This page explains what "sensitive personal data" means in the context of Calsay, what specific data We process, why We need it, and what rights You have. You are asked to give Your explicit consent to this processing during onboarding, and You can withdraw that consent at any time.
What counts as "sensitive" data?
Under the EU General Data Protection Regulation (GDPR) and similar privacy laws, some categories of personal data are considered special categories because of their potential impact on Your privacy. Data concerning health is one of those special categories, and it requires a higher standard of protection than ordinary personal data.
Calsay is a nutrition and fitness tracking app. To do what You are asking it to do — track Your meals, Your body weight and Your physical activity, and give You personalized calorie and macronutrient guidance — We necessarily need to process data that qualifies as health data under these laws.
What sensitive data does Calsay process?
When You use Calsay, the following categories of data that may qualify as sensitive are processed:
- Biological sex, date of birth and age — used to compute Your basal metabolic rate (BMR) and personalized calorie targets.
- Height and body weight — used for BMR, body mass index (BMI) and to track Your progress toward Your goal.
- Target body weight, fitness goal and desired rate of change — used to compute Your daily calorie target.
- Activity level and dietary preferences — used to adjust Your calorie and macronutrient targets and, if applicable, to adapt meal suggestions.
- Meals You log — including food items, quantities, meal type and the computed nutritional values (calories, protein, carbohydrates, fat).
- Body weight logs — each weight entry with its timestamp.
- Physical activity logs — activity type, duration, intensity and estimated calories burned.
- Voice recordings — when You use voice logging, Your speech is recorded on Your Device and uploaded to Our servers for transcription. These recordings are processed transiently and are not stored on Our servers once transcription is complete. Only the transcribed text and the resulting structured entry are retained.
Why do We need this data?
Calsay cannot function without this information. Specifically, We use Your sensitive data to:
- Compute Your personalized daily calorie and macronutrient targets using standard nutrition formulas (Mifflin-St Jeor).
- Transcribe Your voice input and translate it into structured meal, weight or activity entries.
- Look up nutritional information for the food items You mention.
- Estimate calories burned from physical activity based on standard metabolic equivalents (MET values).
- Show You Your progress over time through charts and summaries.
- Optionally, if You choose to enable it, write nutrition, weight and activity entries to Apple Health on Your Device.
Legal basis
We process this data on the basis of Your explicit consent under Article 9(2)(a) of the GDPR. That is why You are asked to tick this box during onboarding: without Your explicit consent, We are not legally permitted to process health data about You, and therefore We cannot offer You the Service.
Who can access this data?
- You. You can view, edit and delete Your own data at any time from inside the app.
- A limited set of Service Providers who help Us operate Calsay (for example, our cloud database provider, our voice transcription provider and our nutrition database provider). These providers only process the data needed for their specific function and are contractually bound to protect it. A full list is available in our Privacy Policy.
- No one else. We do not sell Your data, and We do not share it with advertisers, data brokers or insurers.
How is this data protected?
- All communication between the app and Our servers is encrypted in transit (TLS).
- Our database uses row-level security so that each User can only access their own records.
- Voice recordings are not retained by Us; only the transcribed text and structured entry are kept.
- Data is stored on infrastructure provided by reputable cloud vendors under data protection agreements.
How long is this data kept?
Your health data is kept for as long as Your Account is active. If You delete Your Account — which You can do at any time from Profile → Delete Account — all Your meals, weight logs, activity logs, profile details and avatar are permanently removed from Our servers within 30 days. Data You previously wrote to Apple Health stays on Your Device and is managed by You from the iOS Health app.
Your rights
You can at any time:
- Access the data We hold about You.
- Correct inaccurate data (most fields are editable directly in the app from Profile → Personal Details and Profile → Nutrition Goals).
- Delete Your Account and all associated health data from within the app.
- Withdraw this consent at any time. Because consent is the legal basis for processing Your health data, withdrawing it means We can no longer provide the Service to You; in practice, this is equivalent to deleting Your Account.
- Export Your data in a machine-readable format.
- Object or restrict certain types of processing.
- Lodge a complaint with Your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD, aepd.es).
To exercise any of these rights, contact Us at management@atlanticointelligencelabs.com.
What happens if You don't consent?
This consent is required for Calsay to function. Without it, We cannot compute Your targets, transcribe Your voice input or save Your logs, and therefore We cannot create Your Account. If You prefer not to consent, please do not create an account.
Contact
For any question about how We process Your sensitive data, or to exercise Your rights, contact Us at: