Consumer Health Data Privacy Policy

Effective October 17, 2026 · BareCal app for Android

This policy is for consumers in Washington, Nevada, Connecticut and other US states with consumer health data laws. It describes the consumer health data the BareCal app handles. BareCal processes this data on your phone. It reaches the developer's systems only if you choose cloud save (Continue with Google), and then only to keep a copy for you.

Categories of consumer health data

• Food and drink intake, calories, macronutrients and other nutrients
• Body weight, height, age and sex
• Water intake
• Activity level, steps and exercise sessions
• Goals, diet phases and training-day targets
• Estimates derived from this data, such as estimated daily calorie burn and suggested targets

Sources

• You, when you enter information in the app
• Health Connect, if you allow it, which may contain data from your watch, scale or other apps

Purposes and use

• Showing your food log, nutrition, weight, activity and trends
• Calculating estimates and suggested targets that you can accept or ignore
• Creating exports and reports when you ask for them
• Backing up your app data to your own Google account, if backup is on in your phone's settings
• Saving a copy to your BareCal account and restoring it on another phone, if you choose cloud save

Categories of consumer health data shared

BareCal does not sell consumer health data and never uses it for advertising. Health data leaves your phone only in these cases, each of which you choose:

• Cloud save (Continue with Google): a copy of all the categories above, stored with Google Firebase acting as the developer's processor under a contract that limits its use to providing the service.
• Backup: your app data, including the categories above, if Android backup is on.
• Health Connect (only if you allow writing): meals, nutrition, water and weight.
• Exports: the data in a CSV or PDF you create and choose to share.

Third parties and affiliates receiving data

• Google, as the developer's processor for cloud save (Firebase), and as the provider of Android backup to your Google account and of Health Connect on your device.
• Other apps you choose to connect through Health Connect.
• Anyone you choose to send an export to.

BareCal has no affiliates.

Your rights

• Access and delete: view all your data in the app; export it in Profile → Your data → Export as CSV; delete it, including the copy saved to your account, in Profile → Your data → Delete all data, or at barecal.app/delete-account.
• Withdraw consent: remove Health Connect access in Health Connect settings; sign out or delete your account copy to stop cloud save; turn off backup in your phone's settings; stop entering data or uninstall the app.
• List of recipients: on request, we'll give you a list of every third party and affiliate that received your consumer health data, with their contact information.
• Requests and appeals: email support@barecal.app. Requests are free, and you don't need a BareCal account to make one. You'll get a response within 45 days. If we need more time, we'll tell you within those 45 days and may extend once by another 45 days. If a request is declined, you can appeal by replying to that email with "Appeal" in the subject; appeals are answered in writing within 45 days. If you're unhappy with the appeal result, you can contact your state Attorney General (in Washington: atg.wa.gov/file-complaint).
• Deletion covers the data on your phone and the copy saved to your account. Google's encrypted system backups are overwritten under its Firebase data processing terms.

Consent

We ask for your consent in the app before you start, before cloud save is turned on, before each Health Connect data type is connected, and before any new use of your data.

Changes

Changes to this policy are posted here with a new effective date and shown in the app before they apply.

Contact

Privacy Officer, BareCal · support@barecal.app