SnapCal
Privacy Policy
Last Updated:
This Privacy Policy explains how Mint-Soft ("we") processes personal information when you use the SnapCal app and website (snapcal.mint-soft.com), and why. SnapCal has no sign-up or accounts, and most of your records are stored only on your device.
-
Information Stored on Your Device
Meal records (including photos), habits, water intake, fasting, weight, goals, your health profile and app settings are stored only on your device (in the app's storage). They are not sent to or backed up on our servers. Because there is no sign-up or login, we do not collect account information such as your name, email address or phone number.
Deleting the app also deletes the records stored on your device. If you use export (for example CSV) or sharing, the file goes to the app or service you choose. Whether app data is included in your device backup (such as iCloud or Google backup) depends on your device settings.
-
Information Sent for AI Food Analysis
When you analyze food (taking or choosing a photo, typing a description, voice-transcribed text, a menu board photo or a fridge photo), that photo or text and your app language are sent to the SnapCal API (run on Cloudflare) and passed to our AI provider, Anthropic (Claude), for analysis. All of SnapCal's AI features use Anthropic only.
Supplement label reading: when you add a supplement, you can choose to scan its label. A downscaled photo of the label (long edge up to 1280 px) is sent through the SnapCal API to Anthropic (Claude) to read the nutrition facts. It is processed only to return the result, is not stored on the SnapCal server, and no account or device identifier is attached. Only a small thumbnail stays on your device and is deleted along with the supplement. This is optional: you can instead enter the supplement manually or pick it from a preset list. Label reading counts toward the same daily AI analysis limit. Anthropic handles the photo under its API terms and privacy policy, as described in section 3.
The SnapCal API does not store your photos or text after analysis and returns the result only to your device. To prevent abuse, however, a daily request counter keyed to your IP address is kept in the Cloudflare cache for up to 24 hours, and technical logs such as error codes may remain temporarily at Cloudflare for troubleshooting. The photo demo on our website is handled the same way and uses Cloudflare Turnstile to check for bots.
-
Health Information (Sensitive Data)
"Personalized analysis" is an optional feature that is off by default, for both new and existing users. While it is off, analysis requests contain no health information or intake summary at all. Allergy and diet warnings based on your health profile are still checked on your device.
You can turn it on only through a separate consent screen, shown during onboarding after the health step, on a one-time card on the result screen, or from the switch in Settings. While it is on, each food photo or typed or spoken description you analyze also sends the following, so that we can add a note suited to you (for example about allergens, foods that don't suit a health condition such as diabetes or hypertension, your diet preferences or your remaining daily budget): (1) health profile items: allergies, health conditions (such as diabetes or hypertension) and diet preferences; (2) a summary of the day being logged: the date and time of the meal, calories, carbohydrates, protein and fat eaten against your goals, sodium and sugar (where estimated), number of meals, calories from logged habits (drinks and snacks) and whether you are fasting. Numbers are rounded, and no name, account ID, device identifier or other information that directly identifies you is sent.
This information may be health-related sensitive information under Korea's Personal Information Protection Act and special category data under the GDPR. We process it only on the basis of your separate, explicit consent and only for the purpose above. It is sent to the SnapCal API and Anthropic, used only to generate the response, and not stored on the SnapCal server. Anthropic processes it under its API terms and privacy policy; as far as we have confirmed, data sent through its API is not used to train its models under default settings. For Anthropic's retention, see "Processors and International Transfers" below.
You can turn personalized analysis off in Settings at any time, and it takes effect immediately: later requests no longer include this information. Refusing or withdrawing consent limits nothing except the personalized note. SnapCal's guidance is general information and does not replace medical diagnosis or treatment.
-
Recipes and Shopping Links
When you request a recipe, the food name, number of servings, app language and your diet and allergy items are sent through the SnapCal API to Anthropic (Claude). Ingredient search terms and your region may also be used to show ingredient products.
The app may include affiliate links such as Coupang Partners, AliExpress and Amazon, and we may earn a commission on purchases made through them. Opening a link takes you to that third-party site, and any processing there follows that site's privacy policy.
-
Voice Input
Voice logging uses your device's built-in speech recognition (from Apple or Google). Depending on your device settings, audio may be sent to and processed by Apple or Google under their policies. We never receive the audio itself; only the transcribed text is used for analysis. You can turn off microphone access in your device settings at any time.
-
Ads, Payments and Website Analytics
The free version shows Google AdMob ads. AdMob may use advertising identifiers, device information and IP addresses to serve and measure ads. Where required by law (for example in the EEA and UK), consent is collected through Google's consent tool (UMP), and you can change your choice in the app's settings. You can also reset your advertising identifier or limit personalized ads in your device settings.
Subscriptions and purchases are paid through the Apple App Store or Google Play, and subscription status is managed with RevenueCat. Neither we nor RevenueCat receive payment details such as card numbers. Review prompts use the operating system's built-in feature.
Our website uses Google Analytics for visit statistics; in the EEA, UK and Switzerland it runs in denied mode by default until you consent.
-
Wi-Fi Web Dashboard
The Wi-Fi web dashboard is a local server that runs on your phone and lets you view your records in a browser on a computer or tablet on the same network. Access requires a password you set, and dashboard data is not sent to our servers. Because other devices on the same network can attempt to connect, we recommend turning it on only on trusted networks and turning it off when you're done.
-
Processors and International Transfers
To provide the service, we entrust the processing of personal information to the companies below, which involves transferring information outside your country. Transfers happen when you use the relevant feature, over an encrypted network connection (HTTPS). If you don't want your information transferred, you can choose not to use the relevant features (AI analysis, personalized analysis, recipes, subscriptions and so on); those features will then be unavailable, but on-device logging keeps working. Each company's retention and processing follow its own policies, which may change.
Recipient Country Items transferred Purpose Retention Anthropic, PBC (Claude) United States Food photos and text, menu and fridge photos, supplement label photos, recipe requests; with personalized analysis on, health profile items and the day's intake summary AI food analysis, recipes and personalized cautions Kept for a limited period under Anthropic's policies after the response, then deleted (may be kept longer for policy-violation review) Cloudflare, Inc. United States and data centers worldwide Analysis requests (processed in transit), IP address, technical logs Running the API and website, rate limiting, bot checks Request content is not stored. IP-based request counter up to 24 hours; technical logs per Cloudflare's policies RevenueCat, Inc. United States Anonymous user ID generated by the app, purchase and subscription history, device and app information Checking subscription status and restoring purchases While you use the service, then per RevenueCat's policies Google LLC (AdMob, Analytics) United States and other countries with Google data centers Advertising identifier, device information, IP address, ad interactions, website visit data Serving and measuring ads, consent management, website visit statistics Per Google's policies and your ad settings -
Retention and Deletion
Records on your device stay there until you delete them in the app or delete the app, and are then erased from the device. The SnapCal API does not store the photos, text or health information in analysis requests. The IP-based request counter expires automatically within 24 hours. Information held by our processors follows the table above and their own policies. Where the law requires us to keep certain information, we keep it for the required period.
-
Your Rights
You can ask to access, correct or delete your personal information, to restrict its processing, and to withdraw consent. Because most information is on your device, you can view, edit and delete it in the app yourself: records on each screen, your health profile in Settings, and deleting the app removes all on-device data. You can withdraw consent to sending health information at any time by turning off personalized analysis in Settings, effective immediately; this does not affect processing that took place before withdrawal. You can change ad consent in the app's settings or your device settings.
Since we have no accounts, we keep no per-user records on our servers, so it may not be possible to locate, provide or delete a specific person's information there. For any other request or question, contact us below and we will respond without undue delay. Users in the EEA and UK have the right to lodge a complaint with their local supervisory authority.
-
Children's Privacy
SnapCal is not directed to children under 14 (or under 13, or the age set by local law, depending on the country), and we do not knowingly collect children's personal information. If you learn that a child has entered information such as a health profile, please delete it in the app or contact us.
-
Security Measures
We limit exposure by designing the service not to accumulate information on our servers, use HTTPS between the app and our servers, limit API request counts and input sizes, and keep access keys only on the server. Records stored on your device are protected by the operating system's app storage protections and your device lock, so we recommend using a device lock. No method can guarantee perfect security.
-
Changes to This Policy
This policy may change as laws or the service change. When it does, we update the date on this page, and we will notify you in advance through the app or website of changes that materially affect your rights.
-
Contact Us
For questions about how we handle personal information, requests to access or delete it, or complaints, email our privacy officer (Mint-Soft) at: app@mint-soft.com