SnapCal

Privacy Policy

Last updated: May 10, 2026

This Privacy Policy describes how SnapCal collects, uses, and shares information when you use the SnapCal Telegram bot and the website at snapcal.app (together, the “Service”). We aim to collect only what we need to make the Service work and to keep your data safe.

1. Who is responsible for your data

SnapCal is operated by Engineer Nor, an independent sole-trader based in Türkiye (“SnapCal”, “we”, “us”, or “our”), who is the data controller for the personal data described in this policy. You can contact us at snapcalbot@gmail.com for any privacy-related question or request.

2. Information we collect

Information you provide

  • Telegram account identifiers — your Telegram user ID, username (if set), first name, and language code, as forwarded to us by Telegram when you message the bot.
  • Profile and goal information — for example your sex, age range, height, weight, activity level, and the calorie or macro targets you set during onboarding.
  • Meal logs — photos, voice notes, or text you send to log a meal, plus the AI-generated estimates and any corrections you make.
  • Other content — feedback, support messages, and anything else you choose to send us.

Information we collect automatically

  • Usage data — timestamps of messages, commands used (such as /start, /today, /suggest), streak and progress data, and similar telemetry needed to run the Service.
  • Device and connection data — when you visit snapcal.app, our hosting and analytics providers may receive your IP address, browser type, referring page, and similar standard log data.

Payment information

Subscriptions are processed by our payment provider, Paddle. Payment details (such as card numbers) are submitted directly to Paddle and are not stored on our servers. We receive a transaction reference, plan, amount, country, and subscription status from Paddle.

3. How we use your information

We use your data to:

  • Provide, operate, and improve the Service;
  • Generate calorie and macro estimates from your meal photos, voice notes, and text;
  • Personalise targets, reminders, suggestions, and weekly coaching reports;
  • Process subscriptions, prevent fraud, and handle refunds;
  • Respond to your support requests and feedback;
  • Comply with legal obligations and enforce our Terms of Service.

4. Legal bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

  • Performance of a contract — to provide the Service you have requested;
  • Legitimate interests — to operate, secure, and improve the Service, in a way that does not override your rights;
  • Consent — where required, for example for certain analytics cookies (you can withdraw consent at any time);
  • Legal obligation — to comply with accounting, tax, and other applicable laws.

5. How we share your information

We do not sell your personal data. We share it only with the service providers we need to run the Service:

  • Telegram — the messaging platform that delivers all interactions with the bot.
  • Google (Gemini) — to analyse meal photos and return nutritional estimates.
  • OpenAI — Whisper for voice-note transcription, and GPT models for text understanding and the weekly coaching report.
  • Paddle — our merchant of record, which handles billing, taxes, and refund processing.
  • Hosting and infrastructure providers — for example cloud hosting, databases, error monitoring, and email delivery.
  • Authorities — where required by law, court order, or to protect our rights, users, or the public.

6. International transfers

Some of our providers are located outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.

7. Data retention

We keep your account, profile, and meal-log data for as long as your account is active. If you cancel your subscription but keep your account, your data remains so you can come back to it. If you ask us to delete your data by emailing snapcalbot@gmail.com, we permanently delete your meal logs and profile from our active systems within 30 days, except where retention is required for legal, tax, or fraud-prevention reasons (for example, billing records kept by Paddle).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to request a copy of your data in a portable format, and to withdraw any consent you have given. To exercise these rights, email us at snapcalbot@gmail.com. You also have the right to lodge a complaint with your local data-protection authority.

9. Children

SnapCal is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to reduce risk and respond quickly to any incident.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, give you notice through the Service.

12. Contact

For any privacy question, request, or complaint, write to us at snapcalbot@gmail.com.