Privacy and cookies policy.
Version of 16 October 2026. This policy covers Calime accounts, checkout handoff and other data processed when you use the website or contact us. Data processed by the CaliVita shop is also covered by that shop’s privacy policy.
1. Administrator and contact
The controller of personal data processed within Calime is:
Michał Zarzycki
Technologiczna 26/22, 35-213 Rzeszów, Poland
Tax Identification Number: PL5170447369
contact@calime.app · +48 533 223 143
Use these contact details for enquiries about the Calime application and data protection.
Purchases and product distribution take place through CaliVita®. Calime is an information application that helps you learn and compare products; does not accept orders or payments. Complaints about products, deliveries, withdrawal from purchase and order matters should be directed to the seller indicated on the CaliVita® website.
CaliVita® order data
Calime does not take payments and is not the seller. After your explicit consent it may send the basket and supplied contact data to CaliVita, retain the handoff identifier and receive a technical order status. CaliVita passwords, card data, final payment and fulfilment remain with CaliVita.
If you have a problem with an order placed in CaliVita® after following a link from Calime, you can ask us to help clarify the issue or find the right contact. contact@calime.app
A Calime account stores an encrypted e-mail address and optional encrypted profile. An optional password is stored only as an Argon2id hash. A verified member code is encrypted and is used to associate local history; it is not used to promise club pricing or CaliVita login.
A member code submitted in the account remains pending until manual verification in CVBonus. It can be cancelled before verification. Calime never asks for the CaliVita password.
If you voluntarily contact Calime for assistance, we process your email address and the information you provide in the correspondence only to the extent needed to handle the matter. Do not send passwords, payment card details or health information.
2. What we process and why
| Purpose and data | Processing basis |
|---|---|
| Provision of the website, catalogue, shopping cart and requested functions: connection specifications, locally saved selections and settings. | Art. 6 section 1 letter b GDPR - provision of a free service at the user's request; necessary record in accordance with Art. 399 section 3 the Polish Electronic Communications Law. |
| Calime account, login and checkout handoff: e-mail address, optional profile, encrypted member code, basket snapshot, consent, PackageID and order status. | Article 6(1)(b) GDPR: account and requested checkout handoff; Article 6(1)(c) or (f) where retention is required by law or for claims. |
| Optional abandoned-basket reminder: account e-mail address, encrypted basket snapshot and selected market. One message is sent after about 3.5 hours if a completed purchase has not been confirmed. | Article 6(1)(a) GDPR and the Polish Electronic Communications Law: separate prior consent to direct e-mail communication. Consent can be withdrawn at any time in account settings. |
| Contact regarding Calime and voluntary assistance with a CaliVita® order: your email address and the details and description you provide in correspondence. | Art. 6 section 1 letter b GDPR - service operation; lit. c - legal obligations, if applicable; lit. f - determination and defense of claims. |
| Security, abuse mitigation and diagnostics: network address or implicit hash, browser signals, time, request counters and error logs. | Art. 6 section 1 letter f GDPR - legitimate interest of the administrator in the protection of the website and users. |
| Server request counts: daily and hourly totals by public page or endpoint, previous public Calime page or broad entry source, market and broad region; no visitor identifier. | Article 6(1)(f) GDPR: legitimate interest in understanding use and maintaining the website. No analytics cookie or browser storage is used for this count. |
| Redirect abuse review: for 7 days, the IP address seen by our server, User-Agent, exact time, public Calime page and CaliVita destination, plus technical risk signals. Daily totals without IP are kept for 90 days. | Article 6(1)(f) GDPR: legitimate interest in identifying automated or abusive redirects and checking the reliability of redirect statistics. No measurement cookies or link to analytics sessions. |
| Consent choice counts: daily totals of the initial choice and later changes, button used and enabled consent categories. No IP address, visitor or session identifier, page or product is stored in this counter. | Article 6(1)(f) GDPR: legitimate interest in documenting and checking how consent choices work. This count also works after refusal and does not enable optional analytics. |
| Aggregate views, navigation sources within Calime and button or link clicks, by selected market and broad region; no identifier in this counter. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law: separate prior consent to Calime Statistics. |
| Calime Statistics: page and product views, cart actions, distributor links, comparisons and assistant response counts and times. Without chat or search text or stored IP addresses. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law - separate prior consent. |
| Optional Google Analytics: cookie identifiers, technical data, products, quantities, catalog prices, promotions, cart and form stages, and confirmed transactions under the conditions below. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law: prior consent. |
| Optional Microsoft Clarity: masked session replays, heatmaps, click and scroll patterns on public pages and selected funnel stage names. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law: prior consent. |
| Voluntary Google Ads measurement, if active: technical information about going to the distributor after the ad. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law: separate prior consent. |
| AI chat on demand: message, short context of the conversation and the products indicated in it; voluntary recording of the conversation for quality checking. | Art. 6 section 1 letter b GDPR - assistant's response; lit. a - separate consent to save the content for quality assessment. |
Providing data in the contact is voluntary, but without the information needed to understand the case and provide an answer, it may be impossible to handle it. Refusal of analytics, ad measurement or conversation recording does not limit the catalog, comparison or shopping cart.
Zadania i historie
4. Scope of analytics and go to distributor
Measures interest in pages and products, source pages within Calime, button and link clicks, cart actions, distributor clicks by product, comparisons and assistant response counts and times. Cart handoffs include product codes and quantities. Data stays on the Calime server for 90 days, without chat or search text or stored IP addresses.
After analytics consent, Google Analytics receives standard ecommerce events for product and promotion views and selection, cart additions and removals, cart views and checkout start. Events include product IDs and names, quantities, catalog prices, currency, and promotion ID and name. After a CaliVita form is prepared successfully, we measure the submitted delivery and payment preferences; this does not confirm payment. Product page views still use a generic URL and title. We do not send chat, search or contact details. A cart handoff or click is not a purchase. We separately measure a handoff request, API acceptance, failure and fallback to a standard basket, linked by a random attempt ID without reporting revenue. We send a purchase event only when the visitor returns to Calime on the same device, the cart is linked to an account, and an unambiguous CaliVita payment confirmation arrives within 24 hours. It contains a transaction ID, products, currency and confirmed amount when available. A standard cart handoff and a cart handoff with membership registration are separate events; each successful handoff is counted only once regardless of the number of products. The new measurement scope requires a fresh consent choice.
After a fresh analytics consent, we also use Microsoft Clarity (the Calime project) to analyze clicks, scrolling, heatmaps and session replays on public pages. Clarity does not start on account pages or URLs with parameters or fragments; a free-text search stops recording. Strict masking of all content is enabled for the project, and form fields are masked. We do not send account IDs, contact details, chat text or cart contents to Clarity as events. Only funnel stage names, such as add to cart and checkout start, are sent. Clarity receives analytics consent, while Microsoft advertising consent remains denied. Its script is not loaded before analytics consent. Microsoft Privacy Statement.
After separate consent to ad measurement, Google Ads may use technical ad click identifiers (gclid, gbraid, wbraid) and _gcl_* cookies to attribute a visit to a campaign. We record a conversion when you open a product, basket or distributor store; information links are not conversions. We do not assign revenue to this event or report it as a purchase. The Google Ads library may also transmit the public address and title of the page visited, including the product code and name. We do not transmit chat content, searches, contact details or the contents of the local basket; we do not use this data for personalized ads.
A handoff alone is not a purchase. A purchase is counted internally only after a matching, authenticated CaliVita status for its PackageID; it is not automatically sent to Google Ads.
5. AI chat
The chat is marked as an AI assistant and provides product information, not medical advice. Once the chat rules are confirmed, the message and context can go to OpenAI to generate a response. Do not enter sensitive data, health information, test results, login or payment details. Filters do not guarantee detection of all private data.
The conversation remains in the browser tab's memory until the tab is refreshed or a new conversation starts. Saving its content on the server for quality checks requires separate consent in the chat and can be disabled without losing access to the assistant. Quality metrics do not include your IP address or message content without this consent. Abuse protection and usage limits operate independently of analytics consent.
6. Recipients and data transfer outside the EEA
To the extent necessary for the operation of Calime, we use the Hostinger hosting infrastructure and function providers: OpenAI (AI responses), Cloudflare (Turnstile), and, after appropriate consent, Google Ireland Limited and related entities, Google (analytics or advertising measurement). The data may also be received by contact service entities and bodies authorized by law. When switching to CaliVita®, the browser connects directly to the external website; the cart link contains the selected product codes and quantities.
After analytics consent, Microsoft receives masked behavioral data through Clarity. Advertising storage and sharing with Microsoft Ads remain denied.
International providers may process data outside the European Economic Area, including in the United States. The safeguards used depend on the provider and transfer: an adequacy decision, including the EU-US Data Privacy Framework for covered entities, or standard contractual clauses and additional measures required. You can obtain information about the security measures used from the administrator.
More about supplier policies: Google, Microsoft, OpenAI API, Cloudflare i Hostinger.
7. How long we store the data
Account data remains until account deletion or the end of the service relationship, subject to legal and claims retention. Login challenges expire after 15 minutes; sessions after at most 30 days. A pending basket reminder is deleted when the basket is cleared or consent is withdrawn; reminder records are deleted after at most 30 days. Raw CaliVita status messages are not stored: only allowlisted fields and an idempotency hash are retained.
The separate redirect connection log is available only to the administrator, is excluded from recovery backups and is automatically deleted after 7 days. IP and User-Agent can indicate automated traffic, but an IP may be shared and these signals do not prove a bot. Aggregate risk counts without IP remain for 90 days.
We store consent selection and Calime analytical cookies for a maximum of 180 days. Voluntarily saved conversation content is deleted within 30 days in a periodic log review. Implicit shortcuts used to protect chat are removed after 24 hours of inactivity during the next security review. API limit counters contain periods and number of calls; they are not conversation history.
Connection Protection logs contain a masked network address; they do not save the addresses of visited subpages or request headers. Rotated files of these logs are retained for up to 7 days and the active file is limited to 10 MB. Technical application logs are rotated according to a size limit, with a maximum of three 10 MB files per container; time depends on the number of registrations. We store correspondence for the duration of the case, and then to the extent necessary to fulfill legal obligations or until the limitation periods for claims expire. Data retention with Google and other providers is independent of the validity of cookies and results from the service settings and provider's policies; disabling API response recording does not mean there are no security logs at OpenAI.
8. Your rights
Send requests concerning CaliVita® order data to the controller identified in the privacy policy of the shop where you placed the order. Send requests concerning newsletters, correspondence and other data processed by Calime to the Calime operator.
Within the limits set out in the GDPR, you have the right to access your data, rectify it, delete it, limit processing and transfer data. You can object to processing based on legitimate interest and withdraw your consent at any time. Send your application to contact@calime.app; we will respond without undue delay, generally within one month, taking into account the principles of the GDPR. When we cannot identify your data, we may ask you for information necessary to process your request.
You can submit a complaint to the President of the Personal Data Protection Office: uodo.gov.pl. We do not make decisions regarding you based solely on automated processing that produce legal effects or similarly significantly affect you. The AI assistant presents information for you to evaluate yourself.
9. Document updates
We update the document when functions, suppliers or processing principles change. A new goal requiring consent will only be launched once consent is obtained. The current version and date are available on this page; in the event of a significant change in consent, we will ask for your choice again.
Server request and traffic counts
Calime counts daily and hourly totals of requests for public pages, product pages and catalog or promotion data on its server, including when you choose “Necessary only”. The basis is Article 6(1)(f) GDPR: legitimate interest in understanding use and maintaining the website. These counters contain the request type, public page path or endpoint name, a broad source category or previous public Calime path, market, broad region, language and day; hourly totals also contain the beginning of the hour. We do not store an IP address, person or session identifier, cookies, search text, URL parameters, full referrer, external referring domain or chat content in these counters. We do not link these totals to other analytics. We delete them after 90 days. They count requests, not unique people, sessions or confirmed views: repeat requests, bots, response errors and browser navigation can affect the result. The request counter alone does not include opening a local cart, comparison or interface tab when it makes no server request. The separate click counter is described below.
After separate consent to Calime Statistics, we count daily totals of public page views and button or link clicks. We store the page path, previous Calime path or a broad entry category (direct, external, unknown), an internal link destination or broad external category, a technical element position ID, selected market, language and broad region: Poland, outside Poland or unknown. We do not store IP addresses, person or session identifiers in this aggregate counter, URLs with parameters, referring domains, button text, form fields or individual event history. The data stays on the Calime server and is deleted after 90 days. Counts may include repeats and automated traffic; they do not represent unique people.
CaliVita redirect history
When you navigate to CaliVita, our server redirects you to the registration form or a relevant product, or transfers your selected cart. We store each handled redirect: server time rounded to the minute, redirect type, click location within Calime, public page path, button identifier and CaliVita destination URL and the product page code when clicked on that page, destination market, product codes and quantities. The history includes the contents of individual transferred carts. The administrator can view this history and hourly and daily totals. This mechanism also operates with “Necessary only”; it uses no measurement cookies or additional browser analytics request. The 90-day history contains no user or session identifiers, IP addresses, device information, campaigns or external referral sources. A separate abuse review log keeps the full IP address seen by the server, User-Agent, exact time, destination and redirect assessment for 7 days. We infer device type and operating system from User-Agent; automation signals and bursts from one IP are indications, not proof of a bot. Only the administrator can access this log; it is excluded from recovery backups and is not linked to analytics sessions. Daily assessment totals without IP are kept for 90 days. We do not link the abuse review log to separate session analytics. An internal record number is used only to load subsequent pages of history. Products and quantities are processed to transfer the cart to CaliVita. Redirect requests are excluded from the Caddy access log. History and totals remain on the Calime server for 90 days and are accessible only to the administrator. The administrator measurement exclusion marker only suppresses recording. Redirects do not confirm purchases or unique people; repetitions and automated link checks may affect the figures. Calime session statistics and Google measurement remain separate features requiring consent.
Chat security journal - up to 48 hours
For security, Calime keeps a minimised record of the conversation and detected abuse attempts for up to 48 hours, independently of optional quality logging. Recognised personal data, secrets and health content are omitted. The journal helps detect and fix vulnerabilities, is accessible only to the operator and is excluded from backups.
This record is based on the operator’s legitimate interest in protecting the service and its users against abuse (GDPR Article 6(1)(f)). It is not used for marketing or model training. Raw IP addresses, cart data and authorisation headers are not recorded. A conversation identifier is replaced with a keyed one-way hash. Filters do not guarantee complete anonymisation. You may object and exercise the rights described in the privacy policy.