CaloSpark — Privacy Policy

Last updated: 18 September 2026 Effective: On publication Primary market: India-first launch Document status: Launch draft.

1. Who this policy covers

This Privacy Policy explains how BRIGHTSIDE TECHNOLOGY SDN. BHD. (“CaloSpark,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you use the CaloSpark mobile application, CaloSpark.com website (https://calospark.com), Ria nutrition assistant, and related services (the “Service”).

The Service is designed for meal logging and nutrition education. It is not a medical device, diagnostic service, emergency service, or substitute for advice from a qualified health professional.

2. Information we collect

2.1 Information you provide

• Account information: phone number or other sign-in identifier, preferred name, account ID, and authentication records.
• Body and wellness profile: age, sex, height, weight, target weight, activity level, diet pattern, goals, barriers, health behaviours, and meal preferences. These fields are optional for basic guest scanning.
• Meal and Journal information: food names, portions, ingredients, calories, carbohydrates, protein, fat, sugar, sodium, fiber, confidence, source, timestamps, edits, and meal context.
• Images and uploads: photos captured with your camera or selected from your photo library. Please crop images and avoid people, identity documents, prescriptions, or unrelated confidential information.
• Ria conversations: prompts, answers, selected food context, model/version metadata, safety flags, and quality-review signals.
• Support communications: messages and information you provide when requesting help, privacy rights, or account deletion.

2.2 Information collected automatically

We may collect device and app information such as device model, operating system, app version, browser type, approximate region, language, time zone, timestamps, crash reports, performance events, and security logs. In guest mode, local storage may be used to keep your Journal on your device.

We do not use camera or photo-library access until you invoke a scan or upload action. The app should request only the permissions needed for that action. If a future release requests notifications, contacts, location, microphone, tracking, or advertising permissions, the relevant permission prompt and notice will explain the purpose before access is requested.

3. How we use information

We use information to:

1. recognize meals and provide calorie and nutrition estimates; 2. let you review, edit, save, remove, and organize food records; 3. keep guest data on your device and synchronize signed-in data across devices; 4. personalize Ria when you choose to save body or wellness information; 5. provide support, authenticate accounts, prevent abuse, and secure the Service; 6. monitor reliability, accuracy, bias, safety, and performance; 7. improve the Indian food database, recognition models, and candidate-data review process; and 8. comply with law, enforce our Terms of Service, and protect users and the public.

We do not sell personal information. We do not use body profile or health-related information to make medical decisions about you or another person. We do not use your photos or conversations for advertising unless we separately obtain the consent required by law.

4. Legal grounds and consent

Depending on the jurisdiction, we process information because it is necessary to provide the Service, because you consented to an optional purpose, because we have a legitimate interest in security and service quality, or because the law requires it. You may withdraw optional personalization or marketing consent at any time; withdrawal does not affect processing already completed lawfully.

Body profile, diet, and health-related preferences may be sensitive personal information under applicable law. They are optional for basic scanning. Do not provide more information than you want Ria to use.

5. AI, estimates, and automated processing

Image recognition, database matches, portion calculations, AI fallback estimates, and Ria responses may be inaccurate or incomplete, particularly for mixed dishes, home cooking, oil, recipe changes, and unclear photos. We may use automated processing to suggest a dish, portion, nutrition values, visual group, confidence score, or safety category. You can review and edit food estimates before saving them. You can ask for human review where required by applicable law.

Ria provides general educational information only. Do not rely on it for diagnosis, treatment, medication decisions, allergy safety, eating-disorder care, pregnancy care, diabetes or hypertension management, or emergency decisions.

6. How we share information

We may share the minimum information necessary with service providers that help us host data, authenticate accounts, process images, provide AI or nutrition services, deliver support, monitor security, or measure performance. Providers must process information under appropriate contractual and security safeguards and only for authorized purposes.

We may disclose information if required by law, legal process, or a valid government request; to protect rights, safety, and security; or in connection with a merger, acquisition, financing, or sale of assets, subject to applicable notice requirements.

If information is processed outside your country, including outside India, we use safeguards required by applicable law. The final production notice must identify material categories of recipients and relevant transfer mechanisms.

7. Retention and deletion

Guest records are stored locally unless a scan or other action sends data to a processing service. Signed-in account information is retained while your account is active and for a limited period afterward for security, fraud prevention, dispute resolution, accounting, and legal obligations. Photos, transcripts, and raw inputs are deleted or de-identified when no longer needed for the stated purpose. We may retain de-identified, aggregated accuracy and safety metrics.

We retain account data, meal photos, Ria conversations, support tickets, backups, and deletion requests for 180 days.

8. Your rights and controls

Subject to local law, you may request access, correction, export, deletion, restriction of optional processing, withdrawal of consent, or information about automated processing. You may edit or remove food records in the app. Account deletion must be available in the app or through a clearly accessible web request flow and must explain what is deleted, what is retained by law, and how long deletion takes.

To submit a request, contact service@brightsidetechltd.com. We may verify your identity before fulfilling a request and will respond within the period required by applicable law.

9. Children and family use

The Service is intended for adults and is not directed to children. Do not create an account for a child or upload a child’s photo or health information unless a parent or legal guardian is involved and applicable law permits it. If we learn that we collected a child’s information without the required consent, we will take reasonable steps to delete it.

10. Security

We use safeguards appropriate to the risk, including encryption in transit, access controls, least-privilege operations, monitoring, and review logs. No service can guarantee absolute security. If a data incident requires notice under applicable law, we will notify affected users and authorities as required.

11. Third-party platforms and links

The app may be distributed through Google Play and the Apple App Store. Those platforms may process information under their own terms and privacy policies. The Service may link to third-party services; their practices are governed by their own notices. We do not receive your Apple or Google account password.

12. Changes to this policy

We may update this policy when the Service, law, or data practices change. We will post the new version, update the “Last updated” date, and provide additional notice where required. Material changes will not be applied retroactively to data already collected without a lawful basis.

13. Contact and complaints

Privacy contact: service@brightsidetechltd.com Support contact: service@brightsidetechltd.com Legal entity: BRIGHTSIDE TECHNOLOGY SDN. BHD.

This document is a product and compliance draft, not legal advice.