MythCal Meticulous Labs

Your diary. Your privacy.

Privacy policy.

What MythCal collects, how your data is used and stored, who can access it, and how to ask for it to be deleted.

Last updated Meticulous Labs · MythCal

This private release: photo AI is inactive, and Meticulous Labs does not make owner-managed backups.

01Who we are

MythCal is a calorie, activity and water diary operated by Meticulous Labs, responsible for the account and diary data described here. This policy covers the private release of the MythCal phone app, PC/web app and this privacy page.

For privacy questions, access requests or deletion requests, email hunainf09@gmail.com.

02Data we collect

  • Account information: username, display name, account ID, approval status and account/sign-in timestamps. An internal email-style alias is used for login; a personal email address is not required to register. Firebase Authentication processes your password and keeps your login session.
  • Profile and goals: information you enter, such as age, height, weight, sex used by the calorie formula, body-fat percentage, activity level, calorie and water goals, timezone and preferred units. Measurement fields can be skipped by choosing a manual calorie goal.
  • Diary and saved foods: food, activity and water entries; dates, meal categories, calories, quantities, units, optional macros and notes; custom foods, favourites, meals and recipe ingredients; and creation, update and deletion status.
  • Technical and support information: Firebase and hosting providers receive request information, such as IP addresses and app/browser information, to deliver and secure the service. If you email us, we receive your email address and the information in your message. This page's host receives the requests needed to serve it.

The current app has no advertising or third-party analytics integration. It does not request GPS location, contacts, microphone access or Health Connect data, and it does not automatically monitor your activity.

03How we use and share data

We use data to sign you in, maintain your diary, calculate your chosen goals and summaries, synchronise devices and answer support and deletion requests.

  • Google Firebase: Firebase Authentication handles accounts and login; Cloud Firestore stores profiles, diary entries and saved foods. Google processes this information to provide and secure those services.
  • Meticulous Labs administrators: authorised administrators can access stored profiles and diaries for account management, support and deletion. Other app members cannot browse your account.
  • Recipients you choose: exporting or sharing a diary CSV gives its contents to the app, service or person you select.
  • Legal requests: information may be disclosed where required by law or necessary to investigate abuse or protect users, limited to what is needed.

We do not sell your personal or health data or use it for advertising.

04Photo AI

Provider used by this release: None. Photo AI is not active in this build. MythCal does not send photos or meal descriptions to an AI provider in this release.

If you try the demo's photo screen, it uses fixed sample suggestions rather than analysing your image. Any image you choose stays on your device; taking a photo requires camera permission. Temporary local images may remain until cleared.

Before enabling real photo AI in a future release, we will identify the actual provider, explain what is sent and how it is retained, update this policy and obtain any required consent.

05Storage and security

Account data is stored in Firebase. The phone also keeps a local copy and pending changes for offline use; the PC/web app uses browser storage for login, drafts and demo data. Firebase connections are encrypted in transit, and access rules restrict ordinary members to their own records. Administrators have privileged access. This is not end-to-end encryption.

Phone files use the app's private storage. MythCal does not separately encrypt local files, so protect your device and browser account. Signing out removes the downloaded phone copy, but drafts, demo data and pending changes you choose to keep can remain. Clear the app's storage or browser data to remove those local copies.

Google processes Firebase Authentication data in the United States. Other processing locations depend on the service and provider, and may be outside your country. See Firebase's privacy and security information, including its data-protection terms.

06How long data is kept

Account, profile, diary and saved-food records remain stored until permanently deleted. This version does not automatically erase diary entries after 30 days.

Account details, profile settings, goals, custom foods, favourites, saved meals and recipes are separate from diary history and remain until you remove them or request deletion. Support correspondence is kept for handling your request and any necessary legal obligations.

Deleting an entry inside the app moves it into Deleted so you can restore it; this is not permanent erasure. Ask us for permanent deletion if you want those records removed.

Owner backups: None for this version. Meticulous Labs does not make owner-managed backups or retain owner backup copies of permanently deleted records. Permanent deletion removes records from our active storage rather than keeping them available for restoration. Google's service retention and copies held on devices or in exports are separate, as described here.

Google's separate service retention applies after we request deletion: Firebase documents authentication IP logs being kept for a few weeks, and remaining authentication data being removed from live and backup systems within 180 days of account deletion. See Firebase's retention information.

07Request account or data deletion

You can request deletion without opening the app:

  1. Email hunainf09@gmail.com with the subject MythCal account deletion.
  2. Include your MythCal username and say whether you want your entire account or particular records deleted. Do not send your password.
  3. We may ask for reasonable confirmation that the account belongs to you, then process the request and confirm the outcome, including any necessary retention.

Account deletion covers the login account, profile, diary, saved foods, meals and recipes. Disabling an account is not deletion. Device copies and CSV exports already held by you or recipients may remain; clear them separately, including on devices that have been offline.

08Your choices and privacy requests

You can edit your entries and profile, export diary records as CSV, skip optional measurements and control any camera permission used by the demo in device settings.

Contact us to request access, correction, deletion or other rights available under your local privacy law, including restrictions, objections or withdrawal of consent where applicable. You may also raise a concern with your local data-protection authority. Withdrawing permission or consent may prevent the related feature from working.

The demo keeps sample data and your demo changes on your device rather than uploading them to your real account.

09Age and children's information

MythCal's first release is intended for people aged 13 and over. It is not intended for children under 13, and we do not knowingly collect their personal information.

Contact us if you believe a child under 13 has an account, so we can investigate and arrange removal. Any additional protections required for teenage users still apply.

10Changes to this policy

We will update this page and its date when our data practices change. Material changes will be brought to users' attention, and any consent required for a new use will be obtained before that use begins.

This page uses no analytics scripts, tracking cookies or forms. Its print button works on your device without sending your diary or policy-reading activity to us.