Privacy Policy

Effective Date: November 29, 2025

1. Who We Are

1.1 This Privacy Policy explains how CalQuant (the "Service") collects, uses, and protects your personal data.

1.2 The Service is operated by:

1.2.1 Operator / data controller: Harry Dransfield trading as "CalQuant"

1.2.2 Legal form: Sole trader established in England

1.2.3 Website / app domain: https://calquant.app/

1.2.4 Registered / business address: [[BUSINESS POSTAL ADDRESS TO BE CONFIRMED – e.g. virtual office or business address in England]]

1.2.5 Contact email for privacy matters: support@calquant.app

1.3 For the purposes of UK data protection law (UK GDPR and Data Protection Act 2018) and, where applicable, the EU GDPR, CalQuant is the "data controller" for personal data processed through the website and any related apps (including future iOS/Android apps). This means we decide how and why your personal data is processed.

1.4 Our users are primarily in the UK, but we may also have users in the EU and US.

2. What This Policy Covers

2.1 This Privacy Policy describes: What personal data we collect when you use CalQuant; how and why we use your personal data; the legal bases we rely on (especially under UK/EU data protection laws); how we use cookies and similar technologies (including Google Analytics and Google Ads); who we share your data with and why; how long we keep your data; how we protect your data; your rights, particularly if you are in the UK or EU.

2.2 This Policy applies to: The CalQuant website (https://calquant.app/); and any future iOS/Android apps or related interfaces that we operate.

2.3 It does not apply to third-party websites or services that we do not control, even if we link to them from our Service.

3. The Data We Collect

3.1 We only collect personal data that we need to provide and improve the Service. This section explains what we collect and when.

3.2 Registration and Account Data

3.2.1 Email and password registration: If you register with your email and a password, we collect: Full name; email address; password (stored only as an encrypted/hashed value by Firebase Authentication - we never see your raw password).

3.2.2 Google sign-in: If you create an account or log in using Google sign-in, we receive: Full name (as provided by Google); email address; Google-issued identifiers needed for authentication; user profile photo (this is available in the database but is not displayed or otherwise used within the CalQuant interface).

3.2.3 In both cases (email/password and Google sign-in): Your account data is linked to a Firebase UID (a unique identifier issued by Firebase). Passwords are not stored in plain text and are handled securely by Firebase Authentication. The same types of account and log-in data are associated with your user profile.

3.3 Service Usage and Logged Data (for Logged-in Users)

Important: Only data from logged-in users is stored in our database. Any inputs or calculations you make while not logged in are not sent to our database and are not stored as personal records.

3.3.1 Activity data: We store data about how you use CalQuant's activity-related features, including: Hours or time spent in different activities, for daily views; hours or time spent in different activities, for weekly views; selected activity state on the "basic" view (for example, which activity or mode you have chosen); Thermic Effect of Food (TEF) selection (such as your chosen TEF setting), even though we do not log detailed food entries.

3.3.2 Body measurements: We store the body measurements you choose to enter, such as: Weight; other body measurements (e.g. circumferences, body fat percentage), to the extent that these are supported by the app. We use this data to: Show you your personal history and progress over time; generate charts, graphs, and summaries; help you visualise activity and body trends for your own self-tracking purposes.

3.4 Technical and Usage Data (Analytics / Cookies)

3.4.1 When you use the Service, we use tools such as Google Analytics and Google Ads that collect technical and usage information, typically via cookies and similar technologies. This may include: IP address (which may be truncated or anonymised, depending on configuration); device type, browser type, and operating system; referrer URLs (where you came from before visiting CalQuant); pages viewed, time spent on each page, and click paths; approximate location (for example, city or region); online identifiers (such as cookies, Google Analytics IDs, Google Ads cookies or IDs, and other unique identifiers).

3.4.2 This data helps us understand how the Service is used, improve performance, and measure the effectiveness of our advertising campaigns.

3.4.3 For UK/EU users, non-essential cookies (including analytics and advertising cookies) are only used with your consent, as described in Section 6 below and in our Cookie Policy.

4. Data We Do Not Collect or Intentionally Process

4.1 No food logs / detailed calorie-intake entries (at this stage): CalQuant currently does not collect detailed food logs or per-meal calorie-intake entries.

4.2 No storage of non-logged-in user inputs: Inputs you make when using the Service without being logged in are not sent to our database as personal records and are not stored in a way that identifies you.

4.3 No special categories of data beyond what you voluntarily provide: We do not intentionally collect special category data (such as health data) beyond the activity and body measurements that you choose to input. To the extent that such data is considered health-related, it is provided by you voluntarily for self-tracking purposes only and is used to provide the Service features you choose.

5. How We Use Your Data (Purposes)

5.1 We use your personal data for the following purposes:

5.1.1 To create and manage your account: Setting up your user account; managing log-in credentials and authentication (including via Google sign-in).

5.1.2 To provide the core Service: Storing and displaying your activity logs and body measurements; calculating and displaying summaries, trends, and progress visualisations; remembering your preferences and settings (including TEF selection).

5.1.3 To operate, maintain, and improve the Service: Monitoring usage (for example, which features are used most); understanding and improving performance and user experience; fixing bugs and troubleshooting.

5.1.4 To run analytics: Using Google Analytics and similar tools to understand how users interact with CalQuant; generating aggregated statistics and usage reports.

5.1.5 To run and measure advertising: Running Google Ads campaigns; measuring ad performance and conversions; where enabled, using remarketing/retargeting features to show relevant ads to people who have previously visited our site or similar audiences.

5.1.6 To communicate with you: Responding to your enquiries or support requests sent to support@calquant.app; providing important service-related notices (for example, material changes to this Policy or to the Terms of Service).

5.1.7 To prevent fraud and ensure security: Detecting and preventing abuse, misuse, or security incidents; protecting the Service and its users.

5.1.8 To comply with legal obligations and enforce our rights: Meeting our legal and regulatory responsibilities; enforcing the Terms of Service and other agreements; handling disputes and legal claims.

5.2 Marketing communications: At present, CalQuant does not send regular marketing emails or newsletters. If we introduce such communications in the future, we will obtain your consent where required and provide you with clear options to opt in or opt out.

6. Legal Bases for Processing (UK/EU Users)

6.1 If you are in the UK or EU, data protection laws require us to explain our legal bases for processing your personal data. We rely on the following:

6.1.1 Performance of a Contract: We process your personal data where it is necessary to perform our contract with you, or to take steps at your request before entering into a contract. This includes: Creating and managing your CalQuant account; authenticating you (including via Firebase Authentication and Google sign-in); providing the core features of the Service: activity logging, body measurement tracking, and progress visualisations.

6.1.2 Legitimate Interests: We may process your data where it is necessary for our legitimate interests, provided these are not overridden by your rights and interests. These interests include: Operating, maintaining, and improving the Service; performing analytics to understand usage patterns and feature performance; ensuring security and preventing abuse or misuse of the Service; running basic advertising and measuring ad performance (for example, non-personalised or contextual advertising where appropriate). Where we rely on legitimate interests, you have the right to object to this processing (see Section 11).

6.1.3 Consent: In certain cases we rely on your consent: Cookies and similar technologies: For non-essential cookies (especially analytics and advertising cookies, including Google Analytics and Google Ads) for users in the UK/EU. Health-related data: To the extent that activity and body measurement data is considered health data, we process it based on your explicit choice to enter this data and use the Service for self-tracking. Marketing communications (if introduced in the future): We will obtain your consent where required before sending marketing emails or similar communications.

6.1.4 You may withdraw your consent at any time, for example by: Changing your cookie preferences in our cookie banner or preference centre; adjusting your browser settings to block or delete cookies; opting out of marketing emails (if we introduce them, we will include an unsubscribe link); deleting your account. Withdrawing consent does not affect the lawfulness of any processing that took place before you withdrew it.

7. Cookies and Similar Technologies (including Google Analytics and Google Ads)

7.1 How We Use Cookies: CalQuant uses cookies and similar technologies (such as local storage and pixels) for the following purposes: Essential / strictly necessary cookies: To keep you logged in; to provide security and prevent fraud; to enable basic site features and functionality. Analytics cookies (Google Analytics): To understand how users interact with the Service (e.g. which pages are viewed, how long users stay, and which features are used); to help us improve usability and performance. Advertising and remarketing cookies (Google Ads): To run and optimise advertising campaigns; to measure ad performance and conversions; to show ads to users or similar audiences based on their interactions with our site (remarketing/retargeting), where enabled.

7.2 Consent for UK/EU Users: If you are in the UK or EU: Non-essential cookies (including analytics and advertising cookies) are only used with your consent. You can provide or withhold consent via our cookie banner or cookie preference manager when you first visit the site and at any time afterwards. You can change your preferences or withdraw consent at any time. Please see our separate Cookie Policy for more detail: Cookie Policy URL: https://calquant.app/cookies

7.3 Managing Cookies: You can also manage cookies in your browser settings. Most browsers allow you to: Block all cookies; block cookies from specific sites; delete cookies when you close your browser. If you block or delete cookies, some features of the Service may not work properly.

7.4 Google’s Tools and Your Choices: Google provides tools and settings to give you more control over how your data is used: Google Analytics opt-out browser add-on; Google Ads settings and controls for personalised ads. We encourage you to review Google’s own privacy and cookie information for more details about how Google processes data. [[ADD SPECIFIC GOOGLE ANALYTICS / GOOGLE ADS CONFIGURATION DETAILS IF NEEDED, SUCH AS IP ANONYMISATION SETTINGS]]

8. How We Share Your Data

8.1 We do not sell your personal data.

8.2 We may share your personal data with the following categories of recipients, but only as necessary and subject to appropriate safeguards:

8.2.1 Service Providers / Data Processors: We use third-party service providers to help us operate the Service. These include, for example: Firebase / Google Cloud – for hosting, authentication, and database storage; Google Analytics – for analytics; Google Ads – for advertising and ad measurement; other operational partners – for email delivery, error monitoring, logging, and similar services. These providers act as data processors on our behalf where they process personal data only as instructed by us and subject to contractual obligations to protect your data.

8.2.2 Google as Independent Controller: For some services, such as Google Analytics and Google Ads, Google may also act as a separate, independent data controller for its own purposes (for example, to improve its own services). In those cases: Google’s own privacy policies apply to its independent use of data. We encourage you to review Google’s privacy documentation for more detail on how Google handles your data.

8.2.3 Legal and Safety Reasons: We may disclose your personal data where required by law or where we reasonably believe it is necessary to: Comply with a legal obligation or respond to lawful requests from public authorities; protect the rights, property, or safety of CalQuant, our users, or others; enforce our Terms of Service or other agreements or policies.

9. International Data Transfers

9.1 Our main infrastructure and service providers may be located outside the UK and the European Economic Area (EEA). This includes where: Google (Firebase, Google Analytics, Google Ads) hosts or processes data on servers in other countries (such as the US or other regions); other service providers maintain infrastructure in multiple jurisdictions.

9.2 Where personal data is transferred outside the UK or EEA, we will ensure that appropriate measures are in place to protect your data, such as: Standard Contractual Clauses (SCCs) approved by the European Commission and/or UK authorities; other lawful transfer mechanisms that may become available under data protection laws. These safeguards are designed to ensure that your personal data remains protected in line with UK/EU data protection standards, even when processed in countries that may have different data protection laws.

10. How Long We Keep Your Data (Data Retention)

10.1 We keep personal data only for as long as necessary for the purposes described in this Policy, including to provide the Service and to comply with legal obligations. Below is a more detailed explanation.

10.2 General Rule: We keep your personal data for as long as you have an active account and we need the data to provide the Service.

10.3 Account & Profile Data (Name, Email, UID, Authentication Information): Retained while your account is active. If you delete your account, we will delete or anonymise your personal data from active systems within 90 days of your deletion request, unless we need to keep certain data longer to comply with legal obligations or resolve disputes.

10.4 Activity & Body Measurement Logs: Retained while your account is active, so you can see your history and trends. After account deletion, we will delete or anonymise your activity and body measurement data within 90 days. We may retain aggregated or anonymised data that no longer identifies individual users indefinitely for analytics, research, and service improvement.

10.5 Inactive Accounts: If you do not log in to or otherwise use your account for 3 years, we may treat your account as inactive. We may then delete or anonymise your associated personal data within 90 days after that 3-year period, subject to any legal obligations to retain data longer.

10.6 Backups: Personal data may continue to exist in encrypted backup copies after it is removed from active systems. Backup data will be automatically overwritten and removed in the course of normal backup cycles and will not be retained for more than 12 months after the original data is removed from active systems.

10.7 Support Emails and Logs: Emails sent to support@calquant.app, and related support or error logs, may be kept for up to 3 years from the date of the last relevant communication or log entry, unless a longer period is required for legal, accounting, or security reasons.

10.8 Explanation and Exceptions: We may keep some information for a longer period where necessary to: Comply with legal or regulatory obligations; resolve disputes or enforce agreements; protect our rights and the rights of our users. Once data is truly anonymised so that it can no longer be linked to an identified or identifiable individual, we may keep it without a specific time limit.

11. How We Keep Your Data Secure

11.1 We take reasonable technical and organisational measures to protect your personal data. These include: Using Firebase and Google Cloud infrastructure, which is designed with industry-standard security practices; using encryption in transit (HTTPS/TLS) when data is sent between your device and our servers; relying on Firebase Authentication for secure password handling, which uses hashing and encryption technologies; limiting access to personal data to those personnel and providers who need it to operate the Service and who are bound by confidentiality obligations.

11.2 However, no online service can guarantee absolute security. While we cannot eliminate all risks, we aim to reduce them as much as reasonably possible.

11.3 If you believe that your account or interaction with us is no longer secure (for example, if you suspect a compromise of your password), please contact us immediately at support@calquant.app.

12. Your Rights (UK/EU Users)

12.1 If you are in the UK or EU, you have certain rights in relation to your personal data under the UK GDPR/EU GDPR. These include: Right of access - you can ask for confirmation of whether we process your personal data and request a copy of that data. Right to rectification - you can ask us to correct or update inaccurate or incomplete personal data. Right to erasure ("right to be forgotten") - you can ask us to delete your personal data in certain circumstances (for example, where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis). Right to restriction of processing - you can ask us to restrict the processing of your personal data in certain situations (for example, while we investigate an accuracy issue). Right to data portability - you can ask us to provide your personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller where technically feasible. Right to object - you can object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. You can also object at any time to processing of your data for direct marketing (including profiling for marketing purposes). Right to withdraw consent - where we rely on your consent (for example, for certain cookies, health-related data processing, or future marketing communications), you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before you withdrew consent.

12.2 How to Exercise Your Rights: To exercise any of these rights, please contact us at: Email: support@calquant.app. To help us respond, please: Provide enough information to identify your account (for example, the email address you used to register). Explain which right you wish to exercise and what you are requesting. We may need to request additional information to verify your identity before fulfilling your request, to protect your privacy and security.

12.3 Complaints to a Supervisory Authority: If you are not satisfied with how we handle your personal data, you also have the right to lodge a complaint with a data protection authority. In the UK: Information Commissioner’s Office (ICO) - see the ICO website for contact details and guidance. In the EU: You can contact your local supervisory authority in the country where you live, work, or believe a breach has occurred. We would, however, appreciate the chance to deal with your concerns before you approach a regulator, so please consider contacting us first.

13. Children and Minors

13.1 The Service is intended for users aged 18 and over.

13.2 We do not knowingly collect personal data from anyone under 18.

13.3 If we learn that we have collected personal data from a person under 18, we will take reasonable steps to delete that data and, where appropriate, close the account.

13.4 If you believe that a child under 18 has provided personal data to us, please contact us at support@calquant.app.

14. Third-Party Links

14.1 The Service may contain links to third-party websites or services that we do not operate or control.

14.2 We are not responsible for the privacy practices or content of these third parties.

14.3 When you follow a link to a third-party site or service, the collection and use of your data is governed by that third party’s own privacy policy and terms.

14.4 We encourage you to review the privacy policies of any third-party websites or services you visit or use.

15. Changes to This Privacy Policy

15.1 We may update this Privacy Policy from time to time, for example to reflect: Changes to the Service; changes in applicable laws or regulatory guidance; changes in our data processing practices.

15.2 When we make changes: We will update the "Last updated" date at the top of this Privacy Policy. For significant changes, we may provide additional notice, such as via email or an in-Service notification.

15.3 We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

16. How to Contact Us

16.1 If you have any questions or concerns about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us at: Email: support@calquant.app; Postal address: [[BUSINESS POSTAL ADDRESS TO BE CONFIRMED – e.g. virtual office or business address in England]].

16.2 We will do our best to respond to your request or query in a timely and appropriate manner.