Skip to content

Privacy Policy

Last updated June 2026

This policy explains what Calqulate.net collects, why we collect it, and the control you have over your data. It covers both the free calculators and the paid Calqulate Vitals service.

Who we are

Calqulate.net runs free health calculators and Calqulate Vitals, a metabolic and cardiovascular tracking service. When this policy says “we” or “us,” it means the team that operates calqulate.net. You can reach us at krushal.barasiya@calqulate.net for any privacy question.

What we collect

How much we hold depends on how you use the site.

Using the free calculators

You can run any calculator without an account. The numbers you type are used to produce a result and are not saved to a profile. Our stateless compute endpoint processes the inputs and returns the result. We log a short-lived IP address for rate limiting and abuse prevention, and nothing more from that interaction.

Creating a Calqulate Vitals account

When you sign up, we store the data needed to run the service for you:

  • Account details: your email, and your name or profile picture if you sign in with Google or Microsoft.
  • Health inputs you choose to save: measurements, lab values, body composition, and the risk results we compute from them.
  • Reports and protocols you generate, such as a doctor PDF or a GLP-1 plan.
  • Subscription status and your Stripe customer ID. We never see or store your card number.
  • Notification preferences and, if you opt in, your push subscription.

Technical data

Like most sites, we receive IP address, device and browser type, and basic usage events through the analytics tools described in our Cookie Policy.

Why we use it

  • To run the calculators and compute your scores and risk.
  • To save your history and show your trend if you are a Vitals member.
  • To process payments, manage your subscription, and send service emails.
  • To send your weekly progress email and optional notifications, only if you turn them on.
  • To keep the site secure, prevent abuse, and fix problems.

Under GDPR, our legal bases are your consent, the performance of our contract with you for paid features, and our legitimate interest in keeping the service safe and working.

Who processes data for us

We do not sell your personal information. We share data only with the providers that make the service run:

  • Supabase for authentication and the database that holds your account and health rows.
  • Stripe for payments and subscription billing.
  • Cloudflare Turnstile to block bots at signup and login.
  • Email delivery through our SMTP provider for account and weekly digest emails.
  • Google (Tag Manager, AdSense) and Microsoft Clarity for analytics and ads, as set out in the Cookie Policy.

How long we keep it

We keep your account data while your account is active. If you delete your account, we remove your profile, measurements, risk results, reports, and subscription rows, then delete your login. Some records may persist briefly in backups before they age out, and we may retain limited billing records where the law requires it.

Your rights and controls

You stay in control of your data.

  • Export: download everything we hold about you as a JSON file from your settings.
  • Delete: permanently erase your account and all health data from your settings. This cannot be undone.
  • Access and correction: view and edit your profile any time, or email us.
  • GDPR: you can object to or restrict processing and withdraw consent.
  • CCPA: we do not sell personal information. You can request access or deletion using the same tools.

Manage all of this from your settings, or contact us if you need help.

Security

Health rows are protected with row-level security so each account can only read its own data. Traffic is encrypted in transit, payments run through Stripe’s hosted checkout, and signups are screened for bots. No system is perfect, so we also ask you to use a strong password and keep it private.

Children

Calqulate Vitals is built for adults and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.

International transfers

Our providers may process data in the United States and other countries. Where required, we rely on standard contractual protections so your data keeps the same level of care wherever it is handled.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Major changes will be highlighted in the product or by email.

Contact

Questions or requests go to krushal.barasiya@calqulate.net. We read every message and reply.