cally consumer health data policy
This policy explains how cally handles consumer health data. It adds to our privacy policy (askcally.com/privacy), which covers everything else. “We” means Elie Saade, the individual developer in the United Arab Emirates who makes cally. Contact: support@askcally.com.
1. What we mean by consumer health data
Consumer health data is information that is linked, or could reasonably be linked, to you and that says something about your past, present or future physical or mental health. In cally, that can include what you eat, your weight and body measurements, your steps and activity, your water, a medicine like a GLP-1, a doctor’s numbers, an allergy or intolerance, a food you avoid for a health reason, how a food makes you feel, a medicine day reminder, a plan set for pregnancy or breastfeeding, and what the coach learns from these.
2. The health data we collect
| What | Where it comes from | Why we use it |
|---|---|---|
| Your food log: meals, calories, nutrients, portions, times, photos you take of food | You, and estimates cally makes for you | To show your day, your progress and your plan |
| Your plan: body formula, birth year, height, weight, goal weight, activity, pace, and “no deficit” if you tell cally you’re pregnant or breastfeeding, or if your plan can’t offer weight loss. The words pregnant or breastfeeding are never kept, but “no deficit” together with the rest of the plan can only mean a pregnancy or breastfeeding: a pregnancy saves no daily target, and if you set your own target, the plan’s history records that cally didn’t hold back weight loss for your body | You, in the setup questions and in You | To work out your daily target |
| Weight, measurements, water, steps and active calories | You, and Health Connect or Apple Health if you allow it | To show them on Today and Progress, and adjust your plan |
| Health details: GLP-1 settings, doctor’s numbers, fluid limit, allergies, intolerances, foods you avoid for a health reason, how a food makes you feel, medicine day reminders. Never as words: the name of a medicine or a condition, or a pregnancy or breastfeeding | You, in cally’s settings or in a coach chat, only after you agree to health details | To fit food, protein and water to you, and to remind you |
| Coach chats, and what a message sends: with health details on, your health details (including whether your plan has no calorie deficit) and weight trend go with every message; if you ask to change your target while “no deficit” is on, the coach is told only that your plan keeps no calorie deficit, never why; an earlier reply that showed a card for logging food goes with that card’s foods and their calories and nutrients, and whether each was logged from that card | You | To answer your questions about food. Chats stay on your phone, unless you report a reply |
| What cally remembers about your food life | Your chats and your log | To make answers fit you. Health items only after you agree to health details. A medicine, a condition, a pregnancy or breastfeeding is never kept as something cally remembers: cally uses it only in that conversation |
| Estimates from photos, screenshots, typed or spoken meals | You, when you ask for an estimate | To work out calories and nutrients |
We collect this only to run cally for you. We don’t use it for ads and we don’t sell it. cally works out routines from your own log, like a usual Thursday dinner, only to make logging and answers fit you, and shows each one so you can forget it.
cally never remembers anything about mental health, signs of an eating disorder, distress or a crisis. When a message sounds like one, cally shows a reply written by people with helplines. That chat is kept only on your phone, for 30 days, and a note on your phone pauses picks and calorie fits for 30 days. Neither is kept anywhere else, and nothing about it goes into what cally remembers.
3. Your consent
We ask for your consent before we collect health data, and separately before we share it.
- Estimates by AI: a separate consent, apart from the terms, before cally sends anything you show it (a photo, your words, a dish on your screen) to AI to work out the food. Our server refuses an estimate without it.
- Your food log and plan: collected only to give you what you ask for, when you log a meal or set up your plan, and kept on your phone unless you choose to keep your log in your account.
- Health details: off until you agree, on a separate screen, the first time it matters. You answer once for your account: a new or restored phone uses an earlier yes to the same words without asking again, also if it asked before you signed in and you said “Not now”; a “Not now” on a phone where you never said yes never removes health details you agreed to on another phone.
- Keeping your log in your account: a separate choice. Without it, your log stays on your phone.
- The coach and memory: a separate screen before your first chat.
- Health Connect and Apple Health: off until you switch them on, and each kind of data is asked for separately.
You can withdraw any of these in Privacy choices, or by emailing us. Withdrawing stops the collection and deletes what we hold from it, as described in our privacy policy. Switching health details off, on any of your phones, counts for your whole account: it removes your health details from your account and your other phones. Today one thing stays: each plan saved while health details were on keeps, in your plan’s history, whether it was made for GLP-1 support or a protein or fluid limit, until you delete your data or your account.
4. Who we share it with
We share health data only with the companies that process it for us to run cally, and only for the feature you used:
| Who | What | Why |
|---|---|---|
| Supabase (Frankfurt, Germany) | Your account, and your log and health details if you keep your log in your account | To store them |
| Cloudflare | Requests passing through our server | To run our server |
| Google (Gemini API) | The meal, photo, screenshot or message you send, with the details the answer needs | To make estimates and coach replies. Google may keep requests up to 55 days to check for misuse. |
| OpenAI | Estimates when Gemini can’t answer | As above, kept up to 30 days. |
| Deepgram | Voice clips | To turn them into text. Not kept |
| Google (Health Connect) and Apple (Apple Health) | What you choose to write there | They are on your phone, at your request |
These companies may not use your health data for their own purposes. We don’t share health data with anyone else, unless you ask us to or the law requires it. We have no affiliates.
We never sell your health data. We don’t use geofences around places where people get health care.
5. Your rights
You can:
- See it. Ask whether we hold your health data, get a copy, and get the list of companies we shared it with. You can also export your log in You, under Account.
- Delete it. Delete your account in the app or at askcally.com/delete, or ask us. We delete it from our systems and tell the companies that process it for us. Copies in our database backups age out within 7 days.
- Withdraw consent. Switch the feature off in Privacy choices, or ask us.
To ask, email support@askcally.com from the email address of your cally account, or use the choices in the app. We reply within 45 days. If we need more time, we’ll tell you why, and we may take up to 45 more days. We don’t charge for this, and we won’t treat you differently for asking.
If we refuse your request, you can appeal by replying to our answer with the word “appeal”. We answer appeals within 45 days and tell you how to contact your state’s attorney general if you disagree. In Washington, that’s the Washington State Attorney General’s Office.
6. How long we keep it
We keep health data only as long as you use cally, or until you delete it or withdraw consent. The times for each kind of data are in section 19 of our privacy policy.
7. Changes
If we change how we use health data, we’ll update this page, change the date at the top, and ask for your consent again before any new use.
8. Contact
Email support@askcally.com.