Privacy Policy
Last updated 10 September 2026
Comilo is a calorie tracker. Here is what it keeps, where that sits, and who else ever sees it.
In short: Comilo keeps your account, the meals you log and the photos attached to them. Comilo Pro has no ads, and never will. The only outside companies that see any of it are the three named below. Delete your account and all of it goes with it.
What we store
- An identifier from Apple or Google, plus whichever of your email address and display name the provider gives us. Choose Hide My Email when you sign in with Apple and the relay address is all we ever see.
- Each meal you log: its name, description, meal type, where it came from, the date and time, and the calorie and macronutrient values.
- The photos you attach, stored as files on our own server. They are served back only to you, over an authenticated connection, and no photo has a public link.
- Your objectives and your weight history, if you enter them.
- A daily count of the Pro estimates you have asked for, so the daily limit can be enforced. It is a number, not a record of what you asked.
What we do not store
- The conversation in the app. Chat messages are never saved anywhere; only the meals you choose to log are kept.
- Payment details. Apple handles the purchase, so we never see your card. What reaches us is whether your subscription is active.
- Location, contacts, health data, your device's advertising identifier. Comilo asks for none of them.
Who else sees it
Three companies, and no others.
Anthropic, on the Pro plan only. When you ask for an estimate, that meal's photo and description go to Anthropic's Claude API, which sends the numbers back. Anthropic does not use API data to train its models. The free plan sends nothing to any model at all: the card is put together on your device.
Apple and Google, for signing in. They confirm you are you. We send them nothing about your meals.
RevenueCat, which processes subscriptions. It receives the purchase and an anonymous account identifier, so your subscription follows your account.
Those three, and nobody else.
Where it lives
On a server we rent in Germany, run by Hetzner. Connections to it are encrypted, and photos are only ever served to the account that uploaded them.
Deleting your account
Profile → Delete account removes your account and everything attached to it from our servers straight away: every meal, every photo, your objectives, your weight history. It cannot be undone. Encrypted backups are kept for 30 days and then overwritten, so a copy of a deleted account can survive in a backup for up to 30 days, and no longer.
Deleting your account does not cancel a paid subscription. Manage that in the App Store, under your Apple Account.
Children
Comilo is not intended for children under 13, and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects what we collect or who sees it, the app will say so before the change takes effect.
Contact
Questions, or a request for a copy of your data: support@comilo.app.