Privacy & Personal Data Processing Policy

Last updated: June 17, 2026.

1. General

1.1. This Policy describes how personal data is processed and protected in Calvero — a web application and Telegram bot that estimates calories and nutrition facts from food photos and text descriptions (the “Service”).

1.2. By using the Service, signing up, or linking your Telegram account, you confirm that you have read this Policy and consent to the processing of your personal data as described here.

1.3. The Policy is designed with the requirements of Russian Federal Law No. 152-FZ “On Personal Data” and, where applicable, the EU General Data Protection Regulation (GDPR) in mind.

2. Operator & contacts

2.1. The data controller is the administration of the Calvero service (the “Operator”).

2.2. For any questions related to personal data, contact us at support@calvero.me.

3. What data we process

3.1. Account data: email address; password (stored only as an irreversible hash); interface language; timezone.

3.2. Telegram data (when you link the bot): your Telegram account ID and username.

3.3. Nutrition and goal data — information you voluntarily add to the Service: food photos, dish descriptions, food diary entries (calories, protein, fat, carbs), your goal (lose, maintain or gain weight), calorie/macro targets, and — if you choose to provide them — sex, age, height and weight for recommendations.

3.4. The data listed in 3.3 may qualify as health-related information, i.e. a special category of personal data (Art. 10 of Law 152-FZ). It is processed solely on the basis of your explicit consent, given by checking the corresponding box at registration and by voluntarily adding such data to the Service.

3.5. Technical data: AI-analysis usage records (time, request source — web or bot, model used), required for quota accounting and abuse prevention.

3.6. The Service does not request or process: full legal name, identity documents, precise geolocation, biometric data, or payment details (no payment operations are performed at this stage).

4. Purposes of processing

Personal data is processed exclusively to:

• provide the Service's features: recognizing dishes from photos and text, computing nutrition facts, keeping a food diary, statistics;
• personalize the experience: computing and tracking your calorie and macro targets;
• sync data between the web application and the Telegram bot;
• account for usage quotas, the trial period and granted access;
• ensure security, prevent abuse and provide technical support;
• comply with legal obligations.

Your data is not used for third-party advertising and is never sold.

5. Legal basis

5.1. Processing is based on your consent, given at registration (a checkbox in the sign-up form) and confirmed by voluntarily adding data to the Service.

5.2. For the special category of data (health-related information, see 3.3–3.4), a separate explicit consent is collected within the same form, with the nature of this data clearly indicated.

6. Sharing with third parties

6.1. AI provider. To recognize dishes, photos and text descriptions are sent to an external AI model provider. Transferred materials are not accompanied by your name, email or other direct identifiers.

6.2. Hosting provider. Data is stored on servers of a hosting provider that ensures physical and network security.

6.3. Web analytics provider. Anonymized information about visits to the Service is shared with Yandex.Metrica (see Section 9). Diary entries, food photos and other food data you enter are not shared with Yandex.Metrica.

6.4. Processing may involve cross-border transfers. The Operator takes measures to ensure the receiving party provides an adequate level of personal data protection.

6.5. Data may be disclosed to public authorities only in cases and in the manner expressly provided by law.

7. Storage & retention

7.1. Data is stored while you use the Service, or until you withdraw consent / delete your account.

7.2. When you delete your account, all associated personal data is removed, including diary entries and photos. Technical backups are purged within 30 days.

8. Your rights

At any time you may:

• obtain a copy of your data — the “Download my data” feature in settings (JSON export);
• rectify your data — diary entries, goals and profile are editable in the Service;
• delete your account and all data — the “Delete account” feature in settings, effective immediately and irreversibly;
• withdraw consent — by deleting your account or contacting the Operator;
• contact the Operator with a question or complaint, or lodge a complaint with a supervisory authority.

9. Cookies, local storage & web analytics

9.1. The Service uses browser local storage and cookies to maintain your session (auth tokens) and remember your language and theme.

9.2. To analyze usage and improve the Service, we use Yandex.Metrica (operated by Yandex LLC). Metrica collects anonymized information about visits: pages viewed and navigation, traffic source and UTM tags, device and browser type, and anonymized IP address. For this purpose Metrica sets its own cookies. No third-party advertising trackers are used.

9.3. The Session Replay (Webvisor) feature is enabled; it records anonymized page interaction sessions (cursor movement, clicks, scrolling) to assess usability. The contents of input fields, including email and password, are masked and not recorded.

9.4. The legal basis is your consent, expressed by continuing to use the Service. Yandex.Metrica data is processed on servers located in the Russian Federation in accordance with that service's terms. You can limit collection by disabling cookies in your browser settings or using appropriate extensions.

10. Security

The Operator applies organizational and technical safeguards: encrypted connections (HTTPS), irreversible password hashing, access restriction, infrastructure isolation and access logging.

11. Important note on the nature of the Service

Calvero is not a medical service. Calorie and nutrition calculations are produced by AI algorithms, are estimates, and are intended for informational purposes only. The Service does not provide medical advice, does not diagnose, and does not replace consulting a doctor or dietitian. If you have a medical condition or special dietary requirements, consult a specialist.

12. Changes to this Policy

The Operator may update this Policy. The current version is always available on this page with its effective date. Material changes will be additionally communicated through the Service.