Your data stays on your device. CalPal is a local-first app: meals, weight, workouts and health metrics are stored only in your browser or the app on your phone. There are no accounts and no CalPal servers holding your data.
Health Connect. The Android app reads (never writes) steps, calories burned, sleep, heart rate and weight from Health Connect, solely to display them to you and compute your daily targets on-device. This data is not transmitted to CalPal or any third party.
Integrations you enable. If you connect Intervals.icu, requests are made with your own API key. If you use photo meal estimation, the photo is sent to the AI provider configured by the deployment for analysis only. Barcode lookups query the public OpenFoodFacts database with the barcode number only.
Deleting your data. Settings → Reset everything wipes all data from the device, and revoking Health Connect permissions stops all reads.