03-09-2026, 01:37 AM
(Edited 03-09-2026, 01:44 AM by vibecodelegend.)
Website: calai.app
Just dumped the majority of the data from this insanely insecure app. ( FRESH FRESH FRESH )
Posting this here first because I can't be bothered to look for whatever fed forum is the biggest right now.
Compromised Data: Email (around 1m are apple private relay given that it is a mobile app) of 3m users, date of birth, height / weight, genders, first / last Names of anyone who has setup a Social profile (around 300k users), purchased Subscriptions, meals, Exercise goals, Tracked weight of users over time, referral code conversion information, Superwall / Klaviyo / appsflyer / App Store transaction ids, group information, a lot more Random info (like times of day users eat? lol?)
No password info sadly as the app does not use passwords. Instead they opted for a hyper secure 4 digit numeric pin. (The login endpoint has no rate limit or captcha)
The database is uploaded as a highly compressed 7z file containing 8 JSONL (line delimited JSON) files containing rows from each table.
The tables can be linked together using the User id in the row / path of the row to identify which subdocument is linked to which user. I couldn't be bothered to combine this. Use your brain.
There was also a separate table containing all logged food information but it seems to me like mostly useless junk and is 3-5x the size of all the other data in the db combined. If I were to scrape all the images from it it would easily be several terabytes.
Using an efficient file reader app of your choice makes reading these easy.
example of a user id: 000EN6O1EHN3HcseXcURwe7R9dL2
Compressed size 1.49GB, decompressed 14.59GB
Samples:
subscriptions.jsonl
settings.jsonl
social-profiles.jsonl
user_data.jsonl
weights.jsonl
excluding samples from meals / conversions / groups just because it would make this thread way too long
Download:
Excerpt from signup process: "We promise to always keep your personal information private and secure."
Meanwhile entire subscription table can be read without authentication....
Just dumped the majority of the data from this insanely insecure app. ( FRESH FRESH FRESH )
Posting this here first because I can't be bothered to look for whatever fed forum is the biggest right now.
Compromised Data: Email (around 1m are apple private relay given that it is a mobile app) of 3m users, date of birth, height / weight, genders, first / last Names of anyone who has setup a Social profile (around 300k users), purchased Subscriptions, meals, Exercise goals, Tracked weight of users over time, referral code conversion information, Superwall / Klaviyo / appsflyer / App Store transaction ids, group information, a lot more Random info (like times of day users eat? lol?)
No password info sadly as the app does not use passwords. Instead they opted for a hyper secure 4 digit numeric pin. (The login endpoint has no rate limit or captcha)
The database is uploaded as a highly compressed 7z file containing 8 JSONL (line delimited JSON) files containing rows from each table.
The tables can be linked together using the User id in the row / path of the row to identify which subdocument is linked to which user. I couldn't be bothered to combine this. Use your brain.
There was also a separate table containing all logged food information but it seems to me like mostly useless junk and is 3-5x the size of all the other data in the db combined. If I were to scrape all the images from it it would easily be several terabytes.
Using an efficient file reader app of your choice makes reading these easy.
example of a user id: 000EN6O1EHN3HcseXcURwe7R9dL2
Compressed size 1.49GB, decompressed 14.59GB
Samples:
subscriptions.jsonl
Code:
{"_id":"000EN6O1EHN3HcseXcURwe7R9dL2","_path":"projects/calai-app/databases/(default)/documents/subscriptions/000EN6O1EHN3HcseXcURwe7R9dL2","_updateTime":"2025-12-17T13:57:28.982365Z","originalTransactionId":"720002196550287","klaviyoId":null,"idfa":null,"attStatus":2,"id":"000EN6O1EHN3HcseXcURwe7R9dL2","appsFlyerUid":"1765940640191-7631623","email":"caitlingantt2001@gmail.com","transactionId":"720002196550287","superwallId":"000EN6O1EHN3HcseXcURwe7R9dL2","fcmToken":"esxs-B2khENVvyKCySLZzp:APA91bH9vOJyyrCBe-7X_SJB9HsFNv1Fe_Sem2uSDv6Orj-apyLwW1NHauxRaHRie0YKk4YVSAG7Ckclcb5RxKgvywGJ805ielpVPvxsJE9fbQvuK9E2g90","environment":"Production","status":"subscribed"}
{"_id":"000ID0W9l3YZSVFfcP5EgXT778u2","_path":"projects/calai-app/databases/(default)/documents/subscriptions/000ID0W9l3YZSVFfcP5EgXT778u2","_updateTime":"2025-02-09T16:04:45.917776Z","adid":"3609ec214fa2033a21733d6b214ed559","originalTransactionId":"720001782223809","superwallId":"$SuperwallAlias:446F6318-67F8-424D-8A13-99C88DA9628F","klaviyoId":null,"id":"000ID0W9l3YZSVFfcP5EgXT778u2","email":"smcgifford@icloud.com","transactionId":"720001782223809","environment":"Production","status":"cancelled"}
{"_id":"000PH930JBdWPK6Jc45D1I7eS0I3","_path":"projects/calai-app/databases/(default)/documents/subscriptions/000PH930JBdWPK6Jc45D1I7eS0I3","_updateTime":"2026-03-01T13:02:50.926007Z","adid":"1cc5b846b5e538fa1289b68ea3732e22","originalTransactionId":"90002601400838","klaviyoId":null,"id":"000PH930JBdWPK6Jc45D1I7eS0I3","email":"sbaffoni@icloud.com","transactionId":"90002601400838","superwallId":"000PH930JBdWPK6Jc45D1I7eS0I3","status":"subscribed","environment":null,"appsFlyerUid":"1751239057994-4758379","fcmToken":"ekuGNOxNVU8Og0LTVDcJ8_:APA91bHr6aGmvOEA6FmiHzW5Z3JMuzXNccEf9KWUTnBiS3nJDIBb4_dCqY5DjLe1mcaqs5aldxV315PeCbUTV-hYAl0KivER5uswamnR1aqbOqdAcs_tx6g"}settings.jsonl
Code:
{"_id":"preferences","_path":"projects/calai-app/databases/(default)/documents/userData/001CTlShtWcCSg5BE2mlZY9CQNU2/settings/preferences","_updateTime":"2026-01-09T14:36:07.188109Z","isShowedFrozenStreak":false,"cheatDays":[],"hasLoggedPromoCode":false,"heightFt":5,"fourthMealTime":-62135672964000,"acceptedNotifications":true,"lastLoggedExperimentForLayers":{"backend_experiment_layer":"mfp_nonen"},"hasDismsisedNotificationPermissionCard":false,"segment":"standard","firstMealTime":-62135717964000,"measurementType":"imperial","firstMealEnabled":true,"fiberGoal":25,"enableLiveActivity":false,"notificationBannerShownCount":0,"hasSeenNutritionTooltipTour":false,"currentExperimentForLayers":{"backend_experiment_layer":"mfp_nonen"},"waterServing":8,"groupsOverride":false,"lastKnownSubscriptionStatus":"UNKNOWN","hasDecidedMacroSyncPreference":false,"isShowedLost":false,"name":"","fifthMealEnabled":false,"sodiumGoal":2300,"eatenCaloriesMode":false,"hasSeenHomeTooltipTour":false,"isDismissedBurnedPopup":true,"thirdMealTime":-62135683764000,"hasLoggedDownload":false,"seed":0,"isBurnedCalories":true,"macroRecalculationEnabled":true,"hasSeenBarcodeTutorial":false,"hasShownFeatureAnnouncement2025":false,"weightLossRate":1,"hasScannedFoodLabel":false,"hasShownFirstScanPopup":false,"promoCode":"","stepGoal":10000,"enableBadgeCelebration":true,"secondMealEnabled":true,"hasSeenGalleryTutorial":false,"initialNotifications":true,"rolloverCalories":true,"secondMealTime":-62135707164000,"fifthMealTime":-62135690964000,"heightIn":6,"enableMealReminders":true,"hasUsedFreeRestore":false,"hasDismissedRejoinBanner":false,"thirdMealEnabled":true,"fourthMealEnabled":false,"lastKnownCombinedSubscriptionStatus":"active","trialLogEventTime":1767835965834.126,"birthday":587538000000,"gender":"Female","reasonNotToReachGoal":"Busy schedule","hasMigratedHeight":true,"workoutAmount":"3-5","carbsGoal":146,"onboardedAt":1767821566387.5032,"sugarGoal":51,"height":62,"proteinGoal":111,"coachOrNutritionistOption":"No","goal2":168,"specificDiet":"Classic","hasShownFirstScanTooltip":true,"weight":178,"calorieGoal":1372,"fatsGoal":38,"generatedMicroGoals":true,"hasRunHealthBadgeFix":true,"otherAppOption":"No","startWeight":178,"targetWantToAchieve":"Feel better about my body","heardPlaform":"Friend or family","hasSeenScanTutorial":true,"hasSeenLabelTutorial":true,"notificationBannerFirstShownDate":1767877944762.02,"lastStreakBannerShownDate":1767852000000,"creatorStreakValue":35,"installedAt":1767969364730.054,"lastDayLoggedCalorieGoal":1767882964728.015,"cachedReferralsData":"{\"referrals\":{\"pendingBalance\":0,\"code\":\"AODJSR\",\"payoutPending\":false,\"count\":0,\"canCashOut\":false,\"balance\":0}}","hasShownFixFoodTooltip":true,"mixpanelSubProperties":"{\"product\":\"yearly_30_trial_calai\",\"price\":29.99,\"subType\":{\"trial\":{}}}","updatedAt":"2026-01-09T14:36:07.167Z"}
{"_id":"preferences","_path":"projects/calai-app/databases/(default)/documents/userData/001F7HV82kbuVD6fFlALRJ5RulG2/settings/preferences","_updateTime":"2025-12-02T16:36:57.532769Z","isShowedFrozenStreak":false,"cheatDays":[],"installedAt":1764693130130.422,"hasLoggedPromoCode":false,"heightFt":5,"hasMigratedHeight":false,"acceptedNotifications":false,"lastLoggedExperimentForLayers":{"backend_experiment_layer":"5_1_medium_de","misc_experiment_layer":"feature_announcement_2025"},"hasDismsisedNotificationPermissionCard":false,"segment":"standard","firstMealTime":-62135710622000,"measurementType":"imperial","fiberGoal":25,"height":66,"proteinGoal":60,"goal2":120,"enableLiveActivity":false,"notificationBannerShownCount":0,"hasShownFirstScanTooltip":false,"weight":120,"hasSeenNutritionTooltipTour":false,"currentExperimentForLayers":{"backend_experiment_layer":"5_1_medium_de","misc_experiment_layer":"feature_announcement_2025"},"waterServing":8,"groupsOverride":false,"lastKnownSubscriptionStatus":"UNKNOWN","generatedMicroGoals":false,"hasRunHealthBadgeFix":false,"hasDecidedMacroSyncPreference":false,"isShowedLost":false,"lastKnownCombinedSubscriptionStatus":"unknown","name":"","sodiumGoal":2300,"eatenCaloriesMode":false,"hasSeenHomeTooltipTour":false,"birthday":1764693130124.582,"isDismissedBurnedPopup":true,"thirdMealTime":-62135676422000,"hasLoggedDownload":false,"gender":"Male","seed":0,"hasSeenScanTutorial":false,"isBurnedCalories":true,"hasShownFixFoodTooltip":false,"macroRecalculationEnabled":true,"hasSeenBarcodeTutorial":false,"hasShownFeatureAnnouncement2025":false,"weightLossRate":1,"hasScannedFoodLabel":false,"snowEnabled":true,"workoutAmount":"0-2","carbsGoal":90,"hasShownFirstScanPopup":false,"promoCode":"","sugarGoal":50,"stepGoal":10000,"enableBadgeCelebration":true,"creatorStreakValue":22,"hasSeenGalleryTutorial":false,"initialNotifications":false,"lastDayLoggedCalorieGoal":1764606730127.2568,"calorieGoal":2000,"rolloverCalories":false,"secondMealTime":-62135699822000,"hasSeenLabelTutorial":false,"fatsGoal":30,"heightIn":6,"enableMealReminders":true,"hasUsedFreeRestore":false,"hasDismissedRejoinBanner":false,"updatedAt":"2025-12-02T16:36:57.512Z"}social-profiles.jsonl
Code:
{"_id":"005W45RfmHRqj1GSM1H2DXiDA552","_path":"projects/calai-app/databases/(default)/documents/social-profiles/005W45RfmHRqj1GSM1H2DXiDA552","_updateTime":"2025-11-12T08:56:37.390711Z","id":"69627834-44cf-48e7-a38d-40e09cf836e6","userId":"005W45RfmHRqj1GSM1H2DXiDA552","username":"eringreen6769","firstName":"Ivy","lastName":"Watton","createdAt":"2025-11-03T10:54:59.953Z","fcmToken":"fFc3rscQmU2agp3Im4rH_t:APA91bHBb5t4kMYXGDHOlI6sgsQ9WZyyFXTCEiuZmAGgZhzvSDaZW4_TT37rh15rGYY39eX4PG8xfwwLUPr7v0hV88kO2r54A0JI73Ln_yPJBUoup6S1XNA","profileImageUrl":"https://firebasestorage.googleapis.com/v0/b/calai-app.appspot.com/o/social-profile-images%2F005W45RfmHRqj1GSM1H2DXiDA552.png?alt=media","currentStreak":1,"unlockedBadges":["streak-3","log-meals-5","clean-sweep"],"streakExpires":"2025-11-12T14:00:00Z","longestStreak":5,"updatedAt":"2025-11-12T08:56:37.372Z"}
{"_id":"00651JWBTKNKBZcbM8UtXvMPa5o2","_path":"projects/calai-app/databases/(default)/documents/social-profiles/00651JWBTKNKBZcbM8UtXvMPa5o2","_updateTime":"2026-03-02T23:23:20.562105Z","id":"3e1b3617-8894-429b-ba16-d647420ff86c","userId":"00651JWBTKNKBZcbM8UtXvMPa5o2","username":"Jacob40","firstName":"Jacob","lastName":"August","profileImageUrl":"https://firebasestorage.googleapis.com/v0/b/calai-app.appspot.com/o/social-profile-images%2F3e1b3617-8894-429b-ba16-d647420ff86c.png?alt=media","createdAt":"2026-01-11T23:44:45.040Z","fcmToken":"dNb_xTfDj05JkDHZQdhT5U:APA91bGDSlPxmG7S87NQ8PovYZy8TBRuuZd-vOEoPLZKiVubjlN_cx9L3cPAhMO0nbNoLvDRvEG7Lz9QYkZjgiTr7m-XhZAO_ynrwtsHPQLKKf2xr5vfL2s","unlockedBadges":["streak-3","log-meals-5","log-meals-50","hit-goal-1","water-1","clean-sweep","lose-pounds-1","lose-pounds-10","lose-pounds-25","time-traveler","doppelganger"],"currentStreak":0,"longestStreak":0,"streakExpires":"2026-03-03T05:00:00Z","updatedAt":"2026-03-02T23:23:20.535Z"}user_data.jsonl
Code:
{"_id":"0022wKiSrHQu3iZPvKd1VtOqzxL2","_path":"projects/calai-app/databases/(default)/documents/user_data/0022wKiSrHQu3iZPvKd1VtOqzxL2","_updateTime":"2025-03-28T22:09:14.979957Z","gender":"Male","weight_kg":68,"carbs":200,"height_cm":184,"goal_rate_lb":0.6613860130310059,"goal_offset_lb":48.50164031982422,"goal_offset":0,"accomplish":"","fats":52,"workout_amount":"low","protein":157,"weight_lb":149.91415405273438,"height":0,"height_ft":6,"tracking_app":"","goal_offset_kg":22,"specific_diet":"","weight":0,"calories":1907,"goal_rate_kg":0.30000001192092896,"goal_rate":0,"metric":true,"user_id":"","dob":"29/03/2003","stop_reaching":""}
{"_id":"002ENZiUN2ZVMpe1wvPHJE7hQ0K3","_path":"projects/calai-app/databases/(default)/documents/user_data/002ENZiUN2ZVMpe1wvPHJE7hQ0K3","_updateTime":"2024-11-30T18:23:12.970384Z","tracking_app":"","gender":"Male","carbs":261,"specific_diet":"","weight":68,"calories":1961,"goal_rate":1,"goal_offset":-8,"accomplish":"","fats":56,"user_id":"","metric":false,"dob":"15/02/2005","workout_amount":"high","protein":120,"stop_reaching":"","height":167}
{"_id":"002ExypBWEXGbusUs5ZV9HKovxJ2","_path":"projects/calai-app/databases/(default)/documents/user_data/002ExypBWEXGbusUs5ZV9HKovxJ2","_updateTime":"2025-10-12T04:59:48.016111Z","gender":"Female","weight_kg":81.646728515625,"carbs":210.2435760498047,"height_cm":152.39999389648438,"goal_rate_lb":0.20000000298023224,"goal_offset_lb":-11.000005722045898,"goal_offset":0,"accomplish":"Feel better about my body","fats":50.81120300292969,"workout_amount":"medium","protein":132.73204040527344,"weight_lb":180,"height":0,"fiber":25,"height_ft":5,"tracking_app":"yes","goal_offset_kg":-4.989524841308594,"specific_diet":"Classic","weight":0,"calories":1829.2032470703125,"goal_rate_kg":0.0907185897231102,"goal_rate":0,"appsFlyerId":"","sodium":2300,"metric":false,"user_id":"","dob":"01/07/1999","stop_reaching":"Busy schedule","sugar":69}
{"_id":"002VPoW1pMQUshaRI4B6CvkKowW2","_path":"projects/calai-app/databases/(default)/documents/user_data/002VPoW1pMQUshaRI4B6CvkKowW2","_updateTime":"2025-09-29T23:23:42.941965Z","height_ft":6.922572135925293,"protein":87.5,"weight":0,"appsFlyerId":"","fiber":25,"height":0,"specific_diet":"Classic","metric":true,"weight_lb":119.04947662353516,"height_cm":211,"user_id":"","goal_offset_lb":-11.023099899291992,"goal_rate_kg":0.10000000149011612,"dob":"14/01/2014","carbs":303.5024108886719,"calories":2085.34619140625,"fats":57.9262809753418,"goal_rate_lb":0.22046199440956116,"goal_offset":0,"goal_rate":0,"workout_amount":"high","weight_kg":54,"tracking_app":"yes","gender":"Female","accomplish":"Eat and live healthier","sodium":1800,"stop_reaching":"Unhealthy eating habits","goal_offset_kg":-5,"sugar":78}weights.jsonl
Code:
{"_id":"20250808","_path":"projects/calai-app/databases/(default)/documents/user_weights/00136m7BXPPT05nxWCpFXEY3IUB2/weights/20250808","_updateTime":"2025-08-08T15:24:49.002574Z","date":20250808,"weight_kg":60}
{"_id":"20250815","_path":"projects/calai-app/databases/(default)/documents/user_weights/00136m7BXPPT05nxWCpFXEY3IUB2/weights/20250815","_updateTime":"2025-08-15T13:15:00.289931Z","date":20250815,"weight_kg":65}
{"_id":"20250825","_path":"projects/calai-app/databases/(default)/documents/user_weights/00136m7BXPPT05nxWCpFXEY3IUB2/weights/20250825","_updateTime":"2025-08-25T16:28:15.379294Z","date":20250825,"weight_kg":64}excluding samples from meals / conversions / groups just because it would make this thread way too long
Download:
Excerpt from signup process: "We promise to always keep your personal information private and secure."
Meanwhile entire subscription table can be read without authentication....
![[Image: ijwoc6.gif]](https://external-content.duckduckgo.com/iu/?u=https://files.catbox.moe/ijwoc6.gif)