Scalie — Privacy Policy
Last updated: 2026-10-28
Scalie (“we”, “us”) is published by KamKom Software SRL, Avenue des Lilas 21 bte 03, 1070 Anderlecht (Brussels), Belgium, enterprise number BE 1012.055.735 (“KamKom”). KamKom is the data controller. Contact: hello@scalie.app.
The short version
- No sign-up required, no password. Scalie creates an anonymous account in the background. Sign in with Apple only if you want a backup.
- Your meals, weights, rank and progress stay on your iPhone, unless you sign in with Apple, which backs them up privately on our servers.
- To read a meal, Scalie sends the photo or text to an AI service only after you allow it. It is not stored and never used to train AI.
- Apple Health data never leaves your iPhone.
- Squads (optional): if you create or join a squad, its members see your first name, dragon, rank, Heat and today’s goals; your meals and kilos lost only if you turn them on; never your weight.
- No ads. We never sell your data. We don’t track you across other apps.
1. Data that stays on your iPhone
Everything you enter in Scalie is stored in the app on your device: your profile (sex, age, height, weight, goal, activity level, first name if you give one), meals and meal photos, weigh-ins, activity, Heat, rank, badges and settings.
This data is not included in iCloud backups. To keep it when you change iPhones, sign in with Apple (section 3, “Backup”).
You can delete it at any time (Settings > Delete account, or Delete all my data if you are not signed in).
2. Apple Health
If you allow it, Scalie reads steps, active energy, weight and water from Apple Health, and writes dietary energy (calories eaten), weight and water. Health data is used only to calculate your daily budget and progress on your iPhone. Data read from Apple Health is never sent to our servers (not even in your backup: it is read again from Health on your new iPhone), to the AI service, to analytics, or to anyone else, and never used for advertising or marketing. You can change access in the iOS Settings app > Health > Data Access & Devices > Scalie.
3. Data that leaves your iPhone
| What | Why | Who receives it | Kept |
|---|---|---|---|
| Meal photo, voice transcript or typed meal | To recognize the food and estimate calories | Our server (Cloudflare) and our AI provider: Google (Gemini), or Anthropic (Claude) if Google is down | Not stored. Processed and discarded. Neither provider uses it for training. |
| Anonymous account ID + subscription status | To unlock the app and check your subscription | RevenueCat, Apple | As long as you are a customer, plus legal accounting periods |
| App usage (screens, taps on key features, errors, device model, iOS version). Never meal content, weights, calories or Health data. On by default, and you can turn it off anytime in Settings > Your data. | To improve Scalie | PostHog (servers in the EU) | 12 months |
| Crash reports without any identifier (error, screen, device model, iOS version) | To keep the app working | PostHog (servers in the EU) | 90 days |
| Website visits (scalie.app): pages viewed, clicks on the page, page load speed, errors, browser, device type, country (IP address anonymized). No cookies and nothing stored on your device. | To see what works on our website | PostHog (servers in the EU) | 12 months |
| Waitlist email (scalie.app), closed since 2026-10-23: your email address | To tell you when Scalie launched | Resend (servers in the United States); a masked version (e.g. j***@gmail.com) was posted to our internal Slack to tell us about new signups | No longer collected; any remaining waitlist data will be deleted |
| Apple sign-in (optional): an Apple user ID, and the email Apple shares (it can be a private relay address) | To restore your climb on a new iPhone | Supabase (servers in the United States), Apple | Until you delete your account |
| Backup (only if you sign in with Apple, which is your consent): what you entered in Scalie, including meals, meal photos, weigh-ins, profile, rank and badges | To restore your climb on a new iPhone | Supabase (servers in the United States) | Until you delete your account, or 24 months after your last use |
| Messages you send us (text, optional email, optional screenshot, app version, device) | To answer you and fix issues | Our servers (Supabase, United States), Slack (our internal support inbox) | 24 months |
| Barcodes you scan: the product number only | To find the product’s calories | Our servers (Cloudflare, Supabase) and Open Food Facts (an open food database). Not linked to you. | Product data is kept as a shared product base, without who scanned it |
| Nutrition label photo (only for a product nobody has scanned yet, and only if you take it) | To read the label and add the product for everyone | Our server and our AI provider (see meals above); the product’s name and nutrition facts are added to our shared product base, not linked to you | The photo is not stored; product facts are kept |
| Daily scan counter linked to the anonymous account ID | To prevent abuse of the AI | Our servers (Supabase, United States) | 90 days |
| Squads (only if you create or join one): the first name you choose for the squad, your dragon’s outfit, rank, Heat, streak, today’s goals (meals logged, under budget, steps, water) and your positive moments (rank up, perfect day, streak, badge); your meals (names and calories) and kilos lost only if you turn them on for that squad. Never your weight. | To show your day to the friends of your squad, the weekly board and the squad goal | Our servers (Supabase, United States; Cloudflare), and the members of your squads | Until you delete your account. Leaving a squad stops sharing with it right away |
| Fire, reports and blocks (squads) | To cheer friends on, and to keep squads safe (reports reach our team) | Our servers (Supabase, United States), Slack (reports only) | Until you delete your account |
| Push notification token, app language and time zone (only if you allow squad notifications) | To tell you about fire from friends, new members and Monday’s results (2 a day at most, never at night) | Our servers (Supabase, United States; Cloudflare), Apple Push Notification service | Until you turn notifications off, delete the app or delete your account |
You can turn usage data off (or on) anytime in Settings > Your data.
Share my profile (Progress) makes a picture on your iPhone (your dragon, rank, streak, badges, and kilos lost only if you turn it on). It is not sent to us: you choose where to share it.
Invite links (scalie.app/join/…) contain only a squad’s code. The web page of the link shows the squad’s name and how many people are in it, nothing else.
Voice: speech is turned into text on your iPhone by Apple’s speech recognition. No audio is sent to us or to the AI service.
4. Legal bases (GDPR)
- Contract: providing the app you subscribed to (subscription check, core features).
- Consent (explicit, for health data): sending meals to the AI service, backing up your data when you sign in, Apple Health access, notifications, sharing your day with a squad you create or join (and what you choose to share with it), and the launch waitlist on our website (closed since 2026-10-23). You can withdraw consent at any time in Settings, without affecting the lawfulness of processing before withdrawal.
- Legitimate interest: preventing fraud and abuse (scan counter, app integrity checks), anonymous crash reports, and usage analytics (you can object anytime in Settings > Your data).
- Legal obligation: keeping purchase records.
5. Our processors
Supabase, Inc. (accounts, database and backups, US hosting) · Cloudflare, Inc. (hosting of our website and API) · Google LLC and Anthropic PBC (meal recognition) · RevenueCat, Inc. (subscriptions) · PostHog Inc. (analytics and crash reports, EU hosting) · Slack Technologies (internal support inbox, and waitlist signup notifications until 2026-10-23) · Resend (email delivery, and our launch waitlist until 2026-10-23) · Apple (App Store, payments, Health, push notifications). Each is bound by a data processing agreement and must protect your data at least as well as described here. Some, including our main servers, are in the United States; transfers from the EU rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. Your rights
You can ask to access, correct, get a copy of, or delete your data, to restrict or object to processing, and to withdraw consent. Most of this you can do yourself in the app. For data on our servers, use Settings > Delete account (signed in) or Delete all my data (not signed in): both also erase what our servers keep about you, and revoke Apple sign-in. For a copy of your backup, or anything else, write to hello@scalie.app with the ID shown in Settings > Your data. You can also complain to your data protection authority, or to ours: the Belgian Data Protection Authority (dataprotectionauthority.be).
7. Children
Scalie is for people aged 16 and older. We do not knowingly collect data from anyone under 16. For 16 and 17 year olds, Scalie keeps a gentle pace: smaller calorie deficit, a higher calorie floor, a goal weight always in the healthy range, and no weight curve in shared pictures.
8. Security
All traffic is encrypted (HTTPS). Secret keys never live in the app. We keep as little as possible, for as short as possible.
9. Our Pinterest account
Scalie uses the Pinterest API only to publish Scalie’s own Pins (our marketing content) on Scalie’s own Pinterest account, from our in-house publishing tool. We connect only that account, through Pinterest’s official authorization (OAuth); we never ask for or store a Pinterest password. The access tokens Pinterest gives us are stored encrypted on our server (Cloudflare) and are used only to manage boards and publish Pins on our own account. We do not collect, store or process any data about other Pinterest users: we don’t read other people’s boards, Pins or profiles, and no Pinterest data is sold, shared or used for advertising. For questions or deletion requests, write to hello@scalie.app. We revoke and delete the stored tokens on request, and whenever we disconnect our Pinterest account.
10. Changes
If we change this policy, we update the date above and tell you in the app when the change matters.
11. Contact
KamKom Software SRL · Avenue des Lilas 21 bte 03, 1070 Anderlecht (Brussels), Belgium · BE 1012.055.735 · +32 486 17 22 19 · hello@scalie.app