GDPR Information
Last updated: January 4, 2026
1. Introduction
This page provides information about your rights under the General Data Protection Regulation (GDPR) if you are located in the European Economic Area (EEA), United Kingdom, or Switzerland. Calibite is committed to protecting your personal data and respecting your privacy rights.
2. Data Controller
Calibite acts as the data controller for personal data collected through our Service. This means we determine the purposes and means of processing your personal data.
Contact: support@calibite.app
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide our Service to you (e.g., account management, food tracking, AI coaching)
- Legitimate Interests: Processing for our legitimate business interests (e.g., improving our Service, fraud prevention, security)
- Consent: Processing based on your explicit consent (e.g., marketing communications, optional data sharing)
- Legal Obligation: Processing required to comply with applicable laws
4. Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
5. How to Exercise Your Rights
You can exercise your GDPR rights in the following ways:
- In-App: Use the Settings menu to access, export, or delete your data
- Email: Send a request to support@calibite.app
We will respond to your request within 30 days. We may need to verify your identity before processing your request.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law.
8. Special Categories of Data
Our Service processes health-related data, which is considered a special category under GDPR. We process this data based on your explicit consent when you create an account and use our health tracking features. You can withdraw this consent at any time by deleting your account.
9. Automated Decision-Making
Our AI features provide automated recommendations based on your data. These recommendations are advisory only and do not constitute decisions with legal or similarly significant effects. You are not obligated to follow any AI-generated advice.
10. Contact Us
For any questions about your GDPR rights or to submit a data request, please contact us:
Email: support@calibite.app
We aim to respond to all requests within 30 days.