Privacy Policy Member App (app.cal-culate.com)

This privacy policy applies to the use of the Calculate Member App, or web app, where we create personalized nutrition and health content for you.

1. Who is responsible?

The web app is made available to you through your gym. Calculate GmbH is responsible for processing your data within the app and for creating and implementing your personalized nutrition and health content. Your gym is not involved in this processing; it merely provides you with access.

Controller and contact person for all data protection inquiries:

Calculate GmbH, Waterloohain 7a, 22769 Hamburg, District Court of Hamburg, HRB 148089, Email: hello[a]cal-culate.com

Data Protection Officer: IITR Datenschutz GmbH, Dr. Sebastian Kraska, Marienplatz 2, 80331 Munich, Phone: +49 89 1891 7360, Email: email[a]iitr.de

2. What data we process

To create individual content for you, we process the information you provide yourself in the app:

  • Master data: Name, email address, date of birth
  • Body data: Height, weight, activity level
  • Health data: Information on medical conditions (e.g., irritable bowel syndrome, diabetes, PCOS, hypothyroidism), intolerances (e.g., lactose, gluten, histamine, fructose), and symptoms (e.g., menstrual issues, digestion, stress, sleep)
  • Preferences: Dietary style, foods to exclude, and similar settings
  • Images you upload to the recipe scanner

Health data are special categories of personal data under Art. 9 GDPR and enjoy special protection.

3. Purposes and legal bases

We process this data to provide you with individual nutrition plans, tips, and recommendations.

  • The legal basis for the performance of the contract is Art. 6 (1) (b) GDPR.
  • We process your health data exclusively based on your explicit consent in accordance with Art. 9 (2) (a) GDPR. You provide this consent separately during onboarding and can withdraw it at any time with future effect.

Please note: The processing of your health data is strictly necessary for the creation of your individual content. If you withdraw this consent, we will no longer be able to provide you with the service.

4. How your content is created

Your nutrition and health content is generated automatically by algorithms developed by us, based on the information you provide. No external AI services are involved in this process. No decision is made solely by automated means that has legal or similarly significant effects within the meaning of Article 22 of the GDPR. In the case of the recipe scanner, the image you upload is analysed using artificial intelligence (see point 8).

5. Notice regarding content and liability

The nutrition plans, tips, and recommendations provided in the app are general guidelines for nutrition and lifestyle and are intended for informational and orientation purposes only.

The content is not a substitute for medical, nutritional, or therapeutic advice, diagnosis, or treatment. It is not intended to detect, treat, cure, or prevent any disease and does not constitute a medical device. You should seek medical advice for health concerns, existing medical conditions, during pregnancy and breastfeeding, and before making significant changes to your diet.

6. Gamification and Leagues (Voluntary Participation)

Within the app, we offer an optional gamification system featuring a weekly league competition.

If you choose to participate, we process a display name (pseudonym) of your choice, the activity points (XP) you collect during the week, and your current league level. This information is displayed in a ranking list to other participating users in your weekly competition group (typically up to 20 people). Groups are formed across different users and studios; therefore, people outside your studio may also see your display name and score. Health data or other profile details are not displayed.

You choose your display name freely and can change it at any time in the settings. You are not required to use your real name and can remain pseudonymous throughout.

Participation is voluntary and requires your explicit consent (opt-in). The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect and end your participation in the settings; your display name and ranking entries will then be removed. Choosing not to participate will not result in any disadvantages regarding your use of the rest of the app.

The current weekly ranking is visible for the duration of the ongoing competition. We store your display and ranking data for as long as your account exists and you participate. Upon withdrawal, termination of participation, or deletion of your account, this data will be removed.

7. Storage Period

We store your data for as long as your user account exists. In the event of inactivity, we will delete your personal data no later than 12 months after your last activity, provided there are no statutory retention obligations to the contrary.

8. Recipients and Service Providers

To provide the app, we use carefully selected service providers who process your data exclusively on our behalf and according to our instructions (data processing). These include:

  • Hosting and storage in the Frankfurt region (Amazon Web Services)
  • AI-powered fault analysis and maintenance, using only pseudonymised data (Anthropic)
  • Image recognition in the recipe scanner (OpenAI)

We have data processing agreements in place with these service providers. During error analysis, data is pseudonymised before transmission and reduced to the minimum necessary. When using the recipe scanner, the image you upload and any free-text you enter are transmitted; please do not enter any information there that is not required for recognition. The service providers do not use the data to train their models.

If personal data is transferred to a country outside the EU or the EEA (a third country, particularly the USA), this is done on the basis of appropriate safeguards in accordance with Art. 44 et seq. GDPR, specifically the European Commission's standard contractual clauses, supplemented by technical protective measures such as pseudonymization.

9. Your Rights

You have the right to access, rectify, erase, restrict the processing of, and port your data, as well as the right to object and to withdraw your consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority. Please use the contact details provided above for all inquiries.

10. Data Security

Data is transmitted via encrypted connection (TLS) and stored in encrypted form in the Frankfurt region. Access is restricted to a small, authorized group of individuals and is logged.