Calileo is designed as a local app. There is no Calileo server infrastructure where your nutrition, training, weight or health data is stored or analysed. All of this data stays on your device or, if you use iCloud, in your private iCloud space, secured by your Apple Account. Neither we nor third parties — except Apple as the technical provider of your iCloud — have access to this data.
Meals (barcode or name, portion size, nutrition values), your own recipes, training machines and logged sets (weight, reps), water and fasting log, weight entries, and your daily and macro goals.
With your permission, Calileo reads and writes the following categories via Apple’s HealthKit framework:
| Category | Access |
|---|---|
| Calories, protein, carbohydrates, fat | write |
| Water | write |
| Body weight | write read |
| Body fat percentage, waist circumference | read |
| Active energy, steps | read |
| Workouts (strength training and cardio, iPhone or Apple Watch) | write |
| Workouts from other apps (e.g. runs, rides) with distance, heart rate, steps and calories | read |
| Heart rate (during workouts) | read |
| Cardio fitness (VO2 max), resting heart rate | read |
Weights you log in the Health app or another app (e.g. your smart scale) are imported by Calileo automatically — also in the background as soon as Health reports a new weight. You can turn this off under Settings → Import weight from Health. Body fat and waist circumference are only read to show them to you in the statistics. Active energy and steps are read for the daily overview and for the calories burned and steps of your workouts. VO2 max and resting heart rate are only read on your device to calculate the cardio part of your fitness age; they are neither stored nor shared.
This data never leaves your device or your private iCloud towards Calileo — unless you share it yourself via friend sharing (see below). You can review or revoke access at any time under Settings → Health → Data Access & Devices → Calileo.
The barcode scanner processes the camera image only on your device (VisionKit) to read the barcode digits. No images are stored or transmitted.
The features “recognise a meal from a photo” and “scan a nutrition label” use Apple’s on-device Foundation Models and Vision frameworks. The analysis runs entirely on your iPhone — photos are not sent to Calileo or any third party.
Calileo calculates your fitness age and the tips after training entirely on your device, from your sets, your weight, your goals, your sex and age and the Health data listed above. No data is transferred for this. Both are general estimates and suggestions, not a medical assessment.
Calileo does not collect location data.
The app stores your data locally (in an app group that also feeds the Home Screen widget with today’s numbers) and — if you are signed in to iCloud — syncs it automatically via CloudKit to your private iCloud database. Your phases (cut, bulk, etc.) are kept in your private iCloud key-value store so they carry over to a new device. This space belongs to your Apple Account; Calileo cannot see or access it.
Finished workouts from the Today tab (title, duration, average and maximum heart rate, calories burned) are stored on your iPhone only. Cardio sessions you log in Calileo, on your Apple Watch or on your Garmin watch (duration, distance, level, heart rate, calories burned, steps) are synced to your private iCloud like your other entries.
In the Friends tab you can choose to share your progress via a personal code. The following is then shared:
This information is stored in Calileo’s public CloudKit database and can be seen by anyone who knows your code. Your height, your BMI and individual meals or calories eaten are never included. You can stop sharing at any time under Friends → Your profile → Stop sharing; the shared data is then deleted.
If you cheer on a friend, your display name and the date are stored under their code in the same public database so they can see the cheer. Only cheers from the last two weeks are shown.
You can record up to three photos and one video of your form per entry. They are scaled down to 1080p (videos to at most 1 minute at 30 frames per second, without sound) and stored only on your iPhone (with iOS data protection class “complete protection”), not in iCloud.
If you share your progress, friends see the date and type of your form entries (e.g. “2 photos + video”) and a tiny blurred preview of each (24 pixels wide, not encrypted, but without recognisable detail), and can request any entry. If you approve a request, exactly that entry is stored in the public CloudKit database, encrypted with its own random key (AES-256), a video additionally as a smaller 720p copy for slow connections — without the key the data cannot be read. For friends on an older app version, your newest entry is also available in encrypted form. Only the device whose request you approve receives the key (protected by a key exchange). After it has been viewed once, the key is deleted on your friend’s device; photos and video are hidden in screenshots and screen recordings. A request transmits the friend’s display name and a random device ID.
To look up product information, Calileo sends the scanned barcode or your search term to the open food database Open Food Facts (primarily ch.openfoodfacts.org, falling back to world.openfoodfacts.org). Only the barcode or search text and technically unavoidable information such as your IP address are transmitted — nothing about you, your account or your nutrition data. Open Food Facts is a non-profit project independent of Calileo; you can find its privacy policy at world.openfoodfacts.org/privacy.
If an Apple Watch is paired, Calileo transfers training machines, folders, targets and completed sets directly between iPhone and Watch (WatchConnectivity). This transfer runs between your devices over your own Apple infrastructure, without touching a Calileo server. During a workout on the Watch, Calileo shows your heart rate, the calories burned and, for cardio, your steps, and, with your permission, saves the workout to the Health app.
If you connect a Garmin watch under Settings → Garmin watch, Calileo uses Garmin’s Connect IQ Mobile SDK to exchange data with the Calileo app on your watch over Bluetooth: your training machines (name, folder, target reps, last weight used), your rest times, a running rest and today’s workout are sent to the watch. Logged sets, cardio sessions (duration, distance, level, average heart rate, calories burned, steps) and changes to the rest or today’s workout come back and are stored like entries made in the app.
You choose the watch once in the Garmin Connect app, which passes the watch’s identifier and name to Calileo; they are stored only on your iPhone. The transfer runs directly between your iPhone and your watch, without a Calileo server; Calileo does not send any data to Garmin. The watch keeps a copy of your machines and any sets that haven’t reached your iPhone yet. The watch reads your heart rate only while the Calileo app is open on it; it is not saved as an activity in Garmin Connect.
Bluetooth access is only requested when you connect a Garmin watch. You can disconnect the watch at any time under Settings → Garmin watch and remove the Calileo app from the watch via Garmin Connect. Garmin’s own processing (Garmin Connect app, Connect IQ Store) is governed by Garmin’s privacy policy.
Reminders (e.g. to log a meal or when a fasting window ends), the alarm at the end of a rest and notifications about cheers and form photo requests are created locally on your device — not sent by a server. For cheers and requests, Calileo checks the public database when you open the app and occasionally in the background. Apple push notifications are used only technically to sync your data via iCloud, never for marketing.
Calileo contains no third-party ads, no third-party analytics or tracking SDKs and builds no cross-device profiles. The only advertising is a note labelled “From the developer” at the end of the Progress tab pointing to our own app Rackount: a simple link to the App Store that collects or transmits no data. There is nothing to agree to in Apple’s App Tracking Transparency prompt, because no tracking takes place.
Entries are kept until you delete them; deletions are also removed from your iCloud at the next sync. If you uninstall Calileo, iOS removes the local app data. You can also manage or delete your iCloud data under Settings → [your name] → iCloud → Apps using iCloud. A stopped friend share is no longer accessible immediately. Form photos can be deleted individually in the app; deleted entries are removed from the public database.
Under the Swiss Federal Act on Data Protection (FADP) and — for people in the EU — the GDPR, you have in particular the right of access, rectification, erasure and restriction of processing, as well as data portability and objection. As Calileo keeps no database about you, most of these rights concern the app on your device and your iCloud settings directly. For questions, contact us at support.calileo@calileo.ch. You also have the right to lodge a complaint with a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU your competent data protection authority.
Requests to Open Food Facts use encrypted HTTPS connections only. Local data and iCloud sync are protected by Apple’s platform security (including encryption on the device and in transit). Form photos are additionally end-to-end encrypted before they leave your device. Calileo itself runs no servers that would need additional protection.
Calileo is not directed at children. As there is no sign-up or account creation, there is no separate age check.
If this policy is changed, we publish the revised version at the same address with an updated date at the top of this page.
For questions about this policy or your data, you can reach us at:
Controller within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR): Valentin Erler, Baldismoosstrasse 24, 6043 Adligenswil, Switzerland.