Version: November 1, 2026. Effective date: November 10, 2026
Scope and contact
This notice describes Cahier Digital Inc.'s processing of consumer health data under the Washington My Health My Data Act. It applies to Washington residents and other consumers whose health data is collected in Washington, as defined by that law. It addresses consumer health data, rather than unrelated website or account information.
Contact Privacy Officer — Cahier Digital Inc., support@calozi.app, 111-686 Grande Allée Est, Québec, QC G1R 2K5, Canada.
Categories and uses of health data
| Category | Purposes |
|---|---|
| Food, calories, nutrients, portions, water and saved meals | Record and display the tracking information you request and calculate totals. |
| Weight, height, calculation context, nutrition/weight goals, exercise and activity preferences | Calculate and personalize goals, activity energy and progress. |
| Meal images, progress photos, food/exercise descriptions, recordings, transcripts and AI results | Provide optional analysis/transcription, tracking and private recovery. |
| Apple Health steps/active energy and nutrition exports | Display device activity, optionally adjust the calorie budget and export nutrition with permission. Readings stay on-device through this integration. |
| Health-related support messages, food queries or inferences from submitted information | Answer your requests, deliver requested features, handle errors and protect the service. |
We collect only information needed for the described purposes and rely on your request for a feature or consent where required. Required health-data consent is separate from agreeing to general Terms. Declining optional AI does not prevent entitled manual logging.
Sources
Data comes from information you enter or upload; your device camera/microphone when you use a feature; Apple Health with permission; your interactions with tracking/search features; and calculations or AI estimates based on submitted information. Support information comes from messages and attachments you send us.
Disclosures and recipients
Relevant health data is processed by Supabase for account-linked tracking, database storage, private photos and backend delivery, and by OpenAI for the optional images, recordings and text needed for the AI request you authorize. These are service-provider/processor purposes. Staff handling support may access the health information you choose to send when necessary to resolve your request.
If you enable Apple Health exports, the selected meal nutrients are disclosed to Apple Health at your direction. Health information you choose to include in a support email is processed by our email provider, Google Workspace.
We do not sell consumer health data, disclose it for behavioral advertising, or share it with affiliates for their independent health-data purposes. We have no affiliate recipients to list for those purposes. Other disclosures occur only as permitted by the Act, such as required legal process or a qualifying business transfer with the required protections. New categories or purposes requiring consent will be disclosed before that consent is requested.
With separate, optional permission, PostHog processes limited app-use events on our behalf in the United States to understand feature usage and improve Calozi. An event can reveal use of a health-related screen or logging feature, although food/exercise descriptions, photos, audio, search text, barcode digits, weight and health values are excluded. A random analytics identifier is linked to your account only in our private database; the information is not completely anonymous. Sharing starts off and declining does not change membership access or price. In Privacy & data, you can withdraw permission; withdrawal or account deletion requests deletion of the prior PostHog identifier and its events. See the Privacy Policy for the precise event categories, retention, failed-connection behavior and asynchronous deletion process.
Your rights and consent choices
You may request confirmation of whether we collect, share or sell your health data; access to that data and the required list/contact details of third-party or affiliate recipients; withdrawal of consent to collection/sharing; or deletion. We do not unlawfully discriminate for exercising these rights.
Email support@calozi.app with subject Health data request, describe your request, and use your account email if possible. You do not need a subscription or a new account. We authenticate requests using reasonably necessary information. If authentication is not possible, we explain what additional information is needed. Do not send passwords, sign-in codes or unnecessary health details.
We complete requests without undue delay and within 45 days of receipt. Identity verification does not extend that deadline. Where reasonably necessary and permitted, we may extend once by up to 45 days and notify you of the reason within the original period. Requests are free at least twice annually; other charges or refusals are limited to circumstances allowed by law.
To withdraw consent, stop the relevant collection, export or AI feature and contact the Privacy Officer for assistance. Withdrawal affects future processing; it does not reverse processing already completed. For deletion, we remove the covered data and notify applicable recipients/processors as required. Deletion in archived or backup systems may be delayed only as the Act permits and no longer than six months after authenticating the request.
For optional AI, use Profile → Privacy & data → Withdraw AI consent in the app. This blocks new AI requests for your account across devices; requests already sent may finish. Re-enabling AI requires the consent prompt. This does not cancel your subscription or automatically delete past data. Other withdrawals and deletion requests can be sent to the Privacy Officer.
Appeals
If we refuse a request, email support@calozi.app with subject Health data appeal. We respond in writing within 45 days after receiving the appeal and explain our decision. If an appeal is denied, you may complain through the Washington Attorney General's complaint service.
Updates
We update this notice when relevant practices change and obtain consent before additional collection, sharing or purposes where required by the Act. Translated versions describe the same health-data practices.