Privacy Policy

1. Who is responsible

The controller of your personal data is Zarro Labz AB (company registration no. 559564-4732), Kungälv, Sweden. For privacy questions: support@kaliba.app.

2. What data we process

Account data. Your name, your email address and your login, handled by our authentication provider. The name is used to greet you in the app.

Body data. Weight, body fat, body measurements and target weight, plus the plan settings you choose.

Food and training. Meals and ingredients you log, workouts and sets you record, your own exercises, daily logs including steps, and the notes you write yourself.

Progress photos. Photos you choose to upload.

Answers to the health questions. The short, voluntary questions at registration about your relationship with food, weight and training. We do not store your individual answers, only the result: not answered, no signal or signal.

Coach conversations. If you use the coach: your messages, the coach's replies, and a summary that lets it remember earlier conversations.

Payment. If you buy premium: your subscription status. Card details are handled by our payment provider and never pass through our systems.

Operations. Error reports, and — if you consent — anonymous usage statistics.

Body and health data are a special category of personal data under Article 9 GDPR and receive extra protection.

3. Why we process the data, and the legal basis

The result of the health questions affects the app's behaviour automatically: if it shows signal, the app locks aggressive pace options, makes the coach's answers more careful and may suggest that you seek support. If you skip the questions, the app uses a cautious default. None of this is a diagnosis.

You can withdraw a consent at any time without deleting your account. If you withdraw your consent to the processing of body and health data, that processing stops, and the parts of kaliba that depend on it stop working.

4. How we protect your data

Your weight, body fat, measurements, target weight, your own training notes and your entire coach conversation are stored encrypted. No one can read them directly from the database.

Progress photos are encrypted on your device, with a key that is yours. We cannot see them — not even we who run the service.

Plan settings such as goal, macro targets and number of meals are stored in clear text; they reveal nothing sensitive and are needed for the calculations. Access to the systems is limited to what operations require.

5. Who else processes the data

We use a small number of providers. Each is bound by a data processing agreement and acts on our instructions. Premium purchases are sold through Link (Stripe), which is the merchant of record for the subscription and independently responsible for the processing the purchase requires — receipts, VAT, refunds and disputes. We never sell your data and do not share it for marketing.

6. Where your data lives

Your data — the plan, the logs, the body data, the photos and the coach conversations — is stored in our database within the EU (Frankfurt, Germany).

Some of our providers may process data outside the EU/EEA. When you use the coach, your message — together with the context from your data needed for the answer — is sent to Google; using the coach is your choice, and the rest of kaliba works without it. Sign-in, payment, email delivery and error reports may also involve processing outside the EU/EEA by the respective provider. All such transfers are protected by the EU Standard Contractual Clauses or by an EU Commission adequacy decision (the EU–US Data Privacy Framework).

7. How long we keep it

We keep your data for as long as you use kaliba.

Coach conversations and the coach's memory are deleted automatically after two years, even if you keep using the app.

If you have not used kaliba for 24 months, we remind you by email; if we do not hear from you within 30 days, the account and your personal data are deleted.

If you delete your account, we remove your personal data, except what we are legally required to retain — for example accounting records.

8. Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict the processing, and to receive it in a portable format. Where processing rests on consent, you can withdraw it at any time.

You also have the right to object to processing based on legitimate interest — for example the error monitoring. Contact us and we will assess your objection.

You can export and delete all your data directly in the app, under Settings → Your data. You can also email us at support@kaliba.app.

9. Cookies and analytics

The website uses only what it needs to work, plus cookieless analytics that do not follow you between websites.

In the app we ask for consent before collecting usage statistics. If you say no, nothing is sent. You can change your mind at any time in the settings.

Error monitoring, however, is always on. We consider it necessary to run the service safely, and we have limited it hard: it does not collect your IP address or your headers, it sets no persistent identifiers, and reports from the coach view — the only place where health data is shown in clear text — are stripped or not sent at all. You can object to the error monitoring under section 8.

10. Children

kaliba is for adults and is not directed at children. You must be at least 18 years old and enter your date of birth when registering; we do not verify it against ID. The coach never gives weight-loss advice to anyone who states they are under 18.

11. Complaints

If you believe we handle your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se, or with the data protection authority in the country where you live.

12. Changes to this policy

If we change the policy, we update the date and give you notice in good time before material changes. If a change would mean processing body or health data for new purposes, we ask for a new consent — that is never expanded through a notice.

13. Contact

Privacy questions: support@kaliba.app.