Calyxo — Privacy Policy

Last updated: August 22, 2026

Contact: hello@dffrent.co

Data controller: Dffrent, Türkiye

Summary

Calyxo is an AI-powered nutrition and meal-tracking app. We process account, nutrition, activity, purchase, technical, and usage information to provide and improve the service.

We also use advertising and measurement tools from Meta and TikTok to attribute installs and conversions, measure campaign performance, optimize advertising, and, where permitted, create or reach advertising audiences. These tools may receive limited device, identifier, campaign, and event data as described below.

We do not sell personal information for money. We do not intentionally share meal photos, meal contents, nutrition values, weight, goals, notes, or Apple Health data with Meta or TikTok for advertising.

Terms of Use (EULA)

Apple Standard EULA

1. Scope

This Privacy Policy applies to the Calyxo mobile application, our Calyxo websites and landing pages, and related services that link to this policy. It explains what information we collect, how and why we use it, when we disclose it, and the choices and rights available to you.

2. Information We Collect

  • Account data: email address, name, language, timezone, subscription status, onboarding preferences, account identifiers, and remaining AI scan credits for free accounts.
  • Nutrition and activity data: meals you log, calories and macros, optional meal photos and analysis results, goals, weight entries, and, if you authorize access, active calories and steps from Apple Health.
  • Purchase data: subscription status, product identifiers, transaction identifiers, purchase time, price, currency, and receipts supplied by an app store. We do not receive or store your full payment card number.
  • Usage and diagnostics: app or website interactions, feature usage, pages or screens viewed, session information, crash logs, performance data, and support communications.
  • Device and network data: device type, operating system, app or browser version, language, timezone, IP address, approximate location derived from IP, and similar technical information.
  • Advertising and attribution data: advertising identifiers such as IDFA or AAID when available and permitted, cookie or similar identifiers, campaign and referral identifiers, ad views or clicks, and limited event data such as an install, app open, registration, trial, subscription, or purchase event and its time, value, and currency. When matching features are enabled, this may also include a hashed email address or another pseudonymous account identifier.

3. Sensitive Nutrition and Health Information

Nutrition, weight, meal-photo, and Apple Health information may be sensitive. We use it to provide features you request, such as meal analysis, calorie tracking, and progress insights. We do not use Apple Health data for advertising, sell it, or disclose it to data brokers.

We do not intentionally send meal photos, meal contents, calories, macros, weight, goals, notes, or Apple Health data to Meta or TikTok. Advertising event names and parameters are intended to report actions such as registration or subscription without revealing the underlying nutrition or health content.

4. How We Use Information

  • Provide meal scanning, calorie tracking, progress insights, account synchronization, and group room features.
  • Manage subscriptions, Calyxo Pro access, transactions, and free-tier scan credits.
  • Send service messages and optional reminders or notifications that you can disable in system settings.
  • Operate, secure, troubleshoot, analyze, and improve the app and our websites.
  • Attribute installs, registrations, trials, subscriptions, and purchases to advertising campaigns.
  • Measure ad performance, limit repeated ads, optimize campaigns, and, where permitted, support personalized advertising, retargeting, and audience creation.
  • Prevent fraud, enforce our terms, comply with law, and protect users, Calyxo, and others.

5. Advertising, Analytics, and Similar Technologies

Depending on the platform and campaign, we may use mobile SDKs, pixels, cookies, and server-side event APIs. These technologies can recognize a browser or device and connect an ad interaction with a later action in Calyxo.

  • Meta Business Tools: Meta Pixel, Meta SDK, and/or Conversions API may be used for campaign attribution, measurement, optimization, and audience services. Meta may process the event and identifier data under its own terms and privacy policy. Read the Meta Privacy Policy.
  • TikTok for Business Tools: TikTok Pixel, TikTok SDK, and/or Events API may be used for campaign attribution, measurement, optimization, and audience services. TikTok may process the event and identifier data under its own terms and privacy policy. Read the TikTok Privacy Policy.
  • Google Analytics: our websites may use Google Analytics, including through Google Tag Manager, to understand traffic, interactions, and performance. Read the Google Privacy Policy.

These partners may combine information received from us with information they already hold, subject to their own policies and your settings. The specific provider entity and its role as a processor, service provider, independent controller, or joint controller can vary by jurisdiction and feature.

6. Legal Bases

Where applicable law requires a legal basis, we process information:

  • to perform our contract with you and provide the service you request;
  • with your consent, including for Apple Health access, notifications, non-essential cookies, advertising identifiers, or tracking where required;
  • for legitimate interests such as security, service improvement, analytics, and advertising measurement where those interests are not overridden by your rights; and
  • to comply with legal obligations and protect legal rights.

7. When We Disclose Information

  • Service providers: cloud hosting, databases, authentication, AI processing, customer support, push delivery, analytics, security, and other vendors acting for us.
  • App stores and payment partners: Apple and Google, as applicable, for purchase processing, subscription management, and validation.
  • Advertising and measurement partners: Meta, TikTok, and analytics providers for the purposes and limited data described in this policy.
  • Legal and safety recipients: authorities, courts, advisers, or other parties when required by law or reasonably necessary to prevent harm, fraud, or misuse.
  • Business transfers: a buyer, investor, successor, or adviser in connection with a merger, financing, reorganization, or sale, subject to appropriate safeguards.

We do not sell personal information for money. However, disclosure to advertising partners for personalized advertising or audience services may be considered a “sale,” “sharing,” or targeted advertising under some privacy laws. Where those laws apply, you may opt out as described below.

8. Your Advertising and Tracking Choices

  • Where required, we request permission before accessing an advertising identifier or enabling non-essential tracking. You may refuse or withdraw consent without losing access to the app’s core features.
  • On iOS, you can change tracking permission in Settings → Privacy & Security → Tracking. On Android, you can manage or reset the advertising ID and ad privacy controls in your device settings.
  • You can block or delete cookies in your browser settings and use any consent controls shown on the relevant website.
  • You can adjust ad preferences directly in your Meta, TikTok, and Google accounts.
  • To opt out of targeted advertising or advertising-related disclosure where applicable, contact hello@dffrent.co.

Disabling tracking does not necessarily stop all advertising, but it may reduce personalization and our ability to attribute actions to a campaign.

9. Data Retention

  • Account, nutrition history, and subscription data are retained while your account is active and for limited periods afterward when needed for legal, security, dispute, or accounting purposes.
  • Meal photos are processed to provide analysis and are not used for unrelated advertising purposes.
  • Advertising and analytics event data is retained only as long as needed for measurement, security, legal compliance, and the purposes described above.
  • Our partners retain information under their own settings, contracts, and privacy policies.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a denied request.

You can delete your account from the Profile screen. To exercise another right, email hello@dffrent.co. We may need to verify your identity before completing a request. You may also complain to your local data protection authority.

11. Children

Calyxo is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from a child below the applicable minimum age. If you believe a child has provided information, contact us so we can take appropriate action.

12. Security and International Transfers

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of storage or transmission is completely secure.

We and our providers may process information outside your country. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or contractual protections.

13. Policy Updates

We may update this Privacy Policy as our practices, products, or legal obligations change. We will change the “Last updated” date and provide additional notice in the app or by another appropriate method when required.

14. Contact Us

For privacy questions, requests, or complaints, contact Dffrent at hello@dffrent.co.