Privacy & consent

What clients share with their coach, and how consent works

Following someone’s eating habits means handling personal health data. Here’s exactly what a client shares with you, what they don’t, and what happens when they stop.

Trust is what makes remote coaching work. Clients log honestly when they know who can see what. So Kality spells out exactly what is shared, and records the client’s agreement, before you see anything.

What the client agrees to share

Connecting with a coach shares four areas, all shown to the client on one screen and agreed to together:

AreaWhat it includes
Food and drink you logMeals, ingredients, photos they attach, calories, macronutrients, micronutrients, supplements, and how meals made them feel.
Body measurementsWeight, height, BMI, body fat and lean mass, and their weight goal and progress.
Activity and sleepSteps, active energy, workouts, sleep duration and resting heart rate.
Longevity and fitness scoresThe Longevity Score and its pillars, the Fitness score and estimated VO₂ max.

A separate opt-in for sensitive metrics

Advanced health metrics, heart rate variability, blood oxygen and respiratory rate, are never bundled with the rest. They need their own opt-in, and the client is told plainly that they aren’t needed for coaching. A client can share everything above without them.

The limits are enforced twice. The app doesn’t send what the client hasn’t agreed to, and the server removes it again when you open the dashboard. So an old or modified app version can’t leak data nobody agreed to share.

Why it works this way

Under GDPR, data about health, such as heart rate, sleep and body composition, is special-category data. That needs explicit consent: specific, informed and given by a clear action, not a line of small print. Kality records each client’s consent with a version number and a date. If what’s shared ever changes materially, clients are asked again.

What the coach agrees to

Before you see any client data, you accept Kality’s coach data-protection terms. They’re versioned too. Under them you act as an independent controller of the data a client shares with you: you’re responsible for how you use it in your coaching. The terms also make clear that Kality and its data are not medical advice.

What a coach can and can’t do

You canYou can’t
See the shared areas above, over 7 to 90 daysEdit or delete the client’s meals
Change their calorie, macro, activity and micronutrient goalsSee advanced health metrics unless they opted in
Send them push notificationsKeep access after they disconnect

When the client stops sharing

  • Disconnecting is instant. A client can disconnect from the app at any time, and your access ends straight away.
  • They can ask you to delete their data. The client is marked Deletion requested in your list, and a Deletion Requests queue shows what’s waiting.
  • One coach at a time. If a client invites a new coach, the link with the previous one ends.

What stays on the client’s phone

Kality only reads Apple Health data. It never writes to it. And Kality asks before it uses a person’s data for AI features. If you have questions about how data is handled for your practice, get in touch.

Kality gives general nutrition information, not medical advice. If you have a medical condition, are pregnant, or have a history of disordered eating, talk to a qualified health professional before changing how you eat.