Sub-processors
These are the third-party services Calorie Buddy uses to operate. Each receives only the data it needs to do its job, under a data-processing agreement with us.
We may change vendors from time to time. This page is the source of truth — when it changes, the change applies. We'll notify you of material changes via email or in-app before they take effect.
For the full context, see our Privacy Policy.
Cloud platform & data storage
| Vendor | Purpose | Data | Region | Their policy |
|---|---|---|---|---|
| Google Firebase Google LLC |
Authentication, Firestore database, Cloud Storage, Cloud Functions | All app data (profile, food log, weight, meal photos, feedback events) | US / EU multi-region | link |
AI analysis
| Vendor | Purpose | Data | Region | Their policy |
|---|---|---|---|---|
| Anthropic Anthropic PBC |
Analyses meal photos and text descriptions to estimate calories and macros, writes Buddy's replies, and writes the two-line introduction to a new user's plan, the lines shown when they come back to it, and the texts of the reminders about that plan. Retains inputs up to 30 days for abuse monitoring; does not use them for model training. | Meal photo bytes, text descriptions you write, Buddy chat context; for the plan introduction and its reminders, your onboarding answers as category codes (age, sex, height, weight, target, pace, activity level, diet, daily calorie target, who you are becoming, what has slowed you down, whether you have tried other apps) and, for the introduction only, your local day of the week and hour — never your name or account | US | link |
Subscriptions & payments
| Vendor | Purpose | Data | Region | Their policy |
|---|---|---|---|---|
| RevenueCat RevenueCat Inc. |
Tracks subscription entitlement across devices. | Pseudonymous user ID, purchase events. No card details. | US | link |
| Apple Apple Inc. |
App Store distribution, in-app purchase processing, Apple Sign-In, push notifications, HealthKit. | App Store account identifier, purchase confirmations, Apple Sign-In identifier (if used), APNs token. HealthKit data stays on your device. | Global (per Apple's own infrastructure) | link |
Public food databases
These are read-only public APIs we query for ingredient and product lookups. We send only the query string or barcode value — no user identifier or other personal data.
| Service | Purpose | Data sent | Region | Their policy |
|---|---|---|---|---|
| USDA FoodData Central U.S. Department of Agriculture |
Ingredient and food search | Search query string | US | link |
| Open Food Facts Open Food Facts (non-profit, France) |
Barcode → product lookups and packaged-food name search | Barcode value; food search query string (forwarded by our server) | EU (France) | link |
Change notifications
When we add, replace, or remove a sub-processor, we'll update this page and note the change in our app's changelog. Material changes (a new category of vendor, a region change, a change that meaningfully affects how your data is handled) will also be notified to you by email at least 14 days before they take effect.