Calniva
Who we are
TSINGINC CO., LIMITED (“Calniva”, “we”, “us”) operates the Calniva app and this product website. This policy explains information handled by the current app, our AI service and support channels. Contact us at tsinginc@gmail.com with “Calniva privacy” in the subject, or use our support page.
Your local records
Your onboarding answers, profile, nutrition targets, food diary, saved photos, recipes, meal plans, exercise, water, weight, fasting and feedback drafts are stored on your device. Calniva does not require an email account and does not operate a cloud diary backup. You control exports and sharing through the iOS share sheet. Files you export are handled by the destination you select.
Uninstalling, losing or replacing a device may remove local records. Your operating system may provide its own device backup independently of Calniva. Export records you want to keep before removing the app.
AI: what leaves your device
Before your first AI upload, Calniva asks for explicit permission. With that permission, your selected photo or food description is sent through our servers to Zhipu AI (BigModel), operated by 北京智谱华章科技股份有限公司, to estimate nutrition. Corrections include the food or recipe you want to change and your instructions. Recipe generation and recreation also include relevant saved dietary restrictions, cuisines, notes, nutrition targets and preparation preferences.
We do not upload your full journal or raw Apple Health readings for AI processing. Do not include names, faces, contact details or unrelated sensitive information in food photos or notes. A dietary restriction or a note you choose to send may itself reveal health information.
Zhipu AI handles submitted content under its privacy policy and service terms. Its published policy describes processing in China and allows certain anonymized data uses for improvement, including model training. We do not promise that the provider retains no data or never uses data for training. Please review its policy before consenting.
Withdraw permission in Settings → AI & privacy. This prevents new AI uploads; it cannot reverse processing already performed. Manual tracking remains available if you decline or withdraw. Material changes to the recipient or categories shared require renewed permission.
Service access and retention
AI access uses a random installation identifier and a device credential, not an email login. On iPhone, credentials are stored in device-only Keychain. Our servers retain pseudonymous installation records, hashed credentials, session information, request identifiers and usage counts to provide access, track the shared free experience, recover requests and limit misuse. Current Premium access flags are sent with AI requests; Apple receipts and payment card details are not sent to our AI provider.
Uploaded photos and prompts are processed to fulfill your request and are not intentionally stored as a diary by Calniva. Successful AI results are cached for recovery, normally with a 10-minute validity period, and become eligible for cleanup after expiration. Cleanup occurs during service use; expired database entries or restricted operational backups may persist longer. Request fingerprints and usage records do not contain the original image, but cached results can contain the food description and nutrition you submitted.
Installation, trial, security and usage records persist while needed for access, abuse prevention, resolving a dispute or legal obligations; they do not automatically disappear when you delete your local diary. Contact us to request deletion of server-held information. Because we do not have your email linked to an installation, we may need limited information from your device to identify the relevant records. Never send us API keys, device credentials or passwords.
Other services and permissions
App analytics and attribution
Calniva uses GameAnalytics for app usage events and remote feature configuration, Kochava for install attribution and subscription conversions, and Meta (Facebook) for advertising attribution and app events. These SDKs may process app and device identifiers, IP and connection information, technical diagnostics, app sessions, onboarding completion, paywall views, checkout events and subscription events. Kochava derives approximate location from your IP address for analytics and reporting and may use it for attribution, depending on attribution settings. Advertising tracking follows your iOS App Tracking Transparency choice; denying tracking does not prevent you from using Calniva. Declining tracking prevents access to the advertising identifier; operational and analytics processing may still occur. You can change this permission in iOS Settings. We do not send your HealthKit data, food diary, photos, profile answers or AI prompts to these SDKs. Our first-party event integration uses only a limited set of app and purchase events; it does not attach your health or journal content.
For details about the providers and their data handling, retention and privacy choices, see GameAnalytics privacy, Kochava privacy and Meta privacy. Purchases and subscriptions remain managed by Apple.
Apple: Apple processes payments and subscription management. StoreKit verifies entitlements on your device. The app does not collect your payment card details. Camera, Photos and notification access are controlled by iOS permissions; choosing a photo does not authorize sending your entire library.
Apple Health: approved activity readings and sync caches stay on your device. If you enable journal sync, approved nutrition, water and weight totals may be written to Apple Health. Disabling sync does not remove existing Health records; removal is a separate action. Health information is not used for advertising.
Open Food Facts: barcode lookup sends the scanned product barcode through our service to Open Food Facts for product data, rather than asking an AI to invent barcode nutrition. See Open Food Facts privacy information.
Website, support and international processing
These Calniva pages use no advertising trackers, analytics scripts or signup forms. Standard web and security logs may contain your IP address, request path, browser information and request time. Company pages outside /calniva/ may use a different website platform and their own cookies.
If you email support or use the company contact form, we receive the contact details, message and attachments you choose to send. Email and contact-form providers process those communications. We use them to respond, resolve issues and keep necessary support records. Do not send food or health records unless they are needed to explain the issue.
Our hosting and AI providers may process information outside your country, including in the United States and China. Those countries may have different privacy protections. We use access controls and encrypted network connections to protect information in transit. No system can guarantee absolute security.
Your choices and rights
You can edit or delete local records, export your data, withdraw AI permission, and manage iOS permissions. We do not sell your personal information or use your diary for targeted advertising. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of information, withdraw consent, or complain to your local privacy regulator. Contact us using the address above so we can consider your request and verify it without collecting unnecessary information. Withdrawal does not invalidate processing already lawfully performed.
Calniva is intended for adults aged 18 and over, not children. If you believe a child has sent personal information through our service, contact us. We may update this policy as the app changes and will update the effective date. Significant changes will be explained in the app or on this site.