers. • We do not transfer it to third parties except the service providers listed below, which process it on our behalf to deliver features you asked for. Calfinity provides nutrition and dietary information only. It does not diagnose, treat, or prevent any disease and is not a substitute for professional medical care. Always consult a doctor or registered dietitian before changing your diet, particularly if you have a health condition.

We use the collected information for the following purposes: • Providing and maintaining app functionality, including food recognition, nutrition tracking, and progress analytics • Personalizing your experience — recommendations, goals, streaks, and insights • AI analysis — food photos and descriptions, and (only if you enable Personalized Health Insights) the health conditions you list, are sent to Google Gemini models via Firebase AI to identify foods and generate nutrition insights. Results are AI-generated dietary information, not medical advice. • Improving app performance, stability, and features • Sending notifications about updates or changes, and any reminders you opt into • Responding to your support requests • Analyzing usage patterns to enhance user experience • Detecting and preventing fraud or abuse We do not sell your personal information to third parties. We never use health, nutrition, activity, or health condition data for advertising under any circumstances.

Our apps request only the permissions needed for features you actually use. Each is requested in context, and you can manage or revoke it at any time in your device settings. Permissions Calfinity may request: • Camera — to photograph meals for AI food recognition and to scan product barcodes • Microphone — for voice food logging. Speech is transcribed by your device's built-in speech recognition service (provided by Google on Android or Apple on iOS), which depending on your device and settings may process audio on the device or on the platform provider's servers under their privacy policy. We never receive, store, or upload raw audio — only the resulting text. • Physical activity — to read your step count for the activity screen and home-screen widgets • Health Connect (Android) or Apple Health (iOS) — to read steps and active calories, as described under "Health & Nutrition Data" • Notifications — for meal and hydration reminders you enable, and important service updates • Photos — selected through your system photo picker, so the app receives only the specific image you choose. Calfinity does not request broad access to your photo library. • Storage (Android 10 and older only) — to save a meal image to your gallery when you ask it to • Internet — to sync your data and use online features We do not request location access. Some features are unavailable without the relevant permission, but the app remains usable without them.

Our apps rely on the following third-party services, each governed by its own privacy policy: • Firebase (Google) — authentication, cloud database, file storage, analytics, crash reporting, cloud messaging, and app integrity checks • Firebase AI / Google Gemini — AI analysis of food photos and descriptions to identify foods and generate nutrition insights • Google Sign-In — optional sign-in method • Google Play Services and Apple Services — core platform functionality • Health Connect (Android) and Apple Health (iOS) — activity data, only with your permission • RevenueCat — subscription management and purchase validation • Google Play Billing and Apple In-App Purchase — payment processing. Card and billing details are handled entirely by the stores and never reach us. • Open Food Facts — an open food database used to look up packaged product nutrition from barcodes Barcode scanning and speech recognition run entirely on your device and are not sent to us or to any third party. We recommend reviewing these providers' privacy policies. We select service providers that maintain strong data protection practices, and we do not permit them to use your health or nutrition data for their own advertising purposes.

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it: • Data is encrypted in transit using TLS/SSL • Sensitive data is encrypted at rest • We use secure cloud infrastructure with industry-standard security certifications • Access to personal data is restricted to authorized personnel only • Regular security audits and vulnerability assessments are conducted While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach.

Our Apps are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@zolarys.com so we can take appropriate action.

Depending on your jurisdiction, you may have the following rights regarding your personal data: • Access — Request a copy of the data we hold about you • Correction — Request correction of inaccurate data • Deletion — Request deletion of your data from our systems • Portability — Request your data in a portable format • Opt-out — Opt out of non-essential data collection • Restriction — Request limitation of data processing To exercise any of these rights, contact us at legal@zolarys.com. We will respond to your request within 30 days. See "Account & Data Deletion" below for how to remove your account and all associated data.

You can request deletion of your account and all associated data at any time. • Email legal@zolarys.com from the address associated with your account, with the subject "Account Deletion Request". We will verify the request and delete your account and personal data within 30 days. • Deletion removes your profile, food and meal logs, food photos, weight history, water and activity records, saved foods, and any health conditions you listed. • Anonymized or aggregated analytics that can no longer be linked to you may be retained. • A limited set of records may be kept longer where the law requires it, such as transaction records needed for tax and accounting purposes. You can also clear specific data without deleting your account — for example, removing your listed health conditions or turning off Personalized Health Insights in the app's settings, or deleting individual logged meals.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy: • Account data is retained while your account is active • Nutrition, weight, and activity logs are retained while your account is active so you can see your history and progress • Health conditions you list are retained until you remove them, turn off Personalized Health Insights, or delete your account • Usage analytics are retained for up to 24 months in anonymized form • Support communications are retained for up to 12 months after resolution • Upon account deletion, personal data is permanently removed within 30 days Some data may be retained longer if required by law or for legitimate business purposes such as fraud prevention.

We may update this privacy policy from time to time. When we make changes: • The "Last Updated" date will be revised • Material changes will be communicated through the App or via email • Continued use of the App after changes constitutes acceptance We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions or concerns about this privacy policy or our data practices for mobile applications, please contact us: Zolarys Email: legal@zolarys.com Account deletion requests: legal@zolarys.com Website: https://www.zolarys.com This policy covers our mobile applications, including AI Calorie Counter: Calfinity. For our general website privacy policy, please visit our main Privacy Policy page.