Privacy Policy
Your information, explained plainly.
Last updated 17 September 2026
The short version
Your meal diary, goals, saved recipes, personal foods, and their photos are stored on your device. Calden does not require an account and includes no analytics or advertising SDKs. Optional online assistance processes only the information described below.
Who is responsible
Archolm ApS provides Calden and is responsible for the personal information it processes. For privacy questions or requests, email support@archolm.dk.
Archolm ApS, CVR 46220374
Helmsvej 49
2880 Bagsværd
Denmark
Meal photos and online assistance
Online AI features are for adults aged 18 or older. Calden asks you to confirm your age before enabling photo analysis and before requesting an AI-generated personal plan. Manual logging and your local diary remain available without online assistance. When you enable photo analysis, a resized copy of the photo you choose is sent over an encrypted connection to Archolm's server and then to the Google Gemini API to produce a meal estimate. For App Store builds, the request includes Apple-signed app information used to authenticate the app and may include Apple-signed purchase information used to verify Calden Plus. It does not include your diary, meal history, or Apple Health data. Avoid including faces, documents, or anything else you do not want processed.
A pending or failed capture remains on your device so you can retry or delete it. When an estimate is saved to your diary, Calden keeps a separate local copy of the photo for its diary thumbnail. Delete the photo or its diary entry in Calden to remove that copy. Deleting a photo on your phone does not itself delete information already processed by a provider.
Archolm's application server does not save the meal photo or generated estimate after returning the result. Google says its standard abuse-monitoring process retains Gemini API prompts and responses for 55 days. Calden production is required to use Google's paid API service; Google says paid-service prompts and responses are not used to improve its products. See Google's abuse-monitoring information. Calden does not claim zero retention for online analysis.
Nutrition labels and familiar meals
Nutrition-label text recognition runs on your device. The label image is not stored in the diary. After your review, food values, units, and source information are saved in your personal library. One previous local library copy supports recovery. Deleting a personal food removes it from that library copy, but does not change earlier diary snapshots or previous device backups.
Usual-meal suggestions use confirmed diary entries on your device. Deleting diary entries also removes their evidence from future suggestions. Reminders are optional local notifications.
Apple Health and personal plans
Apple Health access is optional and read-only for workouts and active energy. Health data is not sent with meal photos, sold, used for advertising, or used to determine purchase eligibility.
If you use online assistance to create a personal plan for today or tomorrow, the request includes the selected date; your calorie and macro targets; the goal and activity-level choices you saved during onboarding; any focus preferences you selected; details for up to 20 recipe candidates (titles, ingredients, nutrition estimates, and prep times); and up to 14 recent plan dates and recipe IDs to help avoid repetition. This can include your own saved recipes, but never their photos. A request for today’s plan may also include today’s aggregate nutrition totals and the current hour. If you separately enable Health-informed plans and activity data is available, that request may include today’s and your typical active-energy totals. A request for tomorrow’s plan omits diary totals, the current hour, and Health data. No plan request includes individual diary foods or workouts. You can turn off the Health option and manage Health permissions in your device settings.
Purchases and access to assistance
Apple handles App Store payments. Calden does not receive your payment card details. Calden stores a random identifier in your device Keychain. In App Store builds, Archolm verifies Apple's signed app transaction and uses its stable app-transaction identifier to apply the free assistance allowance across reinstalls and devices using the same Apple Account. If you subscribe, Apple-signed subscription information and App Store Server Notifications provide the original transaction identifier, product, expiry, refund, and revocation status needed to verify Calden Plus. Archolm does not receive your Apple Account name, email, password, or payment-card details.
Why information is processed
We process information necessary to provide the features you request and administer Calden Plus as part of providing Calden to you. Optional Health-derived information is sent for a personal plan only after your separate choice to include it; where consent applies, you can withdraw it by turning that option off without affecting earlier lawful processing. Archolm processes limited access, usage, and connection information for its legitimate interests in securing the service, enforcing allowances, diagnosing faults, and preventing misuse. Legal and accounting obligations may also require processing transaction or support records.
Service providers, transfers, and retention
Local diary data remains until you remove it or the app, subject to your device’s backup settings. Meal-photo thumbnails are stored separately and excluded from device backups. Calden does not provide cloud diary backup or diary sync. Keep this in mind before deleting the app or changing devices.
Archolm hosts its application service with Hetzner in the EU and uses Google Gemini as an AI processor. Google may process information outside the EEA. Archolm requires its service providers to protect personal information consistently with this policy and applicable law. Google's data-processing terms provide contractual safeguards for restricted transfers; you can ask Archolm for information about the safeguards that apply. Provider retention is separate from deletion on your phone.
The free assistance allowance is currently a lifetime allowance, so its app-transaction identifier and accumulated usage remain while needed to enforce that allowance and prevent it being recreated by a reinstall. Calden Plus usage is recorded separately for each billing month. Subscription records remain while needed to verify present or historical entitlement, refunds, revocations, disputes, and legal or accounting obligations. These records contain identifiers and usage amounts, not meal photos, diary entries, or Health data.
The internet proxy records ordinary connection information such as IP address, request time, requested route, response status, and browser or app user agent for security and fault diagnosis. Those logs rotate daily; the current server configuration keeps 14 daily rotations. Support correspondence is kept while needed to resolve the request and meet applicable obligations.
Your choices and rights
You can edit and delete diary entries and personal foods in Calden, delete pending captures, disable online assistance or reminders, and change camera and Health permissions in your device settings. Turning off Health-informed plans stops new Health-derived totals from being sent. Archolm cannot remotely recover or erase a diary held only on your phone.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing of information Archolm holds. Contact support@archolm.dk. Do not send your diary or Health records unless needed for a specific request. You may complain to your local supervisory authority or Denmark’s Data Protection Agency.
This website and policy changes
This website does not include analytics, advertising trackers, or a contact form. Your browser makes ordinary web requests when loading pages; the same short-lived proxy logs described above are used to deliver and protect the website. Emailing support shares the information you choose to include.
We will update this policy when Calden’s processing changes. Material changes requiring a new choice will be presented before the affected optional feature is used.