Effective June 10, 2026
BapCal ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the BapCal iOS app.
The short version: BapCal lets you photograph your meals and optionally share them with a group of friends. We store only what you give us — photos, captions, and an optional display name. We never sell your data or show ads.
BapCal does not use traditional accounts or require sign-in. Instead, we generate a random unique identifier for your device on first launch and store it locally. This identifier is used to associate your photos and preferences with your device. It is not tied to your name, email, Apple ID, or any other identifying information.
If you grant notification permission, we store your device's push notification token to send you alerts when group members post new photos. You can revoke this permission at any time in iOS Settings.
We store your device timezone to display post times correctly. We do not collect your location, contacts, microphone audio, or any health data.
Your data is stored using Supabase, a secure cloud database and storage platform. All data is encrypted in transit (TLS) and at rest. Photos are stored in a private storage bucket and served via secure signed URLs.
Access to data is governed by row-level security policies. Group members can only see photos explicitly shared to their group. Personal photos are only visible to you.
Your data is shared only as follows:
You can delete your account at any time from Settings → Delete account. This permanently deletes your device identifier, display name, all your food photos (including photo files from storage), and removes you from all groups. If you own a group, that group is also deleted. This action cannot be undone.
You can leave any group you have joined from Settings → Groups → Leave. Leaving removes your photos from that group's shared view and removes you from the member list. Your photos remain on your personal timeline.
You can revoke BapCal's notification permission at any time in iOS Settings. This stops future notifications but does not affect your stored data.
You may email zwkdevvv@gmail.com to request data deletion.
BapCal is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the revised policy.