Privacy Policy

Kalme (“we”, “us”) is an iOS app and a website (kalme.app) operated by Crolab, a French company whose full details are on the Legal Notice page. Crolab is the data controller. This policy explains what we collect, why, where it goes, and what you can ask us to do about it.

What we collect

• On the website, before you give us anything, anonymous usage of the questionnaire (which screen was seen, for how long, the answers you pick) tied to a random session identifier stored in your browser. This is how we improve the questionnaire. It never contains your name or your email address.
• Your first name, only what you type on the setup screen, so the app can address you. You can put anything you like there.
• Your questionnaire answers: the responses, the resulting score, how long you have had tinnitus, how it sounds to you, which ear, and what you think set it off. This is what makes the program yours rather than generic.
• Your daily check-ins: how much your tinnitus bothered you, how you slept, the sessions you completed, and the sound settings you chose.
• A user id, generated by our servers and by our subscription provider, so your data comes back to your device.
• Your email address, when you ask us to send you your program at the end of the questionnaire, or if you create an account in the app, either directly or through Sign in with Apple. If you use Apple’s private relay, we only ever see the relay address. The email address creates your Kalme account, so the program you paid for on the web is waiting for you in the app. We also use it to send you your results and a short series of emails about the program, and every one of them has an unsubscribe link.
• Purchase status: whether you have an active subscription, and when it renews. Payments on the website are handled by Stripe through RevenueCat; payments in the app are handled by Apple. We never see or store your card details.
• Product interaction: aggregate counts that tell us which screens are used. These are not linked to your identity and are not used for tracking.
• Crash logs: anonymous technical reports that tell us the app broke, and on which screen.
• Advertising measurement: if you arrived from an ad, we may tell the advertising platform (Meta) that a visit, a completed questionnaire or a purchase happened, so we know which ads work. We send hashed identifiers only, never your answers, your score or anything about your tinnitus. You can refuse this measurement in the cookie banner, and you can change your mind at any time.

Cookies on this website

If you visit from the European Union, the EEA, the United Kingdom or Switzerland, nothing that needs your permission runs before you give it. Three things wait for your answer, and none of them is loaded, contacted or given anything until you accept:

• PostHog, product analytics: which screens of the questionnaire you saw and how long they took.
• Google Analytics 4, audience measurement: the same screens, plus the pages of the site and the purchase, so we can read the funnel in Google’s reports. Google may set its own cookies to recognise the browser across visits.
• Meta Pixel, advertising measurement, described above. Its server-side counterpart, the Conversions API, only sends anything for visitors who accepted.

You can decline, and the site works exactly the same. Outside those countries these three load directly. Either way, the first-party measurement of the funnel, which counts screens on our own servers without a third-party cookie, keeps running so we can see where the questionnaire loses people.

Two things are always stored in your browser, whatever you answer, because the site cannot work without them:your cookie choice itself, so we stop asking, and a random session identifierplus the answers you have given so far, so that reloading the page does not make you start the questionnaire again. Clearing your browser data removes both.

The microphone

Kalme asks for the microphone for one thing only: a few-second reading of how loud the room around you is, so the app can suggest a sensible volume for your background sound. Nothing is recorded, nothing is stored, and nothing leaves your phone. The reading happens live and the result is a number on your screen. If you refuse the permission, the rest of the app works exactly the same. The website never asks for your microphone.

The chat, and Anthropic

The app includes an AI companion called “Talk to the cloud”. It is an AI companion, not a doctor, and a banner in the app says so.

• Your messages are sent to Anthropic, the company behind the Claude models, through our own server. That is the only place they go.
• Before your first message, the app asks you to choose. “Personalize” sends limited program context along with your message: your first name, your day in the program, your score and profile, your sound settings, your recent check-ins, and the takeaways of the lessons you finished. “Without my data” sends your messages, your language and your day in the program, and nothing else.
• You are asked explicitly, you can change your mind, and “Start over” clears the conversation.
• Anthropic processes the request to produce the answer. Your conversation is not used to train models.
• The chat is optional. The program, the sounds and the check-ins all work without ever opening it.

What we never do

• We never sell or rent your data. There is no ad network in this app and no data broker gets any of it.
• We never share what you log with an employer, an insurer, or any third party beyond the service providers listed below.
• We never use your health data to train models.
• We do not track you across other apps or websites. Kalme does not ask for the tracking permission because it has nothing to ask it for.
• We never post anything anywhere on your behalf. Kalme has no social features by design.

Why we are allowed to hold it (legal basis)

• Performing our contract with you (GDPR Article 6(1)(b)), for your account, your subscription and the delivery of the program.
• Your explicit consent (Article 9(2)(a)), for the health information. Your score, your check-ins and what you tell the chat are special category data, and the law requires your explicit permission before we may process them. You give it by choosing to answer the questionnaire, to log your days, and to turn the chat on, and you can withdraw it at any time by deleting your account.
• Your consent again (Article 6(1)(a)), for the analytics and advertising cookies on this website, which you accept or decline in the banner.

Withdrawing consent does not undo processing that already took place, and it does not affect our legal obligation to keep proof of purchase.

Permissions the app asks for

• Notifications, only to remind you of your daily session and your wind-down, at the time you pick. These reminders are scheduled on your phone: no reminder travels through a server.
• Microphone, only for the ambient noise reading described above.

That is the whole list. Kalme does not use your camera, your photo library, your contacts or your location, and it is not connected to Apple Health.

Who processes data for us

• Supabase: your account, your profile, your check-ins and your program history.
• Vercel: hosting of this website.
• RevenueCat and Stripe: web payments and subscription status.
• Apple: in-app payments, Sign in with Apple, app distribution.
• Resend: the transactional emails we send you.
• Anthropic: the answers in the chat, when you use it and only with the context you agreed to.
• PostHog: aggregate product analytics, not linked to your identity. Sentry: anonymous crash reports.
• Google (Google Analytics 4): audience measurement on this website, only with your consent.
• Meta: advertising measurement, as described above, through the Pixel in your browser and the Conversions API on our server, and only with your consent.

Some of these are located outside the European Union. Transfers rely on the European Commission’s Standard Contractual Clauses.

How long we keep things

• Your account, your profile and your history: for as long as your account exists, because the whole point is to show you your own change over months.
• Website questionnaire analytics: 13 months, in our own database and at PostHog, Google and Meta.
• Your cookie choice: in your browser, until you clear its data.
• Your conversations with the chat: the most recent messages, on your phone, until you tap “Start over” or delete your account.
• Crash logs and product analytics: a rolling window of up to 90 days.
• Proof of purchase: as long as French accounting law requires.

Security

Traffic between the app, this website and our servers is encrypted in transit (HTTPS). Your session token is held in the iOS Keychain, not in plain storage. On the server, row-level security means an account can only ever read and write its own rows: your history is not reachable from another account. The key that talks to Anthropic lives on our server, never in the app.

Deleting your account

You can delete your account and everything attached to it from inside the app, in Settings, Delete account, or by writing to support@kalme.app. It removes your profile, your questionnaire, your check-ins, your program history and your conversations, on our servers and on your phone. It is immediate and it is not reversible.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, erase it, or restrict how we use it, and you can object to processing. Write to support@kalme.app and we will answer within 30 days. If you are not satisfied, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr). If you are in California, you have equivalent rights under the CCPA; we do not sell or share personal information as defined there.

Children

Kalme is made for adults. It is not directed at children, we do not knowingly collect data from anyone under 16, and the App Store rating reflects that. If you believe a child has given us information, write to us and we will remove it.

Not a medical record

What you log in Kalme is a personal diary, not a medical record, and we are not a healthcare provider. Kalme is not a medical device and does not replace a doctor. See the Legal Notice. If you want to show your history to an ENT, that is entirely your choice and your copy.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell you by email or in the app.

Contact

Questions about any of this: support@kalme.app.