1. Data we collect
Kalma only collects the data you give us when you use the app:
- Your name, your partner's name and your baby's name (or the names you're considering).
- The first day of your last period, to work out your pregnancy week and estimated due date.
- Your email address, to create your account and share it with your partner.
- What you log in the app: contractions, waters breaking, journal and photos, kicks, weight and blood pressure, appointments, questions for your care team and mood.
- If you use Kalma+: what you write in the chat and what Kalma remembers about you to support you (you can see and delete it in the app).
- Technical account data: app version, operating system (iOS or Android) and subscription status.
Much of this is health data. We only process it with your explicit consent (Article 9(2)(a) GDPR / UK GDPR), which you give when you sign up and, for the chat, when you activate Kalma+. You can withdraw it at any time by deleting your data or your account.
2. How we use it
- To work out your pregnancy week and show you content for each week.
- To save and sync your tracking across your devices and your partner's.
- If you activate Kalma+: to answer your messages using artificial intelligence and remember what matters so you don't have to repeat yourself.
- To send the notifications you have accepted. You can turn them off in the app.
- To manage your Kalma+ purchases.
- Only if you agree: to measure, statistically, which parts of the app are used so we can improve it. This never includes your health data or what you write.
We do not sell your data or use it for advertising.
3. Service providers that process your data for Kalma
- Supabase: hosts your account and data on servers in the European Union.
- OpenRouter and Anthropic (United States): only if you use the Kalma+ chat. They receive your messages and the pregnancy details needed to generate the AI reply. They do not use them to train their models.
- RevenueCat (United States), Apple and Google: manage purchases. They do not receive your health data.
- PostHog (servers in the European Union): usage statistics, only if you agree.
- Expo (United States): delivers notifications to your phone.
Transfers outside the European Union and the UK use the safeguards required by the GDPR and UK GDPR (standard contractual clauses or the EU-US Data Privacy Framework and its UK extension).
4. How long we keep it
For as long as you have an account. If you delete it, we erase your data, except what the law requires us to keep (for example, purchase billing records).
5. Kalma is not a medical app
6. Your rights
You can ask to access, correct, delete or port your data, to restrict or object to its processing, and to withdraw your consent, by writing to info@kalmaapp.pro. If you are in the US, you can also exercise the rights given by your state's privacy and consumer health data laws (for example, Washington's My Health My Data Act) using the same address; we will not discriminate against you for doing so. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD), the UK ICO, or your local data protection authority.
7. Children
Kalma is not intended for anyone under 16.
8. Changes to this policy
If we update this policy, we will publish the new version on this page with its update date.
9. How to delete your account and data
- In the app: My profile → Delete account.
- By email: write to info@kalmaapp.pro with the subject "Delete KALMA account".
We process requests within 30 days, after which deletion is permanent.
10. Contact
Velycio · info@kalmaapp.pro · Versión en español