Privacy Policy

Last updated: 30 August 2026

KalTrax Ltd ("KalTrax", "we", "us") provides a fitness and nutrition tracking app. This policy explains what data we collect, why, and how you can control it. We're a UK company and this policy is written to meet UK GDPR requirements.

The short version

KalTrax works fully offline with no account. If you never sign in, nothing about you leaves your device. Creating an account is optional and only exists to back up and sync your data across devices — and even then, only you can read it.

What we collect

If you use KalTrax without signing in, we collect nothing — your logs live only in your browser's local storage.

If you create an account, we store:

Your email address (used to sign in and for account-related emails, e.g. password resets)
Body profile details you enter (such as height, weight, age, sex, activity level) used to run the TDEE calculator
Food and day logs you record
Cardio and workout session logs

We don't collect location data, contacts, device identifiers, or any information you haven't directly entered into the app.

Why we collect it

Solely to provide the service you've asked for: keeping your logs backed up and synced if you use KalTrax on more than one device, and calculating the nutrition/fitness figures the app displays back to you.

How it's stored

Account data is stored with our database provider, Supabase. All traffic between your device and our servers is encrypted in transit (HTTPS/TLS), and the underlying database is encrypted at rest. Access controls (row-level security) are configured so that your account can only ever read or write its own data — not other users' data, and not us by default either, outside of what's needed to operate the service.

Who we share it with

We don't sell your data or share it with advertisers. Supabase acts as our data processor purely to host the database — they don't use your data for their own purposes. We don't use any third-party analytics or tracking scripts in the app.

How long we keep it

For as long as your account is active. If you delete your account or ask us to, we'll delete your data within 30 days.

Your rights

Under UK GDPR, you can ask us to:

Give you a copy of the data we hold about you
Correct anything inaccurate
Delete your account and data
Export your data (you can also do this yourself from within the app's data transfer page)

To exercise any of these, email us — see Contact below.

Age

KalTrax is intended for users aged 16 and over. We don't knowingly collect data from anyone younger.

Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, notify account holders by email.

Contact

Questions about this policy or your data — email us directly:

kaltrax.company@gmail.com