Effective date: June 2026 Last updated: June 2026

Overview

CALMA (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

CALMA is a personal cortisol rhythm journal. We take your health and wellness data seriously and will never sell it.

Information We Collect

Information you provide directly:

•	Your name or username
•	Wake and sleep times
•	Your selected goal
•	Spike and restore logs including category, intensity, time, and optional journal notes
•	Morning and evening check-in responses
•	Subscription and purchase information processed through Apple

Information collected automatically:

•	App usage data such as screens visited and features used
•	Device information such as iOS version and device type
•	Crash reports and performance data

Information we do not collect:

•	We do not collect your location
•	We do not access your camera or microphone
•	We do not read your Apple Health data
•	We do not collect any biometric data

How We Use Your Information

We use your information to:

•	Provide and improve the CALMA app experience
•	Generate your rhythm score, cortisol archetype, and personal Path protocol
•	Send morning and evening check-in notifications at your chosen times
•	Process and manage your subscription through Apple
•	Respond to your support requests
•	Fix bugs and improve app performance

AI-Generated Content

CALMA uses an AI language model to generate your personal Path protocol. To do this, anonymized data from your logs — including your top drainer category, restorer category, archetype, and rhythm score — is sent to our AI provider. No personally identifiable information such as your name or journal notes is included in these requests.

Data Storage and Security

Your data is stored securely using Supabase infrastructure. We use industry-standard encryption for data in transit and at rest. We retain your data for as long as your account is active. If you delete your account, your data is permanently removed from our servers within 30 days.

Third-Party Services

CALMA uses the following third-party services: