Privacy policy

Calori is operated by 6Away. Questions about this policy or your data: support@6away.ai.

Using the Calori app requires signing in with a 6away account (6away Auth at auth.6away.ai), the shared sign-in for 6away services. Sign-in is identity only: Calori does not ask about your age, weight, height, goals or habits.

From your sign-in Calori receives a stable identifier, your name and your email address. The identifier is what ties your data to you; it never changes, so changing your email at 6away does not create a new Calori account. Your name and email are shown to you in Settings so you can see which account you are using; Calori does not use them to look anything up, does not store them in its database and does not send you marketing.

6away Auth has its own privacy terms covering the sign-in itself, including sign-in with Google where offered.

Your Calori account holds only what you confirm and save:

• Meals — name, calories, protein, the date and time you ate, optional portion (grams or millilitres) and optional nutrition details (carbs, fat, fibre, sugar, sodium), and whether those details were known or estimated.
• My foods — your personal library of foods learned from meals you saved, with their confirmed values and how often you use them.
• Settings — daily calorie and protein targets and your unit preference.

Calories and nutrition are information about your diet. Calori treats it as yours: it is not sold, not shared with advertisers and not used to profile you.

Your meals, My foods and settings are stored in your Calori account so the same history appears on every device you sign in to. A copy is also kept on each device (in the browser’s local storage) so Calori opens instantly and keeps working offline; changes made offline are uploaded when you reconnect. Signing out removes the copy from that device once it has finished syncing. Nothing is uploaded from a device into an account it does not belong to.

Calori runs on Vercel and stores account data in a dedicated database hosted by Neon, currently in the United States. Data is encrypted in transit, and the database provider encrypts it at rest.

When you describe a meal or take a photo of one, Calori sends only that description or that photo (plus any note you typed) to the 6away Engine, 6away’s own estimation service, to produce a calorie and protein estimate. The Engine may use third-party AI models to produce the estimate; Calori is not told which one.

The photo is resized on your device before upload and is processed only to produce the estimate. Calori does not store the photo, does not attach it to your meal history and does not put it in your account. Only the numbers you review and confirm are saved.

An estimate is a suggestion. What is recorded is always your final, confirmed entry. Calori also records whether you accepted, edited or rejected an estimate — as a yes/no signal without the meal contents — to help improve estimation quality.

Food search runs entirely on your device against a built-in food catalogue and your own history. Search terms are not sent anywhere and are not stored.

Calori uses a single session cookie to keep you signed in (it cannot be read by scripts) and a few short-lived cookies that exist only during sign-in to protect the sign-in flow. There are no advertising or analytics cookies.

Calori’s servers record request outcomes and timings (for example that a sync succeeded and how long it took) so we can keep the service reliable. These logs never contain meal contents, photos, descriptions or sign-in tokens, and they age out automatically under our hosting provider’s retention.

You can export your meals, My foods and settings as a file at any time from Settings, and import such a file into your account. The export is yours; Calori does not keep a copy.

Your account data is kept until you delete it. You are in control of both options:

• Delete all data (Settings) removes every meal, food and setting from your account, on every device, and keeps your account.
• Delete my Calori account (Settings → Account) permanently removes all of that plus your Calori account itself. Your 6away identity is not deleted, because it may be used with other 6away services. See deleting your account.

Your data is only ever returned to the account that owns it, verified server-side on every request. The people operating Calori can access the database for maintenance and support and do so only when needed. Calori does not sell personal data and has no advertising partners. The service providers above (6away Auth, 6away Engine, Vercel, Neon) process data only to provide Calori.

Calori is intended for adults managing their own nutrition and is not directed at children.

When this policy changes, the effective date at the top changes with it. Material changes will be pointed out in the app.