Privacy Policy

Effective date: July 28, 2026

TypeCal (“TypeCal,” “we,” “us,” or “our”) is operated from India. TypeCal is a food logging and nutrition app that offers calorie and macro estimates, hydration tracking, recipes, a pantry, grocery lists, progress tracking, reminders, and related wellness features.

This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. It applies to the TypeCal mobile app, website, backend services, browser authentication and OAuth pages, and Model Context Protocol (“MCP”) features.

Privacy at a Glance

• Do we sell your data? No. We never sell your personal information.
• Do we use your health data for ads? No. Apple Health data is never used for advertising.
• What powers the food estimates? Automated systems and AI. Estimates can be wrong — review them.
• Where is your data stored? With our hosting, database, storage, and other service providers in the United States and other countries where they operate.
• Can you delete your data? Yes. You can edit or delete entries in-app and delete your entire account.
• Who can you contact? support@typegenstudio.com

Information We Collect

Account & Sign-In. When you create an account or sign in, we collect what’s needed to identify and secure it — your email address, display name, sign-in provider, and authentication identifiers from Apple, Google, or our authentication provider.

Profile & Setup. Information you provide during onboarding or in settings, such as age, sex, height, weight, activity level, goals, preferred pace, units, dietary preferences, and allergies. We use this to personalize your targets and reminders.

Food, Nutrition, Hydration, Recipes, Pantry & Grocery. The content you create in TypeCal — food logs, meal descriptions, calories, macros, serving details, hydration entries, saved meals, recipes and recipe links, pantry items, grocery list items, edit and deletion history, and progress data, along with the dates and times of your entries.

Photos, Barcodes, Labels, Voice & Imports. If you use the camera, photo, barcode, nutrition-label, voice, or recipe-import features, we process the content you provide — photos and images, barcodes, nutrition-label data, typed or pasted text, recipe URLs and webpage content needed to import recipes, and voice audio or transcripts. Photos attached to saved food logs are stored with our storage provider and linked to your account.

Apple Health (optional). If you authorize it, TypeCal may read selected Apple Health data (such as dietary energy, protein, carbohydrates, fat, body weight, steps, and active energy) and write nutrition entries back to Apple Health when you save food logs. We may send limited activity summaries (like daily steps and active-energy calories) to our backend to support progress and rewards. You control this in the Apple Health app or iOS Settings.

Subscriptions & Purchases. If you start a free trial or subscribe, your purchase is processed by Apple and managed through our subscription-management provider. We receive subscription status, product, trial and renewal information, and anonymized purchase identifiers. We never receive or store your full payment card details — Apple handles that.

Device, Usage & Diagnostics. Technical information needed to run, secure, and improve TypeCal — device identifiers and notification tokens, app and OS version, network status, request metadata, feature-usage events (such as parse attempts and feedback submissions), and crash or error reports.

Connected AI Clients (optional). If you connect TypeCal to Codex, ChatGPT, Claude, or another compatible Model Context Protocol (“MCP”) client, that third party receives your TypeCal account email as the sole requested OAuth identity scope and may request the TypeCal information you explicitly authorize, such as profile targets, daily summaries, food-log history, nutrition and hydration progress, saved meals, and recipes. The signed access token necessarily also contains a private internal TypeCal account identifier (typecal_mcp_user_id) so our backend can resolve the authorized owner; a client that handles the token can inspect that identifier. For isolation, the token uses a client-specific pseudonymous subject, a no-privilege MCP role, and a reserved non-user session marker. Phone, profile/provider metadata, and authentication-method metadata are removed from delegated tokens. Native OpenID and /oauth/userinfo are not supported in this private beta. The current MCP beta is read-only. TypeCal records limited security and operational metadata about these requests, such as your account ID, the connected client ID, tool name, request ID, outcome, timing, and response size. TypeCal does not place authorization tokens, tool arguments, returned food or recipe content, or your prompts in its MCP audit records.

Product Analytics & Session Recordings. We use an analytics provider to understand how the app is used. This includes recording a sample of in-app sessions — roughly 25% — that capture on-screen interactions so we can find and fix problems. These recordings mask your text inputs and images, and we do not capture your keystrokes, network content, or logs.

Feedback & Support. If you contact us or send feedback, we collect your message and any details needed to respond.

How We Use Your Information

We use your information to:

• create, authenticate, and maintain your account;
• provide food logging, estimates, hydration, recipes, pantry, grocery, progress, rewards, and notifications;
• personalize your targets, reminders, and insights;
• process images, text, voice, barcodes, labels, and recipes into nutrition estimates;
• sync your data across devices and restore your account;
• provide read-only access to TypeCal information through an AI client that you connect and authorize;
• measure product usage and improve reliability, accuracy, and safety;
• process subscriptions, trials, and purchases;
• detect and prevent abuse, fraud, and security or technical problems;
• respond to feedback and support requests; and
• comply with legal obligations and enforce our terms.

AI & Automated Estimates

TypeCal uses automated systems, nutrition data, computer vision, speech recognition, and third-party AI services to estimate foods, ingredients, calories, macros, portions, and recipes. When you log a meal, the relevant input (such as your text, a photo, or a voice transcript) is sent to these providers to generate an estimate.

These outputs are estimates. They may be incomplete, inaccurate, or unsuitable for your needs. Always review and edit results before relying on them. TypeCal is not medical or dietary advice.

How We Share Information

We do not sell your personal information, and we do not use Apple Health data for advertising. We share information only with service providers who help us run TypeCal, and only for the purposes described here:

• Hosting, database & storage providers — to run our servers and store your app data, including photos you attach to logs
• AI and machine-learning providers — to process food text, photos, and voice into nutrition estimates
• Analytics providers — to understand how features are used, including sampled and masked session recordings, so we can improve the app
• Crash and error-reporting providers — to diagnose and fix problems
• Subscription and payment processing — handled by the Apple App Store and our subscription-management provider
• Sign-in providers (Apple and Google) — to authenticate you, when you use those methods
• Apple Health — only as directed by your device permissions and your actions
• AI clients you connect — to return the TypeCal information requested through an OAuth-authorized, read-only MCP connection; the operator of that AI client processes the information under its own terms and privacy policy

We may also disclose information: to legal, safety, or compliance recipients when required by law or to protect rights and safety; and to a successor entity if we are ever involved in a merger, acquisition, or sale of assets, subject to appropriate protections.

Data Retention

We keep personal information for as long as needed to provide TypeCal, maintain your account, comply with legal obligations, resolve disputes, and maintain backups.

Disconnecting an AI client prevents new TypeCal access after revocation completes. It does not delete prompts, responses, account information, or TypeCal data that the AI client or its provider already received or retained. Contact that provider and use its deletion controls for information held by it.

When you delete an individual log, recipe, photo, or other entry, TypeCal removes it from active app systems. When you delete your account, TypeCal immediately revokes the account and removes its active profile, logs, nutrition and wellness data, recipes, pantry and grocery content, notification records, feedback, and other account-linked app data. Stored account media is queued for deletion after a short safety window of up to two hours so uploads already in progress can finish; failed media deletions are retried automatically. Limited backup, security, fraud-prevention, or legally required copies may remain until the applicable backup cycle or legal retention period expires, and are not restored to an active account.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information. No system is perfectly secure, however, and we cannot guarantee that information will always remain secure.

For connected AI clients, TypeCal quarantines delegated access tokens from ordinary first-party account and data services. The delegated token is intended only for the approved read-only MCP resource and is designed to be denied by TypeCal’s direct account-management, file-storage, REST, GraphQL, Realtime, and serverless-function surfaces. Ordinary TypeCal app sessions keep their existing identity and permissions.

Your Rights & Choices

You can:

• edit or delete individual logs, recipes, photos, and other entries inside TypeCal;
• delete your entire account and associated data from within the app (or by emailing us);
• manage permissions for Apple Health, camera, microphone, and notifications in iOS Settings;
• manage your subscription in the App Store;
• disconnect an AI client through that client’s settings and, when enabled for your account, through TypeCal’s connection-management page;
• sign out at any time; and
• request access, correction, deletion, or export of your data by contacting us.

To exercise any of these rights, email support@typegenstudio.com.

Children’s Privacy

TypeCal is not directed to children. You must be at least 13 to use TypeCal, and if you are under 18, you may use it only with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal data from a child without the consent of their parent or guardian. If you believe a child has provided us information without such consent, contact us and we will delete it.

Your Privacy Rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. We honor these requests as required by applicable law and do not discriminate against you for exercising them.

India (Digital Personal Data Protection Act). If you are in India, you may request access to, correction of, or erasure of your personal data, nominate another person to exercise your rights on your behalf, and raise a grievance with us about how we handle your data. To exercise any of these rights or raise a grievance, email support@typegenstudio.com, and we will respond as required by law.

Some information you provide — such as nutrition, weight, and wellness data — may be considered sensitive. We use it only to provide the features you request, and we do not sell it.

International Users & Cross-Border Transfers

TypeCal is operated from India. Our hosting, database, storage, AI, analytics, crash-reporting, authentication, and other providers may store or process information in the United States and other countries where they operate. Those countries may have different data-protection laws than your own. Where required, we take steps to protect information transferred across borders.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law — for example, by updating the effective date above or posting an in-app notice.

Contact

For any privacy question or request, email support@typegenstudio.com.