Calobrate ("we", "us", "our") is a health and fitness app that helps users track nutrition, workouts, and body progress. This policy explains what personal and health data we collect, how we use it, and the rights you have over it. By using the app you agree to the practices described here.
2. Data we collect
Account data: name, email address, and authentication details.
Health & fitness data: nutrition and food logs, supplement logs, workout logs, body weight history, and progress photos (front / side / back).
Water intake: daily hydration and exercise hours.
Payment data: when you subscribe, your transaction is processed by Base44 Payments (Wix). We store order and subscription identifiers but never your full card details.
Usage data: device identifiers and analytics events that help us improve the app.
3. How we use your data
To generate personalised nutrition targets, meal plans and workout cycles.
To track your progress, log sets, weights, reps and body changes.
To provide trainer features (clients join a trainer's team and share relevant plan data).
To process subscriptions and manage access to premium features.
To send service-related notifications and respond to support requests.
4. Legal basis (UK GDPR)
We process your data under the following lawful bases:
Consent (Article 6(1)(a) and Article 9(2)(a) for health data) — you accept this policy and consent to health data processing during onboarding.
Contract (Article 6(1)(b)) — to deliver the service you signed up for.
Legitimate interests (Article 6(1)(f)) — for product improvement and security.
5. Where data is stored
Your data is stored securely on the Base44 platform servers. Payment information is handled by Base44 Payments (Wix). Progress photos are uploaded to private storage and are only accessible to you. We do not sell your personal data to third parties.
6. Data sharing
We only share data when necessary:
With your personal trainer, if you join a trainer's team (limited to plan-relevant data).
With our payment provider (Base44 Payments / Wix) to process subscriptions.
When required by law or to protect our legal rights.
7. Data retention
We keep your data for as long as your account is active. You can request deletion of your account and all associated data at any time via the Data Deletion page in the app or by emailing us. We aim to complete verified requests within 30 days.
8. Your rights
Under UK GDPR you have the right to:
Access the personal data we hold about you.
Rectify inaccurate data.
Erasure ("right to be forgotten").
Restrict or object to processing.
Data portability.
Withdraw consent at any time.
To exercise these rights, use the in-app Data Deletion page or contact us below.
9. Children's privacy
Calobrate is not directed at children under 16, and we do not knowingly collect data from anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified within the app.
11. Contact us
If you have any questions about this policy or your data, contact us at support@calobrate.io.