# Calorie privacy

Calorie is local-first. Foods, entries, four nutrients, water, routine check-offs, weight, goals, and profile fields stay on the iPhone or iPad unless the user chooses Sign in with Apple and private Cloudflare D1 sync.

## Optional sync

- Sync is user-scoped and is not required to open or use the local journal.
- The service stores the account and reliability records needed for authentication and synchronization.
- One person's foods or entries must never be exposed to another person.

## Controls and boundaries

- The native app provides local export and deletion controls.
- Exported files become the user's responsibility outside the app.
- Calorie is not medical care; timing and target estimates can be incomplete or wrong.
- The static marketing page does not receive a local-only journal and does not run product analytics.

Last updated: 2026-08-28