Privacy policy

What data is collected?

• Account: email address and password (stored encrypted, never readable by us).
• Profile (optional): name, gender, date of birth, height, weight, goal, activity level, dietary preferences.
• Food journal: the foods you log, their quantities, and the dates.
• Tracked supplements: the supplements for which you have activated tracking and the start dates.
• Reminders: if you enable notifications, a technical subscription identifier specific to your browser.
• Connection data: for each page viewed, the site records the IP address, estimated country and city, the page viewed, the date, the browser, the site or link you came from (for example Instagram) and, if you are signed in, your account: Kalorya's administrator can therefore see which pages a member has viewed. This information is used to measure audience (where visitors come from, which pages they read), to improve the site and to keep it secure. Nothing is stored in your browser for this. If you delete your account, the pages you viewed are no longer linked to you. It is neither resold, shared, nor used to display advertising to you.

Some of this information (weight, diet, goals) relates to your health: it is only collected if you choose to provide it, and solely to provide you with the site's features.

When you ask a coach to follow you, your answers to their questionnaire — and the profile details they ask for — are visible to that coach only. They are deleted if your request is declined or cancelled, or if you're no longer linked.

What for?

• To operate your account and your food journal.
• To personalize tools (dosages according to your weight, calorie target, menus according to your tastes).
• To send you the reminders you have enabled.

Your data is neither sold, rented, nor shared for advertising purposes.

Where are they stored?

The data is hosted by Supabase (database and authentication). Your account data is kept as long as your account exists. Connection data (IP, country, page) is kept for a limited time (maximum 90 days) and then deleted, based on our legitimate interest in measuring audience and securing the site.

Cookies

The site uses essential cookies, set without consent because the site cannot work without them: the authentication session, and your device's time zone, so your log and appointments show your own time. That time zone is also saved on your account, and you can change it from your profile.

With your consent only, we also use an audience measurement tool, Microsoft Clarity, which helps understand how the site is used (page views, clicks, navigation paths) in order to improve it. These cookies are only placed after your acceptance via the consent banner, and you can refuse them without affecting your browsing. No advertising cookies are placed. Microsoft Clarity is a service of Microsoft Corporation; learn more about its privacy policy.

Your rights

In accordance with the GDPR, you can access your data, rectify it (directly from your profile) and delete it: the "Delete my account" button in your profile permanently deletes your account and all associated data.

For any questions: davidmush5s@gmail.com. You can also contact the CNIL (cnil.fr) if you believe your rights are not being respected.