Privacy Policy
This policy explains what information Tuleco Calorie Tracker (“the app”, “we”, “us”) collects, how we use and store it, who we share it with, and the choices you have. It applies to the Tuleco Calorie Tracker app and to this website, https://caltracker.tuleco.co.uk.
The short version
- You sign in with Google. We receive your name, email address and profile picture, and nothing else from your Google account.
- We store the calories, weight and daily calorie goal that you enter, so you can see your history and use the app on any device.
- Your data is used only to run the app for you. We don't sell it, we don't show ads, and we don't share it for advertising or marketing.
- Your data is stored with Google Firebase, our only service provider, and each account can only read its own data.
- You can ask us to correct or delete your data at any time by emailing [email protected].
1. Who we are
Tuleco Calorie Tracker is provided by Tuleco, who is the “data controller” for the personal information described in this policy. You can contact us at [email protected].
2. Information we collect
| Information | Where it comes from | Why we need it |
|---|---|---|
| Your name, email address and profile picture link | Your Google account, when you choose “Sign in with Google” | To sign you in, to show who is signed in, and to contact you about your account if needed |
| A unique account ID | Created by Firebase Authentication when you first sign in | To link your entries to your account and keep them separate from everyone else's |
| Daily calories, daily weight and dates | You, when you add or edit entries | To show your history, weekly medians, graphs and calorie budget |
| Your daily calorie goal | You, when you set it | To work out your weekly calorie total and what is left for each day |
| Technical sign-in information, such as IP address, device and browser details, and sign-in times | Collected automatically by Google's Firebase services when you use the app | To keep sign-in working securely and to prevent abuse |
We do not use advertising, analytics or behaviour-tracking tools in the app, and we do not collect your location, contacts, photos or files.
3. Google user data
Tuleco Calorie Tracker uses Google Sign-In, provided through Firebase Authentication. The only Google account information the app requests is the basic profile scope: your name, email address and profile picture (the openid, email and profile scopes).
- What we access: your name, email address, profile picture link and the unique ID Google provides for your account. We do not access your Gmail, Google Drive, Calendar, Contacts, Photos, or any other Google service or data.
- How we use it: only to sign you in, to show your name and picture in the app, and to link your entries to your account. Your profile picture is loaded from Google's servers when needed; we do not copy or store the image.
- How we store it: your name, email and account ID are held by Firebase Authentication. Your entries are stored in Firebase Realtime Database under your account ID. See Storage, security and transfers.
- Who we share it with: no one, other than Google itself as our service provider (see Who we share it with). We do not sell it, rent it, or give it to advertisers, data brokers or other third parties.
- Not used for advertising or AI training: we do not use Google user data for advertising, profiling, or to train any artificial intelligence or machine learning model.
Tuleco Calorie Tracker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can stop Tuleco Calorie Tracker accessing your Google account at any time at myaccount.google.com/permissions. This stops future sign-ins; to also delete the data we hold, see Retention and deletion.
4. How we use your information
We use your information only to:
- sign you in and keep your account secure;
- store your entries and show them back to you, including graphs, weekly median weights and your calorie budget, on any device you sign in on;
- respond to your questions and requests, including correcting or deleting your data; and
- comply with the law.
We do not use your information for advertising, marketing, profiling, or automated decisions about you.
Under UK data protection law, our legal bases are: performing our service to you (signing you in and storing your entries), your explicit consent for weight and calorie data (see the next section), our legitimate interest in keeping the service secure, and legal obligation where it applies.
5. Weight and calorie data
Your weight and calorie entries may be considered information about your health, which the law treats as especially sensitive. We only collect it because you choose to enter it, and we use it only to provide the app's features to you. By entering it you give us your explicit consent to store and process it for that purpose. You can withdraw that consent at any time by deleting your data (see Retention and deletion). Withdrawing consent does not affect anything we did with your data before you withdrew it.
6. Who we share it with
We do not sell your personal information. We share it only as follows:
- Google (Firebase). We use Google's Firebase Authentication and Firebase Realtime Database to sign you in and store your data. Google acts as our service provider and processes your information on our behalf, under its own terms and privacy commitments (see Firebase privacy information and the Google Privacy Policy).
- Legal reasons. We may disclose information if required to by law, court order or a valid request from a public authority, or to protect the rights, safety or security of our users or the service.
- Business changes. If the app is ever transferred to another owner, your information may transfer with it, and the new owner will have to honour this policy or give you notice and a choice.
7. Storage, security and transfers
Your information is stored on Google's Firebase servers. Each account can only read and write its own data: our database rules reject any request that is not signed in as that account, and data is sent over encrypted (HTTPS) connections. No online service is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.
Google's servers may be located outside the United Kingdom, including in the United States. Where your information is transferred abroad, it is protected by safeguards that Google provides, such as the UK International Data Transfer Addendum or an adequacy arrangement.
8. Retention and deletion
We keep your account information and entries for as long as you have an account with us. To delete them, email [email protected] from the address on your Google account (or tell us which account it is). We will delete your sign-in record and all of your entries within 30 days, and tell you when it is done. Copies may remain in routine backups for a short further period before they are overwritten.
We may keep limited information longer only if the law requires it or we need it to resolve a dispute.
9. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access the personal information we hold about you, and receive a copy;
- correct information that is wrong or incomplete. You can edit the current week's entries in the app yourself; to correct an earlier week, email us;
- delete your information;
- restrict or object to how we use it;
- receive your data in a portable format; and
- withdraw consent at any time, where we rely on it.
To use any of these rights, email [email protected]. We will reply within one month. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first.
10. Cookies and local storage
This website (the home page and this policy) does not use cookies, analytics or any third-party scripts, fonts or trackers.
The app itself needs to remember that you are signed in. To do this, Firebase Authentication stores a sign-in token in your device's or browser's storage. This is essential to the app working and is not used for tracking or advertising.
11. Children
Tuleco Calorie Tracker is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, email us and we will delete it.
12. Changes to this policy
We may update this policy from time to time, for example if the app changes or the law does. We will change the “Last updated” date above, and for significant changes we will give you clearer notice, such as a message in the app. We will not use Google user data in a new way without telling you and, where the law requires it, getting your consent first.
13. Contact us
Tuleco
Email: [email protected]
Website: https://caltracker.tuleco.co.uk