This policy explains, in plain language, what information we collect on the CalKal website and in the app, why, who we share it with, and what rights you have.
Who we are and how to reach us
The CalKal website and app are operated by SZ GOLDEN LTD (אס זד גולדן בע״מ), Israeli company number 516369329, 15 Bialik St, Kiryat Ono 5520315, Israel ("we", "us"). We are the database owner under Israel's Privacy Protection Law, 5741-1981, and the data controller under the GDPR where it applies.
For any privacy question, write to us at hello@calkal.app.
What this policy covers
- The website at calkal.app, including the waitlist and the contact form.
- The CalKal app for iPhone and Android, once it launches.
It does not cover other companies' sites and services that we link to, such as the App Store and Google Play. They have their own privacy policies.
What we collect on the website
The waitlist
When you join the waitlist we store your email address, the site language you signed up in, where on the site you signed up (for example the pop-up or the bottom of the page), and when you signed up. Joining is something you choose to do, and it does not depend on accepting cookies.
The contact form
When you write to us through the form we receive your name, email address, subject and message, and we use them to answer you.
Cookies and browser storage
- A necessary cookie named
calkal_consentstores your cookie choice (for 12 months). - Local storage (
calkal-waitlist-modal) remembers that you closed the waitlist window or joined, so it doesn't pop up again. - Analytics cookies from Google Analytics 4 are set only if you allow them. Until you do, the Google Analytics script is not loaded at all. You can change your choice at any time from the "Cookie settings" link at the bottom of every page.
Technical information
Like any website, our hosting servers log basic technical information, such as IP address, browser type and request time, for security and operations.
What the app will collect
The app has not launched yet. Once it does, it will process the information you enter in order to provide the service, for example:
- Account details, such as your email address.
- Details you enter during setup: date of birth, sex, height, weight, goal weight, step goal and, if you choose to give it, your first name. We use them to calculate your daily calorie and macro targets.
- Photos of meals you take, to identify the items and estimate amounts and calories.
- Your food log: foods, amounts and nutrition values.
- Weight, activity and progress over time.
Some of this is information about your health and eating habits. That is sensitive information under Israel's Privacy Protection Law (including Amendment 13) and under the GDPR. We process it only to provide the service, only with your consent, and we protect it with a high level of security. We do not sell personal information.
Why we use your information
- To email you about the app's launch, if you joined the waitlist.
- To answer your messages.
- To run the app: analyze meal photos, keep your log, show your progress and calculate targets.
- To understand how the website is used and improve it, only if you allowed analytics cookies.
- To keep the website and app secure and prevent misuse.
- To meet our legal obligations.
Legal basis and consent
Under Israeli law, we collect and use information with your consent, which you give when you join the waitlist, send a message, allow analytics cookies or use the app. You are not legally required to provide information, but without some of it we cannot provide the service (for example, without an email address we cannot update you).
For visitors from the European Union, our legal bases under the GDPR are:
- Consent (Art. 6(1)(a)) for the waitlist and analytics, and explicit consent (Art. 9(2)(a)) for health information in the app.
- Performance of a contract (Art. 6(1)(b)) to provide the app you asked for.
- Legitimate interests (Art. 6(1)(f)) to answer your messages and keep things secure.
You can withdraw your consent at any time. Withdrawing does not affect anything we did lawfully before.
Who we share information with
We do not sell personal information or share it for advertising. We use service providers who process information on our behalf and only on our instructions:
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting and its API servers, and routing email sent to our contact address | USA and other data centers |
| Brevo (Sendinblue SAS) | Waitlist management and sending email | France (EU) |
| Google LLC (Google Analytics 4) | Website usage statistics, only with consent | USA |
| Supabase, Inc. | The app's servers and database: your account, log and targets | Singapore (AWS servers) |
| Google LLC (Gemini API) | Analyzing meal photos. Your user ID and profile details are not sent to it | USA and other Google data centers |
| Resend, Inc. | Emailing the app's one-time sign-in code | USA |
We may also disclose information if the law or a competent authority requires it, or if it is needed to protect our rights or the rights of others. If the company or its business is transferred to another entity, the information will be transferred subject to this policy.
How long we keep information
- Waitlist: until you unsubscribe, or 12 months after the app launches, whichever comes first.
- Messages: up to 24 months after we finish handling them.
- Google Analytics data: up to 14 months, per the GA4 retention setting.
- Consent cookie: 12 months.
- App data: while your account is active and until you ask us to delete it, subject to any legal duty to keep it.
Security
We take reasonable measures to protect information, in line with Israel's Privacy Protection (Data Security) Regulations, 5777-2017: traffic to the site is encrypted (HTTPS), our provider keys are kept on the server only, and access is limited to people who need it. No method is completely secure, so we cannot guarantee absolute protection. If a serious security incident happens, we will report it as the law requires.
Transfers outside Israel
Some of our providers operate outside Israel, mainly in the USA and the EU. Transfers follow Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. For visitors from the EU: Israel benefits from a European Commission adequacy decision, and transfers to the USA rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses (SCCs).
Your rights
Under Israel's Privacy Protection Law (including Amendment 13, in force since August 2025) you have the right to:
- See the information we hold about you.
- Ask us to correct or delete information that is wrong, incomplete, unclear or out of date.
- Be removed from a mailing list and stop receiving our emails.
- Withdraw any consent you gave.
If you are in the EU, the GDPR also gives you the right of access, rectification, erasure, restriction, data portability and objection.
To use any of these rights, write to us at hello@calkal.app. We may ask for details to confirm the information is yours. We will answer within 30 days. If you are not happy with how we handled it, you can contact Israel's Privacy Protection Authority, or the data protection authority in your EU country.
Children
The website and app are meant for people aged 13 and over, and the app does not let anyone sign up with a date of birth under that age. We do not knowingly collect information about children under 13. If you learn that such a child has given us information, write to us and we will delete it.
Emails
We only email you if you joined the waitlist, and only about the CalKal launch. Every email has an unsubscribe link, and you can also ask to be removed by email. This complies with section 30A of Israel's Communications (Telecommunications and Broadcasting) Law.
Changes to this policy
We may update this policy from time to time, for example when the app launches. The date at the top of the page shows when it last changed. We will announce material changes on the site, and by email if we have your address.
Contact
SZ GOLDEN LTD, company no. 516369329
15 Bialik St, Kiryat Ono 5520315, Israel
Email: hello@calkal.app