Updated September 22, 2026
Privacy Policy
ConvoCal ("the App") is owned and operated by Menna AI ("we," "us," or "our"). We are committed to protecting your privacy and handling your personal information with transparency and integrity.
This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you use ConvoCal across iOS, Android, and web platforms. By downloading, accessing, or using the App, you consent to the practices described in this policy.
1. Information We Collect
1.1 Account & Identity Information
When you register for an account, we collect:
Full name and email address
Authentication credentials (passwords are securely hashed; we never store plain-text passwords)
Third-party authentication identifiers if you choose Sign in with Apple or Google Sign-In. We receive only your authorized profile name and email token; we do not access or store your Apple or Google passwords.
1.2 Health, Dietary & Wellness Information
To provide conversational meal logging and personalized nutritional analytics, you may voluntarily input:
Meal logs, food descriptions, and ingredients submitted via text, speech, or photo
Nutritional targets including calorie goals, macronutrient splits (protein, carbohydrates, fats), and hydration targets
Body weight, target weight, height, age, gender, and physical activity level
Dietary preferences, restrictions, and food allergies
1.3 Voice & Audio Data (Microphone)
When you choose voice meal logging, ConvoCal requests microphone access to capture your verbal meal descriptions:
Audio is converted into text in real time using secure speech-to-text processing.
Audio streams are processed strictly for transcription and are not permanently saved or stored as raw audio files on our servers.
You can revoke microphone access at any time through your device system settings.
1.4 Camera & Photo Library Data (Images)
When you use camera logging or upload food pictures, ConvoCal requests camera and photo library permissions:
Meal images are processed by our vision AI models to identify food items, calculate portion sizes, and estimate nutritional values.
We process images solely for nutritional recognition. We do not perform facial recognition, biometric profiling, or background surveillance.
Photos saved to your personal meal journal remain accessible in your account until you delete them.
1.5 Automated Device & Diagnostic Information
We automatically collect technical data to ensure application reliability and performance:
Device model, hardware specifications, and operating system version
Unique device identifiers and push notification tokens (if notifications are enabled)
Crash diagnostics, error logs, and performance metrics
General location derived from IP address (country and city level only, never precise GPS tracking)
2. Artificial Intelligence & Data Processing Disclosures
ConvoCal incorporates state-of-the-art multimodal artificial intelligence to interpret natural language, transcribe speech, and analyze meal photographs:
AI processing is conducted via secure, enterprise-grade cloud inference pipelines.
Your personal data, meal photos, and voice transcripts are NEVER sold to third parties, data brokers, or advertisers.
We do NOT permit third-party foundation AI providers to use your personal meal photos, audio recordings, or dietary logs to train public machine learning models without your explicit opt-in consent.
All automated nutritional analyses are computational estimates designed solely for personal wellness guidance.
3. Legal Bases for Processing (GDPR & UK GDPR)
If you reside in the European Economic Area (EEA) or United Kingdom, our lawful bases for processing personal data include:
Contractual Performance: Delivering core application features, meal tracking, calorie calculations, and account management.
Explicit Consent: Processing health-related dietary data and accessing device sensors (camera, microphone) which you may withdraw at any time.
Legitimate Interests: Improving app reliability, preventing fraud, and ensuring network security.
Legal Compliance: Satisfying applicable statutory, tax, or regulatory obligations.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We disclose data solely under strict necessity:
Cloud Infrastructure & Hosting: Secure cloud providers (such as AWS, Google Cloud, and database hosts) operating under data processing agreements.
AI Inference Partners: Enterprise AI infrastructure providers processing input tokens solely for real-time transcription and meal analysis under strict non-retention agreements.
App Store Platforms: Apple Inc. and Google LLC for subscription management and authentication verification.
Legal & Safety Requirements: When mandatory under applicable law, subpoena, court order, or to protect the safety and rights of users.
Corporate Reorganization: In connection with any merger, sale of assets, or corporate acquisition, subject to the recipient honoring this Privacy Policy.
5. Data Retention & Account Deletion
5.1 Active Retention
We retain your personal data for as long as your account remains active to provide continuous logging history and trends.
5.2 Self-Service Data Deletion (Google Play & Apple Compliant)
You have direct control over your data within the App at all times:
Purge Meal Data: Go to Settings → Data & Storage → Delete My Data to instantly erase all food logs, images, and weight entries while maintaining your login.
Permanent Account Deletion: Go to Settings → Delete Account. Initiating account deletion permanently purges your user profile, authentication records, and all stored data from active production databases within 30 days.
Backup cycles are completely purged within 90 days following account deletion.
6. Data Security Measures
We implement industry-leading technical and organizational security protocols:
All data in transit is encrypted using modern Transport Layer Security (TLS 1.3/1.2).
Data at rest is encrypted using AES-256 standard encryption.
Strict role-based access controls and principle of least privilege are enforced for internal systems.
While we utilize rigorous protections, no electronic transmission or digital storage is 100% infallible.
7. Your Global Privacy Rights
Depending on your geographic location, you enjoy statutory rights regarding your personal information:
Right of Access: Inspect and obtain a copy of the personal information we hold about you.
Right to Rectification: Correct inaccurate or incomplete personal information.
Right to Erasure ('Right to be Forgotten'): Request total deletion of your personal records.
Right to Data Portability: Export your logs in structured machine-readable JSON format via Settings → Data & Storage → Export My Data.
Right to Restrict or Object: Restrict certain processing or object to legitimate-interest processing.
California Privacy Notice (CCPA/CPRA): California residents have the right to know categories of collected personal information, the right to delete, the right to correct, and freedom from discriminatory treatment. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any privacy rights, email privacy@convocal.app or support@menna.ai. We respond within statutory timeframes.
8. Children's Privacy (COPPA & Global Safeguards)
ConvoCal is strictly directed at users aged 13 and older (or 16 in the European Economic Area and UK). We do not knowingly solicit or collect personal information from children under these threshold ages. If we discover that personal data of a minor has been collected without verifiable parental consent, we will immediately delete that information from our servers.
9. In-App Purchases & Financial Information
All financial transactions, payment card numbers, billing addresses, and subscription renewals are managed directly by Apple Inc. (Apple App Store) or Google LLC (Google Play Store). ConvoCal does not receive, view, or store credit card details.
10. International Transfers
Your information may be stored and processed in server locations across the United States and globally where our service providers operate. When data transfers occur from the EEA/UK, we rely on Standard Contractual Clauses (SCCs) and adequacy decisions to guarantee equivalent data protection.
11. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect technical, regulatory, or operational enhancements. When material updates are made, we will notify you through in-app alerts, email notifications, or an updated effective date at the top of this document.
12. Contact Information & Data Protection Officer
For privacy inquiries, rights requests, or regulatory questions, contact us at:
Menna AI
Attention: Privacy Compliance Team
Email: privacy@convocal.app
Support: support@menna.ai
