KalmeFit Consumer Health Data Privacy Policy
Reviewed by KalmeFit, September 2026.
Effective: September 24, 2026
KalmeFit is offered by Squadora L.L.C., a Minnesota limited liability company ("KalmeFit", "we", "us"). This policy explains the consumer health data we collect, why, where it comes from, who we share it with, and how you can use your rights. It applies to everyone who uses KalmeFit, including Washington residents under the My Health My Data Act. KalmeFit is for adults 18 and older only.
1. The consumer health data we collect, and why
| Data | Why we collect it and how we use it |
|---|---|
| Your answers to the health screening questions at the start (a PAR-Q+ style screen) | To decide whether to suggest you check with a clinician first, and to keep your plan gentle where your answers call for it |
| Your answer to the clinician follow-up question, if the screen shows it | The same: to keep your training within what you told us is safe for you |
| Injuries or restrictions you list | To leave out exercises that could aggravate them |
| How ready you feel on a day, and notes you add, such as sleep hours, energy, mood and free text | To adjust that day's session and the next week to how you are |
| Your training plan, the workouts you do and the sets you log | To build, adjust and track your training, and to show your Progress |
| What you tell Kalme in the conversation, when it touches your health | So Kalme can reply and propose changes, which you approve |
| Photos you take of gym equipment, for equipment import | To read which equipment you have. The photo is processed once and then discarded; we do not store it |
We use this data only to provide KalmeFit to you. We do not use it for advertising, and we do not use it for any purpose not listed here without first telling you and asking for your consent.
Consent. We ask for your consent before we collect the health screening answers, and before Kalme's AI receives anything from you. You can say no; the training plan, logging and timers work without Kalme's AI. The app asks for this consent on the screening card, before you can answer: the questions are shown, and your answers are only accepted after you agree.
2. Where the data comes from
From you: what you enter in the app, your answers, your logged sets and notes, what you say to Kalme and the photos you take. We do not buy consumer health data or get it from anyone else.
3. The consumer health data we share
- Your messages to Kalme, with the parts of your training information a reply needs (for example your goals, equipment and any restrictions or injuries you listed), and equipment photos.
- Everything in section 1 that we store, which is kept in our database.
We share it only with the service providers in section 4, who process it for us under contract. We never sell consumer health data.
4. Who we share it with
| Third party | What it does for us | What it receives |
|---|---|---|
| Anthropic, PBC | Its Claude model writes Kalme's replies and reads equipment from your photos, as our processor. It keeps each request for 30 days and may not train its models on it | Your messages, the training information a reply needs, and equipment photos |
| Google LLC (Google Cloud and Firebase) | Stores your account and training data and runs our servers, in the United States, as our processor | Everything in section 1 that we store |
| Microsoft Corporation (Microsoft 365, through GoDaddy) | Hosts our email, including hello@kalmefit.com and privacy@kalmefit.com, as our processor | Anything about your health that you choose to write to us by email |
Google's Gemini model is a backup for Kalme's replies. It is switched off, and while it is off none of your data goes to it. Squadora L.L.C. operates KalmeFit and shares consumer health data with no affiliate. Each processor above works under a binding contract that limits it to processing our customers' data on our instructions.
Location. We do not collect your location, and we do not use geofencing. (A future, optional gym feature is described in the Privacy Policy section 3.10; it is not live.)
5. Your rights and how to use them
You can:
- Confirm and see your data: find out whether we collect, share or sell your consumer health data, get a copy of it, and get a list of every third party we shared it with and how to contact them. In the app: Settings, export (a JSON file). Or write to us.
- Withdraw your consent: ask us to delete your screening answers on their own, or delete your account. After you withdraw, we stop collecting and sharing that data. Deleting the screening answers pauses the plan changes that depend on them until you answer the questions again.
- Delete your data: delete your account in the app. We delete your data from our live systems right away and from our backups within 98 days. Anthropic deletes its copies of requests within 30 days. We also delete an account, after an email warning, when no one has signed in to it for 24 months.
How to make a request: write to privacy@kalmefit.com from the email address on your account. You do not need to create an account to make a request. We answer within 45 days. If a request is complex we may extend that once, by up to 45 more days, and we will tell you why. If we cannot confirm the request comes from you, we will tell you.
Appeal: if we decline your request, you can appeal by replying to our answer with "Appeal" in the subject. We will answer the appeal in writing within 45 days and explain what we decided and why. If we deny the appeal, you can contact the Washington State Attorney General's Office, atg.wa.gov.
We will not treat you differently for using any of these rights.
6. Changes and contact
If we want to collect a new kind of consumer health data, or use it for a new purpose, we will tell you first and ask for your consent. KalmeFit is operated by Squadora L.L.C., a Minnesota limited liability company. Contact: hello@kalmefit.com. Requests about your data: privacy@kalmefit.com.