Calpimet

Privacy Policy

Effective date: October 14, 2026

This Privacy Policy explains what personal data Calpimet handles, why, who we share it with, how long we keep it, and the rights people have over it. It applies to the Calpimet app at https://calpimet.com, including the read-only athlete portal, and it lives at /privacy.

Calpimet is a tool for sports nutritionists. A nutritionist uses it to keep records of the athletes she works with: their anthropometric measurements, body composition, goals and meal-plan instructions. Athletes can view part of that information through a personal, read-only link; they do not create an account.

Please read this together with our Terms of Service (/terms-and-conditions). In this policy, "Calpimet", "we", "us" and "our" mean the operator described in Section 1. "Nutritionist" means the professional who signs in and uses Calpimet. "Athlete" means a person whose data a nutritionist records in Calpimet.

1. Who is responsible for the data

Calpimet is operated by Ancapit S.R.L, based in Buenos Aires, Argentina. You can reach us at hola@calpimet.com for anything about this policy, your data or your rights.

There are two different roles, depending on whose data it is:

  • Nutritionist account data (your name, email address and sign-in details): we decide how this data is used, so we are responsible for it.
  • Athlete data: the nutritionist decides what to record about her athletes and why, as part of her professional practice, so she is responsible for that data. We store and process it on her behalf, only to provide Calpimet to her and to show athletes their own portal.

If you are an athlete and have a question or request about your data, the quickest route is your nutritionist. You can also write to us at hola@calpimet.com and we will help, or pass your request to her.

2. The short version

  • Calpimet holds health-related data about athletes (measurements, body composition, goals and meal-plan instructions). We treat it as sensitive data.
  • The nutritionist records each athlete's consent before inviting them to the portal. For athletes who are minors, that consent comes from a parent or legal guardian.
  • The nutritionist's private notes about an athlete are never shown to the athlete and are never included in the messages Calpimet prepares for athletes.
  • Data is stored in the nutritionist's browser and in our backend on Amazon Web Services (AWS) in the United States.
  • Google is used only if the nutritionist chooses to sign in with Google.
  • We do not use analytics or advertising tools, we do not sell personal data, and we do not send athlete data to AI services.
  • Nothing is sent to athletes automatically. Any WhatsApp message to an athlete is sent by the nutritionist herself, from her own WhatsApp.

3. What data we handle

Nutritionist account data. When a nutritionist signs in, we receive her email address and, if she signs in with Google, her name as it appears on her Google account. Access is limited to approved accounts.

Athlete data entered by the nutritionist. Depending on what she records, this can include:

  • Identification and contact details: first and last name, date of birth, sex, phone number and email address.
  • Sports context: sport, level, club or team, position and coach.
  • Health-related data: anthropometric measurements (for example weight, height, skinfolds, girths and breadths taken under the ISAK protocol or by bioimpedance), body composition results, goals and their progress, and meal-plan instructions.
  • Follow-up details: status, measurement dates, upcoming appointments and the date the athlete's consent was recorded.
  • The nutritionist's private notes. These are visible only to the nutritionist.

Athlete portal data. When an athlete opens their personal link, a session identifier is stored in their browser so the portal stays open on that device. The session ends after 180 days, when the athlete signs out on that device, or when the nutritionist revokes access.

Notification data (optional). If the nutritionist turns on notifications, her browser gives us a push subscription so we can send her reminders. The reminder text is delivered through the push service run by her browser or device maker.

Technical data. Like any web service, our infrastructure processes basic technical information to run securely, such as IP address, browser type, and timestamps and logs of requests. We use it to keep the service working and to protect it, not to profile anyone.

Emails. If you write to hola@calpimet.com, we receive your message, your email address and anything you include.

4. Why we use it

  • To provide Calpimet: storing and syncing the nutritionist's records across her devices and showing her who needs follow-up.
  • To show each athlete their own portal: the measurements, goals and instructions the nutritionist chooses to share. Private notes are never part of it.
  • To sign the nutritionist in and keep accounts secure.
  • To send the reminders the nutritionist asked for, if she turned them on.
  • To answer questions and requests sent to hola@calpimet.com.
  • To keep the service secure, prevent abuse and meet legal obligations.

We do not use any of this data for advertising, for profiling, or to train AI models.

5. Consent, and athletes who are minors

Health-related data is sensitive data. The nutritionist is responsible for obtaining each athlete's informed consent before recording their data in Calpimet, and Calpimet asks her to register that consent before the athlete can be invited to the portal.

Some athletes may be minors. For them, the nutritionist must obtain consent from a parent or legal guardian, and should share the portal link with the parent or guardian or with their agreement. Athletes, or their parents or guardians, can withdraw consent at any time by telling the nutritionist; she can then revoke portal access and delete the athlete's record.

6. Who we share data with

We do not sell personal data. We share it only with the service providers we need to run Calpimet, and only for that purpose:

  • Amazon Web Services (AWS), United States: hosting, database, file storage, sign-in (Amazon Cognito), delivery of the app, and handling of email sent to hola@calpimet.com.
  • Google: only if the nutritionist chooses "Sign in with Google". Google confirms her identity and shares her email address and name with us.
  • Push notification services run by browser and device makers (for example Google, Apple or Mozilla): only if the nutritionist turns on notifications, to deliver her reminders.

When the nutritionist uses a WhatsApp link from Calpimet, WhatsApp opens on her device with a suggested message. She reviews it and sends it herself, under her own WhatsApp account and WhatsApp's own terms. Calpimet does not send messages to athletes and does not connect to WhatsApp.

We may also disclose data if the law requires it, for example in response to a valid order from a court or authority.

7. Where data is stored, and international transfers

Calpimet keeps a copy of the nutritionist's records in her own browser (IndexedDB) so the app is fast and works offline. That copy syncs to our backend on AWS in the United States (us-east-1). This means data is transferred from Argentina, and from wherever users are, to the United States. We rely on AWS's contractual and security commitments to protect data transferred this way.

8. How long we keep data

  • Athlete records are kept while the nutritionist keeps them in Calpimet. When she deletes an athlete, the record is removed from the app and the athlete's portal access ends. Residual copies in our database are kept only as long as needed to run the service reliably, and we permanently delete them on request: email hola@calpimet.com.
  • Nutritionist account data is kept while the account is active. If the account is closed, we delete the account and its records, except where the law requires us to keep something.
  • Athlete portal sessions end after 180 days at most, or earlier if access is revoked.
  • Technical logs are kept only as long as needed for security and troubleshooting.
  • Emails to hola@calpimet.com are kept as long as needed to answer them and handle any follow-up.

9. Your rights

Under Argentina's Personal Data Protection Law (Ley 25.326) and, where they apply, other privacy laws such as the GDPR, people generally have the right to:

  • Access the personal data held about them.
  • Correct data that is inaccurate or incomplete.
  • Have their data deleted.
  • Object to or restrict certain uses of their data.
  • Receive a copy of their data in a portable format.
  • Withdraw consent at any time, without affecting what was done before.

Athletes should usually send requests to their nutritionist, since she manages their record; we will support her in answering them. Nutritionists, and anyone else, can write to us at hola@calpimet.com. We may need to confirm your identity before acting on a request.

In Argentina, the Agencia de Acceso a la Información Pública (AAIP) is the authority that oversees compliance with Ley 25.326, and you can file a complaint with it. If you are elsewhere, you may also be able to complain to your local data protection authority. We would appreciate the chance to sort things out with you first.

10. How we protect data

  • All connections use HTTPS.
  • Only approved nutritionist accounts can sign in, through Amazon Cognito.
  • Each athlete's portal link is personal. The nutritionist can revoke it at any time, and a new link replaces the old one.
  • Each athlete sees only their own data, and never the nutritionist's private notes.
  • We do not write athlete data to our logs.

No system is perfectly secure. If a security incident affects personal data, we will act promptly and notify the people affected and the authorities where the law requires it.

11. Browser storage, cookies and analytics

Calpimet stores data in your browser (IndexedDB and local storage) only to make the app work: to keep the nutritionist signed in, to keep her records available offline, to keep an athlete's portal open, and to remember settings such as language and theme. We do not use analytics, advertising or tracking cookies.

12. Changes to this policy

We may update this policy when Calpimet or the law changes. When we do, we will update the effective date above, and for important changes we will let nutritionists know in the app or by email before the change takes effect.

13. Contact

For any question or request about privacy, write to hola@calpimet.com. Calpimet is operated by Ancapit S.R.L, Buenos Aires, Argentina.