Who is responsible for your data
Calift is operated by Arnoldas Januska, based in Lithuania, who is responsible for the personal information described in this policy. Contact [email protected] for privacy questions or requests.
This policy covers the Calift app for iPhone, its Apple Watch companion, the services that support them, and this website.
Information we collect
- Account and connection information. A randomly generated account identifier, a verifier for your private account key, session records, and device-verification records help authenticate connections and protect your account.
- Profile and preferences. Your profile name, age or birth year, sex, height, weight, goals, training preferences, equipment, and notes are used to personalize your diary, targets, and training.
- Food, training, and progress records. Meals, ingredients, nutrition, routines, workouts, sets, weight entries, and body check-ins are saved to provide your diary and progress history.
- Photos and recordings you choose to provide. Meal photos, front and side body photos, and meal-description recordings are processed for the features you use. See AI features for information about external processing.
- Apple Health information you authorize. Supported categories include weight, workouts, dietary calories and macronutrients, active energy, steps, exercise time, and sleep.
- Purchase information. App Store transactions, subscription status, and related identifiers let us check paid access and restore purchases. Apple processes payment details; Calift does not receive your full payment card information.
- Technical and support information. Requests to our services and hosting providers can include your IP address, device or browser information, timestamps, and error information. If you contact us, we receive your email address, message, and attachments.
Calift creates an account automatically rather than requiring an email address and password. The app stores an account key in Apple Keychain. If iCloud Keychain is enabled and synchronizes the key, the app can use it on another device. An account without an email address is still an identifiable account, not an anonymous diary.
Why we use your information
We use your information to provide and synchronize your diary, calculate targets, display progress, generate estimates or training suggestions you request, validate subscriptions, recover saved data, respond to support requests, and protect the service against abuse.
Under European data-protection law, the grounds for processing depend on its purpose: providing the service you request, meeting legal obligations, protecting our legitimate interests in security and reliable operation, and consent where required for optional processing. Health-related information may require an additional legal condition, such as explicit consent. Apple system permissions and acceptance of the terms do not by themselves replace any consent required by law.
Where processing relies on consent, you may withdraw it by contacting us. Withdrawal does not invalidate processing that occurred before withdrawal. Your choices explains how to stop future sharing and request deletion.
Apple Health and Apple Watch
Connecting Apple Health is optional. Your Apple Health permissions determine which supported information the app can read or write. Imported information can be saved locally and synchronized to Calift's server to provide your history and recovery.
To change access, open the Health app on your iPhone, tap your profile picture, then choose Apps → Calift under Privacy. Calift's Profile → Apple Health screen also explains these steps. Turning off a permission stops future access for that category; it does not automatically delete copies previously imported into Calift.
Contact us to request removal of imported data, or use account deletion to delete the Calift account. Deleting Calift's copies does not delete the original records in Apple Health. Data written to Apple Health is controlled separately through Apple's Health app.
The Apple Watch companion exchanges supported workout, food, and weight information with your iPhone. Health and diary information is not used for advertising.
Photos, recordings, and AI features
When you request an AI feature, selected inputs go to Calift's server and through OpenRouter to a model-hosting provider:
- Meal estimates: the description and selected meal photo, if supplied.
- Training suggestions: your training goal, experience, equipment, schedule, session length, coach notes, routines, and relevant Calift workout history.
- Body scans: the selected front and side photos and current weight. If you connect Apple Health, the weight used for a scan may come from Apple Health.
- Meal transcription: the recording you submit, which is converted into text for you to review.
Calift uses Anthropic, Google, and OpenAI models. The company hosting a model can differ from its developer. Food requests are routed by OpenRouter to eligible hosts; other current AI routes are restricted to Microsoft Azure and Google Cloud Vertex AI. OpenRouter describes its hosting partners in its provider directory.
Calift requests routes that OpenRouter marks as zero data retention and disables routes that collect inputs for training. This is a routing restriction, not a promise that every intermediary retains no information. Provider security, abuse-prevention, billing, and legal records can be subject to separate rules. Calift also retains request records as described below.
Body photos are not published to other Calift users. Requesting an AI scan does share those photos with the processing services described here. Calift does not include your account key or profile name in AI inputs. Apart from a weight used for a body scan, imported Apple Health records are excluded from AI requests. Text, photos, and recordings can contain other personal information you include yourself.
You can use manual food entry and workout logging without requesting AI processing. To avoid sending new information to AI providers, use those manual features. A request that has already reached a provider cannot be recalled by closing the app. Contact us about deletion of previously submitted information.
Service providers and international processing
Calift uses the following services to operate the app:
- Hetzner: hosting for the application server and databases.
- Cloudflare: website delivery, private photo storage, and encrypted recovery storage.
- RevenueCat: subscription validation, entitlement status, and subscription reporting using account, transaction, and device information.
- OpenRouter and model-hosting providers: processing the AI inputs described above.
- Apple: App Store billing, device verification, Health permissions, Keychain synchronization, and notification services under Apple's own terms.
- Email services: delivering and storing support correspondence you send us.
Provider information is available from Hetzner, Cloudflare, RevenueCat, OpenRouter, and Apple.
Providers may process information outside Lithuania or the European Economic Area, including in the United States. An EU storage location does not mean all billing, support, or AI processing stays in the EU. You can contact us for information about processing locations and the transfer safeguards applicable to your information.
We may also disclose information when required by law or when necessary to investigate abuse, protect people, or establish or defend legal claims. Calift does not sell personal information or share health and diary information with advertising networks.
Retention and deletion
- Saved profile and diary. These records remain available while your account exists, unless you delete entries or request their removal. Local copies support offline use.
- Photos. Photos attached to your records are kept with the account. Deletion schedules the associated stored objects for cleanup. Cleanup can require retries if storage is temporarily unavailable.
- AI inputs and results. Queued inputs are retained while a request is processed or retried. Settled requests clear their stored input. Results expire from server request history after 30 days from the request date. Meals, routines, and check-ins you save from a result remain in your diary until removed. Limited request identifiers, status, and usage records can remain for accounting and prevention of duplicate processing.
- Recordings. Temporary audio is removed after capture or processing; an unfinished request can retain a local copy for retry. The resulting transcript follows the AI-result retention described above.
- Backups and recovery records. Encrypted recovery copies are maintained separately from active data. Older snapshots are removed through backup maintenance rather than a fixed automatic expiry. Account-deletion records prevent a restored backup from reactivating a deleted account. Some deletion, recovery, and request-accounting records have no automatic expiry. Account deletion does not immediately erase every backup object.
- Support, security, and payment records. Support correspondence is retained to resolve the request and handle related follow-up or disputes. Technical records support troubleshooting and abuse investigation. Payment and provider records may need to remain for their legal, security, or accounting purposes under the relevant provider's policies.
Use Profile → Delete account to initiate deletion in Calift. The process removes the active account and associated diary records, retires device-verification records, and schedules related photos for cleanup. A connection is required. If the app reports an incomplete deletion, retry until it confirms completion. See the full deletion instructions.
Deleting an account does not cancel an App Store subscription, remove data you exported or shared elsewhere, erase original Apple Health records, or automatically delete every record held independently by Apple or another provider.
Your choices and rights
You can edit your diary, change Apple Health permissions, avoid AI features, manage notification permission in iPhone Settings, and delete your Calift account. Meal and workout reminders are scheduled on your device. Advertising and optional analytics integrations are currently disabled.
Depending on applicable law, you can request access, correction, erasure, restriction, or a portable copy of your information; object to processing based on legitimate interests; and withdraw consent where processing relies on it. Email [email protected]. We may need to verify account ownership before disclosing or changing private data. Do not email your account key, recovery secret, Apple password, or card details.
For GDPR requests, the normal response period is one month. If a permitted extension is needed, we will explain it. You may complain to your local data-protection authority or Lithuania's State Data Protection Inspectorate.
Calift's calculations and AI suggestions provide information for you to review. They do not make legal or similarly significant decisions about you.
Younger users
Calift is intended for people aged 13 and older. If you are under the age at which you can independently authorize the relevant processing or enter a contract where you live, a parent or legal guardian must authorize your use where required by law. The App Store age rating does not itself provide that authorization.
If you believe a child under 13 has provided personal information, or you are a parent or guardian with a privacy concern, contact [email protected] so we can investigate and address it.
This website
The Calift website serves static pages, images, and fonts. It does not include advertising pixels, an analytics script, a signup form, or application cookies. Cloudflare processes connection information to deliver and protect the site and may process technical network reports. Clicking an App Store or other external link takes you to a service with its own privacy policy. Email links open your email application.
Changes and contact
We will update the date on this page when this policy changes. Material changes to processing will be communicated as required by law; where new consent is required, an updated policy alone does not provide it.
Privacy contact: Arnoldas Januska, Lithuania. [email protected].