Privacy Policy of the "CaloriQuest" Mobile Application

Version: 1.0

Effective Date: December 11, 2024

1. General Information

The "CaloriQuest" mobile application (hereinafter referred to as the "Application") is owned by Paweł Menkiel, located at ks. Norberta Bończyka 58/7, 41-400 Mysłowice, Poland, NIP 2220919717 (hereinafter referred to as the "Company"). This Privacy Policy outlines the rules for collecting, processing, and protecting the personal data of the Application's users in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller of the personal data of the Application's users is CaloriQuest, located at ks. Norberta Bończyka 58/7, 41-400 Mysłowice, Poland, NIP 2220919717. For matters related to data protection, please contact us via email at contact@caloriquest.com.

3. Data We Collect

We may collect the following categories of personal data:

  • Account Data: Name, email address, and encrypted password.
  • Health Data: Weight, height, age, gender, physical activity level, dietary goals, and related preferences.
  • Usage Data: Information about app interactions, such as calorie entries, meal logs, and settings.
  • Technical Data: IP address, device type, operating system, and app version.

4. Legal Basis and Purposes of Data Processing

We process your personal data based on the following legal grounds:

  • Consent: For collecting and processing health-related data or sending promotional communications, where required.
  • Contractual necessity: To provide services through the Application.
  • Legal obligations: To comply with applicable laws and regulations.
  • Legitimate interests: To improve our services and ensure the security of the Application.

We process your data for the following purposes:

  • Providing Services: Enabling the use of the Application's features, including calorie tracking and dietary monitoring.
  • Personalizing Services: Adapting the Application's features to your individual needs and preferences.
  • Communication with Users: Sending notifications, updates, and other information about the Application.
  • Analytics and Improvements: Analyzing usage data to improve functionalities and ensure security.

5. Data Sharing

Your personal data may be shared with the following entities:

  • Data Processors: Hosting providers, analytics service providers, and other entities processing data on our behalf, bound by confidentiality agreements and our instructions.
  • Legal and Government Authorities: If required by applicable laws and regulations.

6. User Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Obtain a copy of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data under specific circumstances ("right to be forgotten").
  • Right to Restrict Processing: Limit the processing of your data in certain cases.
  • Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another controller.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: If processing is based on consent, withdraw it at any time without affecting previous lawful processing.
  • Right to Lodge a Complaint: File a complaint with the supervisory authority in your country.

To exercise your rights, contact us at contact@caloriquest.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption and restricted access to data.

8. Data Storage

We retain personal data for the period necessary to fulfill the purposes described in this Privacy Policy or as required by law:

  • Account Data: Stored as long as the user account is active or until deletion is requested.
  • Health and Usage Data: Retained for up to 2 years after account inactivity, unless deleted earlier upon user request.
  • Technical Data: Stored for up to 6 months for security and troubleshooting purposes.

9. International Data Transfers

Your personal data may be transferred to countries outside the European Economic Area (EEA) where data protection laws may differ from those in your country. In such cases, we ensure appropriate safeguards, such as standard contractual clauses approved by the European Commission.

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be published in the Application and will take effect immediately upon publication. Users will be notified of significant changes via in-app notifications.

11. Contact

If you have any questions regarding this Privacy Policy, please contact us via email at contact@caloriquest.com.