Privacy Policy — Kalorika AI Mobile Application

Effective date: January 1, 2025 · Last updated: January 1, 2025

This is an English translation provided for convenience. In case of any discrepancy, the Russian version prevails.

1. General Provisions

This Privacy Policy (the "Policy") defines the procedure for processing and protecting personal data of users of the Kalorika AI mobile application (the "App") and visitors of the kalorica.ru website.

Data controller (operator): SciMatch LLC (OOO «Саймэтч», Russian Federation). Contact email: kalorica@yandex.ru

The Policy is developed in accordance with Russian Federal Law No. 152-FZ "On Personal Data" and related regulations. Using the App constitutes acceptance of this Policy.

2. Key Terms

Personal data — any information relating directly or indirectly to an identified or identifiable natural person. Processing — any operation with personal data, including collection, recording, organisation, storage, refinement, retrieval, use, transfer, anonymisation, blocking, deletion and destruction. User — a natural person using the App.

3. Categories of Personal Data Processed

3.1. Data provided by the User:

Username (nickname), email address, phone number (where necessary)
Gender, age/date of birth, height and weight, physical activity level
Weight goals, diet information, food preferences and restrictions (allergies, diets)
Food photos (when using the recognition feature)

3.2. Data collected automatically:

IP address, device information (model, OS, version), unique device identifier
Push tokens, location data (with explicit consent), access date and time
Feature usage statistics, interface language, time zone

3.3. Data from third-party sources:

Public social network information (when signing in via social networks), VK ID / Yandex ID identifiers
Payment system data (transaction tokens; no access to bank details)

4. Purposes of Processing

Providing access to the App's functionality; user identification and authorisation
Personalising nutrition recommendations; calculating calories and nutritional values
Tracking user goal progress; providing access to paid subscription features
Technical support; informing about updates; compliance with Russian law
With separate consent: marketing communications, surveys, product improvement

5. Legal Grounds

Processing is based on: user consent (personalisation, marketing, push notifications); performance of a contract (core functionality, support, subscription payments); legitimate interests of the operator (security, fraud prevention, anonymised analytics); and compliance with legal obligations under Russian law.

6. Processing Terms and Data Localisation

Personal data of Russian citizens is stored and processed exclusively on servers physically located in the Russian Federation (Article 18 of Law 152-FZ). Hosting provider: Amvera.io (data centre in the Russian Federation).

Data is stored for the duration of the user account; after account deletion — for the period required by Russian law (at least 3 years for financial records); for marketing purposes — until consent is withdrawn.

7. Data Sharing with Third Parties

RuStore — payment processing and subscription management (user ID, payment amount, transaction date)
VK and Yandex — when signing in via their services (ID, email, username)
Push notification services — notification delivery (push token, device ID)
Hosting providers — data storage on servers in the Russian Federation
Law enforcement — upon official requests under Russian law

Third parties are bound by confidentiality obligations; data is shared only to the extent necessary to provide the services.

8. Data Protection

The operator applies organisational and technical safeguards: SSL/TLS encryption, password hashing, regular backups, access restrictions, anti-malware software, and anonymisation of data used for analytics. In case of a breach, the operator will promptly remediate and inform affected users.

9. User Rights

To obtain information about the processing of their personal data
To request rectification, blocking or destruction of personal data
To withdraw consent to processing

To exercise these rights, contact the operator at kalorica@yandex.ru or via the in-app feedback form. Response time — no more than 30 days.

10. Cookies and Analytics

The App and website use technical cookies (required for correct operation), analytics cookies (feature usage analysis) and personalisation cookies (user settings). Cookies can be disabled in device settings; this may affect the availability of some features.

11. Minors

The App is not intended for persons under 14. Users aged 14–18 require parental or legal guardian consent. Accounts found to belong to persons under 14 are blocked.

12. Data Modification and Deletion

Users can edit their personal data in the profile settings and delete their account in the App settings. Upon account deletion, personal data is erased within 30 days; some data may be retained in anonymised form for statistics, and data subject to statutory retention is kept for the required period.

13. Liability

The operator is liable for personal data processing violations under Russian law and is not liable for damages caused by unlawful use of personal data by third parties.

14. Changes to this Policy

The operator may amend this Policy; the new version takes effect upon publication. Material changes are accompanied by user notification. Continued use of the App after changes constitutes acceptance.

15. Contacts

Operator: SciMatch LLC (OOO «Саймэтч», Russian Federation)
Email: kalorica@yandex.ru (support hours: Mon–Fri, 9:00–18:00 MSK)

This Privacy Policy is effective as of January 1, 2025.