Privacy Policy
Effective 16 August 2026 · Last updated 16 August 2026
The short version
- There is no account. Nothing to sign up for, nothing to sign in to.
- Your health records stay on your device. Injections, weight, meals, photos and symptoms are never sent to us. We have no server that could receive them.
- Three things leave the device. Anonymous usage statistics (Google), diagnostics from on-device photo analysis on Android (Google), and subscription payments (Apple and Google). None of them carry your health records.
- Deleting the app deletes the records. They are only on your device, so there is nobody to ask for their deletion — and for the same reason, losing the device loses the records. Please export a backup.
SlowHare ("we") makes Calando ("the app"). This policy explains what the app handles, what leaves your device, and what does not.
1. What the app handles
1-1. Kept on your device, never sent to us
The following is written only to storage inside your device. We do not collect it, cannot read it, and hold no copy of it.
| Area | What is recorded |
|---|---|
| Medication | Injection times, product, dose, site, schedule |
| Body | Weight, body fat, height, goal weight, pace settings |
| Meals | Times, photos, how much was eaten, protein and fat notes |
| Drinks | Water, caffeine and alcohol counts and amounts |
| Activity | Workouts and routines |
| Symptoms | Side effects and severity, bowel rhythm |
| Health apps | Weight, body fat and workouts read from Apple Health or Health Connect |
| Settings | Reminder times, units (kg/lb/st), language, display choices |
Apple Health and Health Connect access is read-only. The app writes nothing back to them. It works only if you grant permission, and you can revoke it at any time in your device settings.
Meal photos are held in the app's private storage. They are not copied to your photo library or anywhere else. Photos may be analysed for two purposes — to find the food, when you turn on the option to show only the food, and to find the face and the eyes, so that two photos can be lined up for comparison. Both happen on the device (Apple Vision on iOS, Google ML Kit on Android). Neither the photos nor the results are ever transmitted, and no face data is stored or used to identify anyone.
1-2. What we collect and store ourselves
Nothing. We do not run a server that holds user data.
1-3. What leaves the device
| Recipient | What | Why |
|---|---|---|
| Google (Firebase Analytics) |
Anonymous usage statistics: launches, screens visited, which features are used, app version, device model, OS version, approximate region, advertising identifier. No injection, weight, meal, symptom or photo data is included. |
To learn which features are actually used, and improve the app |
| Google (ML Kit, Android) |
Operational diagnostics from the photo-analysis component. Photos and their analysis are not transmitted. The analysis model may be downloaded through Google Play services the first time it is used. | To provide on-device photo analysis |
| Apple · Google (app stores) |
Subscription purchase and renewal state. We never receive card or payment details. | To process the subscription and check entitlement |
ML Kit is not used on iOS; photo analysis there uses only what Apple builds into the operating system.
Analytics is the only Firebase product we use. No crash reporting (Crashlytics), performance monitoring, remote configuration or push messaging.
2. Turning statistics off, and having them deleted
Usage statistics can be switched off in the app's Settings at any time. Every feature keeps working when they are off.
To have statistics already collected deleted, write to support@slowhare.ai. They are tied to a random per-device identifier rather than an account, so we need the analytics identifier shown in Settings to know which device's data to remove. We delete it and confirm back to you.
You can also limit the advertising identifier in your device settings (Android: Settings › Privacy › Ads) or refuse app tracking (iOS: Settings › Privacy & Security › Tracking).
3. How long things are kept
- Records on your device — until you delete them or delete the app. We keep no copy.
- Usage statistics — per Google Firebase's retention, which we set to a maximum of 14 months.
- Subscription state — per Apple's and Google's policies.
4. Deletion
Delete individual records in the app, or delete the app to remove all of them. Once the app is deleted the records cannot be recovered.
Backup or CSV files you exported yourself remain wherever you saved them (Files, a cloud drive, a chat). Deleting those is up to you.
5. Third parties
We do not sell your data, and we do not share it for advertising. We use the following providers; what reaches them is listed in section 1-3.
| Provider | Service | Processed in |
|---|---|---|
| Google LLC | Firebase Analytics, ML Kit | United States and elsewhere |
| Apple Inc. | App Store subscriptions | United States and elsewhere |
| Google LLC | Google Play subscriptions | United States and elsewhere |
Usage statistics may be processed outside your country. If you would rather they were not, switch them off as described in section 2; the app is not limited in any way when you do.
6. Your rights
You may access, correct, delete, or restrict processing of your personal data. Because almost everything this app handles lives on your device and is not held by us, exercising those rights directly is both faster and more certain:
- See and correct — the Records tab, where every entry can be edited or removed
- Take a copy — Settings › Backup / Export. This is free, always, whether or not you subscribe
- Erase everything — delete the app
- Stop statistics — the switch in Settings
Asking us to delete something
Write to support@slowhare.ai. It is worth being plain about what we can and cannot delete:
- Health records on your device — we hold no copy, so we cannot delete them for you. Remove them in the app, or delete the app and they go with it. The same fact means we cannot read them either.
- Usage statistics — we will delete these. Include the analytics identifier as described in section 2.
- Purchase records — held by Apple and Google; ask the relevant store.
Anything else, write to the same address and we will act without delay.
If you are in the UK or the EEA, our lawful basis for the limited processing described in section 1-3 is our legitimate interest in maintaining and improving the app, and you may object at any time using the same switch. You also have the right to lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
7. Security
- Records are stored in the app's private area, protected by the operating system's isolation between apps and by device encryption.
- Because we run no server holding health records, there is no server breach that could expose them.
- Everything that does leave the device travels over HTTPS.
8. Children
The app is not directed at children under 14, and we do not knowingly collect their personal data.
9. Contact
| Company | SlowHare |
| Representative | Lee Hojin |
| Data protection contact | support@slowhare.ai |
10. Changes
If this policy changes, the change and its effective date are posted on this page. Where a change is to your disadvantage — new categories of data, or a new purpose — we will say so here and in the app at least 30 days before it takes effect.