Privacy Policy

1. Who is responsible for your data

ChronoProtein is a chrononutrition application developed and operated by Juan Carlos Risso Patrón, domiciled in the Argentine Republic. Throughout this document, "ChronoProtein", "the app" and "we" refer to the same data controller.

You can reach us about any privacy matter at soporte@chronoprotein.com.ar. We answer personal data requests within the ten (10) calendar days set by Argentine Personal Data Protection Act No. 25,326.

2. Scope

This policy covers the web application published at chronoprotein.com.ar, the installable application (PWA), the Android application distributed through Google Play, the iOS application, and the Kai messaging channel on WhatsApp. They all share the same database and the same processing.

3. What data we collect

We do not ask for any data the app does not use in order to work. Everything below is provided by you, except where marked as automatically generated.

4. What we use your data for

The legal basis is performance of the contract you accept when creating an account and, for health data, your express consent, which you can withdraw at any time by deleting your account. Health data is sensitive data under article 2 of Act No. 25,326 and is treated as such.

We do not sell your data. We do not use it for advertising. We do not build commercial profiles from it and we do not pass it to data brokers.

• Computing your protein plan and metabolic windows: this is the core function of the app and it requires weight, age, sex, goal, activity and chronotype.
• Recording and displaying your food diary, your progress and your reports.
• Saving your recipes and, if you choose to publish one, reviewing it and showing it in the community recipe book.
• Recognising foods from photos, voice or barcode.
• Answering your questions to Kai with the real context of your diary.
• Sending the reminders and notifications you have enabled.
• Email you about product news and greet you on your birthday. Every one of those emails carries a one-click unsubscribe link, and you can also turn them off under You → Preferences.
• Managing your subscription, renewals and purchase restoration.
• Keeping the service secure, detecting abuse and fixing errors.
• Complying with legal, accounting and tax obligations.

5. Who it is shared with

We rely on the following processors. Each one receives only what it needs to provide its service, under contract and bound by confidentiality.

6. The community recipe book

If you publish a recipe to the community recipe book, other ChronoProtein users see a copy: its name, ingredients, steps, estimated numbers, photo and the alias you chose. They never see your name, your email or your account identifier.

Before it is shown, a person from the ChronoProtein team reviews it. We record which version of the terms you accepted, when you submitted it and who reviewed it.

• The photo is copied without its metadata —location, device and date— before it is shown.
• Whoever reports a recipe is not visible to its author.
• If you withdraw the recipe, it stops being shown right away and its public photo is deleted. Copies other people saved before belong to them and are kept.
• If you delete your account, your recipes, the copies you published and their photos are deleted, and the copies other people saved stop showing your alias.

7. Artificial intelligence

Kai and meal recognition run on language models operated by OpenAI and Anthropic. When you use those features, the content required — a photo of your plate, an audio clip, your question and the day's summary — is sent to those providers' application programming interfaces.

Both providers commit contractually, in their developer terms, not to use content submitted through the application programming interface to train their models. If you would rather no data reach them, do not use photo logging, voice logging or the Kai chat: the rest of the app works without those calls.

The engine that computes your plan is deterministic and proprietary: it does not depend on a language model and it runs on our own infrastructure.

8. Device permissions

The app requests each permission at the moment it needs it, and keeps working if you decline, with the corresponding feature disabled.

9. How long we keep your data

• While your account is active, we keep your data so that history and trends make sense.
• When you delete your account, we erase your personal data and files from our systems within a maximum of thirty (30) calendar days. Deletion in the database is immediate; the window covers the rotation of encrypted backups.
• We keep for longer only the accounting and billing records that Argentine law requires us to retain, and the minimum security records needed to prevent fraud. Those records do not include your food diary, your photos or your health files.
• Aggregated and anonymised usage data, which can no longer identify you, may be kept indefinitely.

10. How to delete your account

You can delete your account yourself, without writing to anyone and without explaining why.

From the app: open "Me", scroll to "Delete account", type the confirmation word and confirm. The account and its data are deleted immediately and your session is closed.

From the web, even if you have uninstalled the app: go to chronoprotein.com.ar/en/legal/delete-account and follow the instructions on that page.

Deleting your account removes your authentication user, your profile, your plan, your entire diary, your weight records, your training sessions, your own foods, your recipes —including the ones you published— and their photos, your conversations with Kai, your preferences, your health files and your links with professionals. The operation is permanent and cannot be undone.

Deleting your account does not by itself cancel a subscription purchased on Google Play or the App Store: that cancellation is done in the corresponding store, because the store administers the charge.

11. Your rights

You have the right to access, rectify, update and erase your data, and to request its portability. You can exercise those rights from within the app or by writing to soporte@chronoprotein.com.ar.

Argentina's Agency for Access to Public Information, the supervisory authority under Act No. 25,326, is empowered to handle complaints regarding non-compliance with personal data protection rules.

If you reside in the European Economic Area or the United Kingdom, you additionally hold the rights to object and to restrict processing set out in the General Data Protection Regulation, and you may lodge a complaint with your local supervisory authority.

12. Security

• All traffic travels encrypted over TLS and data is stored encrypted at rest.
• Data access is restricted row by row through row level security policies: an account can only read its own records.
• Health files live in a private bucket and are served through short-lived signed links. Uploading a file is not sharing it: sharing it with a professional is an explicit and revocable act.
• Your recipe photos live in a private bucket and are only shown to other people if you publish the recipe and it is approved.
• No security measure is infallible. If we detect a data breach affecting your personal data, we will notify you by email.

13. Minors

ChronoProtein is intended exclusively for people over eighteen (18) years of age. We do not knowingly collect data from minors. If we identify an account belonging to a minor, we delete it along with its data.

14. International transfers

Our infrastructure providers operate servers outside the Argentine Republic, mainly in the United States and the European Union. Transfers take place under the contractual clauses and adequate protection commitments each provider offers.

15. Changes to this policy

If we amend this policy, we update the date in the header. When a change materially affects how we handle your data, we notify you inside the app before it takes effect.

16. Contact

Write to soporte@chronoprotein.com.ar with any question, request or complaint about your personal data.