Legal
Privacy Policy
What Zaalios collects when you track meals, water, and weight, why it's collected, who it's shared with, and the choices you have.
Effective · App com.zaalios · Contact [email protected]
In short
Scoped to your identity
Your data is consistently tied to you and private by default.
Synced safely
Your logs sync across your devices without exposing them to others.
Never sold
We use your data to help you track and improve, not to sell it on.
Overview
Zaalios is a nutrition-tracking app: you log meals, water, and weight, and Zaalios turns that into calorie and macro targets, trends, and reminders. This policy covers the Android and iOS apps, the backend that powers them, and this website.
Data we collect
Account data
Zaalios uses Google Sign-In as its only way to create an account. When you sign in, we receive your name, email address, and profile photo URL from Google, and we issue our own access and refresh tokens for the app to use. We don’t collect a separate password.
Profile and goals
Height, current weight, gender at birth, date of birth, dietary restrictions, activity level, and your calorie and macro goals and goal checkpoints, if you set a weight or fitness goal.
Logs you create
| Log type | What’s stored | How you enter it |
|---|---|---|
| Meals | Food items, macros (calories, protein, carbs, fat, fiber), meal type, date and time, optional photo | Photo capture, gallery upload, barcode scan, voice, or typed text |
| Weight | Body weight entries by date | Typed entry |
| Water | Water intake entries by date | Typed entry |
| Chat | Messages you send to the in-app assistant (“Zaali”) and its replies | Typed text |
Subscription and payment status
We store your plan tier and feature usage. Payment itself is handled by our payment processor, Dodo Payments, inside a secure checkout page — Zaalios does not receive or store your card details.
Usage analytics
In the app. If enabled, screen navigation and interaction data is collected via Microsoft Clarity. This is on by default and can be switched off at any time in Profile → Privacy settings.
On this website. Pages on zaalios.com load Google Analytics 4 and Microsoft Clarity, which record page views, referring pages, approximate location derived from your IP address, device and browser type, and how you interact with the page. This is separate from your app account and is not linked to your Zaalios profile. You can opt out with the Google Analytics opt-out browser add-on, or by using an ad or tracker blocker, or by blocking cookies for this site.
Device permissions
| Permission | Used for |
|---|---|
| Camera | Taking meal photos and scanning barcodes |
| Photo library | Uploading an existing meal photo |
| Microphone and speech recognition | Logging meals by voice |
| Notifications | Meal and reminder notifications |
| Siri (iOS) | Optional Shortcuts support for logging a meal by voice outside the app |
Zaalios does not request location or health-app (Apple Health or Health Connect) access.
How we use data
- Sign you in and keep your account in sync across devices
- Calculate calorie and macro targets and track progress toward your goals
- Detect foods from a photo, barcode, or voice/text description and estimate nutrition
- Send reminder notifications you’ve enabled
- Enforce plan limits and provide subscription features
- Diagnose problems and improve accuracy of food detection and estimates
AI and photo processing
When you photograph, upload, or describe a meal, that content — the photo, the barcode, or the text or voice transcript — is sent to Zaalios’s backend, which uses AI (including third-party AI providers) to detect foods and estimate nutrition. Chat messages to the “Zaali” assistant are processed the same way. Nutrition estimates can be wrong or incomplete — review them before relying on them.
Avoid photographing or describing anything in a meal photo that isn’t needed to identify the food.
Third parties
| Provider | Purpose | What they receive |
|---|---|---|
| Google Sign-In | Authentication | OAuth handshake; we receive your name, email, and photo |
| Dodo Payments | Subscription checkout | Payment and billing details, entered directly on their hosted page |
| Microsoft Clarity | Usage analytics in the app and on this website (opt-out available) | Screen and page navigation; sensitive content is masked by default |
| Google Analytics | Website analytics only (opt-out available) | Page views, referrer, device and browser type, approximate location from IP |
| Open Food Facts | Barcode lookup | The scanned barcode number only, sent directly from your device, with no account identifier attached |
We do not sell your nutrition data, and we do not use advertising SDKs.
Storage and security
Authentication tokens and app preferences are stored securely on your device (Android Keystore and iOS Keychain-backed secure storage). Meal, weight, water, profile, and chat data is stored on Zaalios’s servers so it can sync across devices and be restored when you sign in again. If you log while offline, entries queue on-device and sync once you’re back online.
No method of transmission or storage is perfectly secure; keep your device and Google account protected.
Retention and deletion
You can delete individual meal entries and water entries at any time from within the app. Signing out clears the tokens and preferences stored on your device but does not delete your account data from our servers.
You can permanently delete your account and associated data in the app from Profile → Settings → Account deletion. Read the full steps and deletion details on our account deletion page. Payment processors may retain transaction records where legally required for tax, fraud, or chargeback obligations.
Your choices
- Edit your profile, goals, and logged entries at any time
- Delete individual meal or water entries
- Turn app analytics off in Profile → Privacy settings
- Opt out of website analytics using the browser controls described above
- Turn off reminder notifications in system settings or in-app
- Sign out to remove tokens and preferences from this device
- Manage or cancel your subscription through your Dodo Payments checkout receipt or app-store account
- Permanently delete your account and associated data from Profile → Settings → Account deletion
Children
Zaalios is built for adults. It’s not intended for children under 13, and we don’t knowingly collect data from them. Users under 18 should only use nutrition tracking with the involvement of a parent, guardian, or qualified professional, since calorie and macro targets can be inappropriate for a still-growing body. If you believe a child has provided us data, contact us and we’ll delete it.
Changes to this policy
If we make material changes to this policy, we’ll update the effective date above and notify you in-app before the changes take effect.
Contact us
Questions about this policy or your data: [email protected]
This page is kept consistent with the in-app Privacy Policy, Terms, and Child Protection text under Profile in the app.