Privacy Policy

Last updated: September 9, 2026

Kalme ("we", "us") is an iOS app operated by Crolab, a French company whose full details are on the Legal Notice page. Crolab is the data controller. This policy explains what the app collects, why, where it goes, and what you can ask us to do about it.

What we collect

• Nothing that identifies you, to start with. You can take the assessment and follow the program without giving an email address. The app opens an anonymous account so your progress is saved and survives a phone change.
• Your first name, only what you type on the setup screen, so the app can address you. You can put anything you like there.
• Your assessment answers: the questionnaire responses, the resulting score, how long you have had tinnitus, how it sounds to you, which ear, and what you think set it off. This is what makes the program yours rather than generic.
• Your daily check-ins: how much your tinnitus bothered you, how you slept, the sessions you completed, and the sound settings you chose.
• A user id, generated by our servers and by our subscription provider, so your data comes back to your device.
• Your email address, only if you choose to create an account, either directly or through Sign in with Apple. If you use Apple's private relay, we only ever see the relay address.
• Purchase history: whether you have an active subscription, and when it renews. Payments are handled entirely by Apple and managed through RevenueCat. We never see or store your card details.
• Product interaction: aggregate counts that tell us which screens are used. These are not linked to your identity and are not used for tracking.
• Crash logs: anonymous technical reports that tell us the app broke, and on which screen.

The microphone

Kalme asks for the microphone for one thing only: a few-second reading of how loud the room around you is, so the app can suggest a sensible volume for your background sound. Nothing is recorded, nothing is stored, and nothing leaves your phone. The reading happens live and the result is a number on your screen. If you refuse the permission, the rest of the app works exactly the same.

The chat, and Anthropic

The app includes an AI companion called "Talk to the cloud". It is an AI companion, not a doctor, and a banner in the app says so.

• Your messages are sent to Anthropic, the company behind the Claude models, through our own server. That is the only place they go.
• Before your first message, the app asks you to choose. "Personalize" sends limited program context along with your message: your first name, your day in the program, your score and profile, your sound settings, your recent check-ins, and the takeaways of the lessons you finished. "Without my data" sends your messages, your language and your day in the program, and nothing else.
• You are asked explicitly, you can change your mind, and "Start over" clears the conversation.
• Anthropic processes the request to produce the answer. Your conversation is not used to train models.
• The chat is optional. The program, the sounds and the check-ins all work without ever opening it.

What we never do

• We never sell or rent your data. There is no ad network in this app and no data broker gets any of it.
• We never share what you log with an employer, an insurer, or any third party beyond the service providers listed below.
• We never use your health data to train models.
• We do not track you across other apps or websites. Kalme does not ask for the tracking permission because it has nothing to ask it for.
• We never post anything anywhere on your behalf. Kalme has no social features by design.

Why we are allowed to hold it (legal basis)

Two grounds, under the GDPR:

• Performing our contract with you (Article 6(1)(b)), for your account, your subscription and the delivery of the program.
• Your explicit consent (Article 9(2)(a)), for the health information. Your assessment score, your check-ins and what you tell the chat are special category data, and the law requires your explicit permission before we may process them. You give it by choosing to answer the questionnaire, to log your days, and to turn the chat on, and you can withdraw it at any time by deleting your account.

Withdrawing consent does not undo processing that already took place, and it does not affect our legal obligation to keep proof of purchase.

Permissions the app asks for

• Notifications, only to remind you of your daily session and your wind-down, at the time you pick. These reminders are scheduled on your phone: no reminder travels through a server.
• Microphone, only for the ambient noise reading described above.

That is the whole list. Kalme does not use your camera, your photo library, your contacts or your location, and it is not connected to Apple Health.

Who processes data for us

• Supabase: your account, your profile, your check-ins and your program history.
• Apple: payments, Sign in with Apple, app distribution.
• RevenueCat: subscription status management.
• Anthropic: the answers in the chat, when you use it and only with the context you agreed to.
• PostHog: aggregate product analytics, not linked to your identity.
• Sentry: anonymous crash reports.

Some of these are located outside the European Union. Transfers rely on the European Commission's Standard Contractual Clauses.

How long we keep things

• Your account, your profile and your history: for as long as your account exists, because the whole point is to show you your own change over months.
• Your conversations with the chat: the most recent messages, on your phone, until you tap "Start over" or delete your account.
• Crash logs and product analytics: a rolling window of up to 90 days.
• Proof of purchase: as long as French accounting law requires.

Security

Traffic between the app and our servers is encrypted in transit (HTTPS). Your session token is held in the iOS Keychain, not in plain storage. On the server, row-level security means an account can only ever read and write its own rows: your history is not reachable from another account. The key that talks to Anthropic lives on our server, never in the app.

Deleting your account

You can delete your account and everything attached to it from inside the app, in Settings, Delete account. It removes your profile, your assessment, your check-ins, your program history and your conversations, on our servers and on your phone. It is immediate and it is not reversible.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, erase it, or restrict how we use it, and you can object to processing. Write to support@kalme.app and we will answer within 30 days. If you are not satisfied, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Children

Kalme is made for adults. It is not directed at children, we do not knowingly collect data from anyone under 16, and the App Store rating reflects that. If you believe a child has given us information, write to us and we will remove it.

Not a medical record

What you log in Kalme is a personal diary, not a medical record, and we are not a healthcare provider. Kalme is not a medical device and does not replace a doctor. See the Legal Notice. If you want to show your history to an ENT, that is entirely your choice and your copy.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell you in the app.

Contact

Questions about any of this: support@kalme.app.