Privacy Policy

1. Who is responsible for your data

Kality is provided by Dynamic Digital sp. z o.o., Al. Jerozolimskie 181b, Warsaw, Poland, VAT PL5213678094 ("we", "us"). We are the data controller for the personal data described in this policy. You can reach us about anything in this policy at info@dynamicdigital.eu.

2. What we collect

Account

You sign in with Apple, Google or an email address and password. We receive your email address (with Sign in with Apple, this may be a private relay address), your name if the provider shares it, and a user ID. Kality has no anonymous accounts.

Your consent

Before you enter any personal information, Kality asks you to agree to our Terms of Use and this policy and to give your explicit consent to processing your diet, body and health data. We keep a record of that consent (the version you agreed to, the date, and your analytics choice) with your account.

Profile and goals

When you set up Kality you tell us your name, age, sex, height, weight, starting and goal weight, goal (lose, maintain or gain), activity level, diet style, country and language. You can also choose focus areas and whether to track cigarettes and alcohol. We use these to calculate your calorie, macro and micronutrient goals, which are stored with your profile, along with the badges you earn.

What you log

Meals and drinks, with their ingredients, portions, nutrition and the time you logged them; how you felt after a meal; water, supplements, cigarettes and alcohol; saved meals, drinks, ingredients, supplements and recipes; your shopping list; and any daily goal adjustments. This information is about your diet and health, so we treat it as health data.

Voice, photos and text

• Voice logging: the recording is sent to our server and on to OpenAI to be turned into text. We don't store the audio.
• Talk to Kal: your voice is streamed directly from the app to OpenAI during the conversation. We don't record or store it.
• Meal and label photos: sent for analysis so we can identify the food or read the label. We don't store them.
• Meal share cards: if you add your own photo to a share card, or ask Kality to generate a picture, the photo and the finished images are stored with that meal (see section 6 for the image provider).
• Coach chat: your conversations with Kality's AI coach are kept on your phone for the session and are not stored on our servers.

Sleep recording

If you record your night, Kality uses your iPhone's microphone while the recording runs and records the night's audio to your iPhone. Loud noises are spotted as they happen; snoring, talking and coughing are found afterwards, on your iPhone, by Apple's built-in sound analysis. The recording never leaves your device: it is not sent to us, to OpenAI or to anyone else, and it is excluded from iCloud and device backups.

Recordings are deleted automatically 7 days after the night, unless you choose to keep a night; you can stop keeping it at any time. If you turn off Keep night recordings in Settings › Sleep, each recording is deleted as soon as it has been analysed. Nights recorded with earlier versions of Kality may still have short snore clips, which follow the same 7-day rule. The Apple Watch never uses its microphone.

Kality also keeps the results of each night, such as the minutes of snoring, how loud they were, your Snore Score and the times of the moments it marked, together with the factors you tag, your morning check-in and, if you use an Apple Watch, your movement and overnight heart rate. This is stored on your iPhone and Apple Watch, not on our servers, unless you share it with a coach (see section 7).

Your sleep, including your Snore Score, can count toward your Longevity Score and Fitness score. Those scores are uploaded only if you connect a coach and agree to share them.

Barcodes and food search

When you scan a barcode or search for a supplement, we look it up in Open Food Facts, the US National Institutes of Health Dietary Supplement Label Database or Health Canada's natural health products database. Only the barcode number or search term is sent, never anything that identifies you.

Subscriptions

Kality Premium is bought through Apple. Apple handles the payment; we never see your card details. We receive your subscription status and purchase history, and Adapty, our subscription provider, links it to your Kality user ID.

Support messages

If you contact us from the app, we store your name, email, phone number (if you give one), your message, the category you chose, your app version and platform. We use these only to answer you, never for marketing.

Device and usage data

• A push notification token, if you allow notifications.
• Only if you turn on Share usage analytics, which is off unless you choose it: app usage events recorded with Google Analytics for Firebase, such as screens viewed, signing up or in, finishing setup, logging a meal (and which method you used), scanning a barcode, starting a voice session and starting a subscription. These events are linked to your user ID. They contain no meal contents, nutrition, weight or Apple Health values.
• Counters of how much you use AI features, to keep usage within fair limits.
• Technical data our providers process to deliver the service, such as your IP address, device model and operating system version.

Kality does not track you across other companies' apps or websites, does not use the advertising identifier, and shows no ads.

3. Apple Health

If you allow it, Kality reads the following from Apple Health: weight, height, body fat percentage, lean body mass, BMI, active energy, activity rings, steps, walking and running distance, flights climbed, exercise minutes, workouts, heart rate, resting heart rate, heart rate variability, VO₂ max, sleep, blood oxygen and respiratory rate. On Apple Watch, Kality reads the heart rate measured overnight to add it to your sleep recording. Kality does not write anything to Apple Health.

This data is used on your iPhone to show your activity, sleep and vitals and to calculate your Longevity Score, Fitness score and estimated VO₂ max. It leaves your phone only in these cases:

• Your latest weight is saved to your Kality profile so your goals stay up to date.
• If you connect a coach and agree to share, a daily summary is uploaded for your coach (see section 7).
• If you turn on AI features, a summary (for example steps, sleep, resting heart rate, workouts, VO₂ max and body composition trends) can be included when you ask the AI coach for advice (see section 4).

We never use Apple Health data for advertising, marketing or data mining, never include it in app analytics, never sell it, and never share it with anyone except as described above. You can change what Kality reads at any time in the iOS Settings app under Health → Data Access & Devices → Kality.

4. AI features

Logging by voice, text, photo or label, Talk to Kal, the coach chat, recipes, meal suggestions and shopping-list clean-up use OpenAI's models. Meal share pictures use fal.ai. Before you first use any of these features, Kality asks for your permission to send data to these providers. Depending on the feature, this includes what you type or say, voice recordings, meal and label photos, and coaching context such as your goals, today's meals and, if connected, the Apple Health summary described above.

We send this data to OpenAI through its API, with storage of responses turned off. Under OpenAI's API terms, it does not use this data to train its models and may keep it for up to 30 days to detect abuse, after which it is deleted. For Talk to Kal, we also send OpenAI a pseudonymous user identifier, which it uses only for safety monitoring.

You can withdraw your permission at any time in Settings → Share data with OpenAI. AI features then stop working until you turn it back on; everything else in Kality keeps working.

AI results are estimates. Always check them, especially if you have a medical condition or allergy. See our Terms of Use.

5. How we use your data and our legal bases

Under the EU General Data Protection Regulation (GDPR), we rely on these legal bases:

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Kality's scores and suggestions are information for you, not decisions about you.

6. Who we share it with

We don't sell your personal data or share it for advertising. We share it only with the service providers below, who process it on our behalf under contracts that require them to protect it to the standard in this policy and to use it only to provide their service to us, and with people you choose to share with.

We may also disclose data if the law requires it, to protect the rights, safety or property of our users or others, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

7. Sharing with a coach

Kality Premium lets you invite a personal trainer, nutrition coach or other professional to a free web dashboard. Nothing is shared until you invite them and agree to share. When you connect, you agree to share:

• Food and drink you log: meals, ingredients, photos you attach, calories, macronutrients, micronutrients, supplements, and how meals made you feel.
• Body measurements: weight, height, BMI, body fat and lean mass, and your weight goal and progress.
• Activity and sleep: steps, active energy, workouts, resting heart rate and your last 14 nights: bedtime and wake time, duration, sleep stages and score, and on nights you record, the snoring, noise and movement Kality measured, the factors you tagged and your morning check-in. Never the sound itself.
• Longevity and fitness scores: your Longevity Score and the pillars behind it, your Fitness score and estimated VO₂ max.

Advanced health metrics (heart rate variability, blood oxygen and respiratory rate) are shared only if you tick a separate box. Your coach can also set your goals, which update in your app, and send you push notifications.

Your coach decides how to use what you share for coaching and is responsible for it as an independent data controller. Before they can see any client data, coaches must accept our data-protection terms, which limit them to coaching purposes, forbid passing your data on, and require them to keep it confidential and secure.

You can withdraw your consent or disconnect your coach at any time in the app. Your coach loses access immediately. You can also ask for your data to be removed from your coach's dashboard.

8. Family sharing

With Family, one Premium subscription covers you and one partner. Joining a family shares your membership with your partner, and anything you choose to share with them, such as a portion of a meal or your shopping list. Your partner cannot see your diary, profile or health data. Your partner joins with an invitation code, which expires after a set time. A family has at most two members.

9. International transfers

Our servers run on Google Cloud in the United States, and several of our providers are based in the United States. When your data is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, together with the providers' security measures. You can ask us for a copy of the safeguards we use.

10. How long we keep it

• Your account, profile, logs, share photos and support messages: for as long as you have an account. They are deleted when you delete your account.
• Voice recordings, meal photos and label photos sent for analysis: not stored by us. OpenAI may keep them for up to 30 days, as described in section 4.
• AI coach chats: not stored on our servers.
• Sleep recordings: kept only on your iPhone and deleted 7 days after the night, or as soon as they're analysed if Keep night recordings is off. Nights you choose to keep stay until you stop keeping them or delete the app. Night summaries stay on your devices and are removed when you delete the app.
• Invitations: coach invitations expire after 14 days, and family invitation codes expire too.
• App usage events (only if you turned analytics on): kept by Google Analytics for up to 14 months. Turning analytics off stops collection and resets the analytics identifier on your device.
• Purchase records: kept by Apple under Apple's own policies.

We may keep some data longer if the law requires it, or to establish or defend legal claims, and only for as long as necessary.

11. Deleting your account and data

You can delete your account at any time in the app: Settings → Delete Account. This permanently deletes your account and the data linked to it from our systems, including your profile, logs, saved items, recipes, shopping list, share photos, health summaries, coach connections, support messages and usage counters. It also removes you from any family. If you signed in with Apple, we revoke Kality's access to your Apple ID.

Deleting your account does not cancel your App Store subscription. Cancel it in the iOS Settings app under your name → Subscriptions.

If you can't use the app, email info@dynamicdigital.eu from the address linked to your account and we'll delete it for you.

12. Your rights and choices

Under the GDPR and similar laws, you have the right to:

• Access your data and get a copy of it, including in a portable format.
• Correct it. Most of it can be edited directly in the app.
• Delete it (see section 11).
• Restrict or object to how we use it.
• Withdraw consent at any time, without affecting what we did before you withdrew it.

In the app and on your iPhone you can:

• turn AI features off in Settings → Share data with OpenAI;
• turn app analytics on or off in Settings → Share usage analytics;
• change or stop Apple Health access in iOS Settings → Health → Data Access & Devices → Kality;
• disconnect your coach or withdraw coach sharing;
• leave your family;
• turn off notifications in iOS Settings → Notifications → Kality.

For anything else, email info@dynamicdigital.eu. We'll reply within one month. You also have the right to complain to a data protection authority, in particular the one where you live or work. Ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) in Warsaw, Poland.

California residents: we do not sell or share your personal information as those terms are defined in the California Consumer Privacy Act, and we don't use sensitive personal information to infer characteristics about you. You can exercise the rights above, including to know and to delete, by emailing us. We won't treat you differently for doing so.

13. Security

Data is encrypted in transit between the app, our servers and our providers, and encrypted at rest by Google Cloud. Access rules ensure that each account can only read its own data, and only a small number of authorised people at Dynamic Digital can access production systems. No system is completely secure; if a breach affects your data, we'll notify you and the authorities as the law requires.

14. Children

Kality is not intended for children under 13, and you must be at least 13 to create an account. If you're under 18, or under the age of majority where you live, you need permission from a parent or guardian to use Kality. If you believe a child has given us personal data, contact us and we'll delete it.

15. The website and coach dashboard

kalityapp.com uses no cookies, analytics or trackers. Our hosting provider (Google Firebase Hosting) processes your IP address and browser information to deliver the pages and keep them secure, and the pages load fonts from Google Fonts, which also receives your IP address.

The coach dashboard stores a coach's name, email address and sign-in details, and a record of their acceptance of our coach terms. We use them to provide the dashboard, on the basis of our contract with the coach.

16. Changes to this policy

We'll update this policy when Kality changes. We'll change the date at the top, and if the changes are significant we'll tell you in the app before they take effect. Where a change requires your consent, we'll ask for it.

17. Contact us

Dynamic Digital sp. z o.o.
Al. Jerozolimskie 181b, Warsaw, Poland
VAT: PL5213678094
Email: info@dynamicdigital.eu

See also our Terms of Use.