Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Featcal ("we," "our," "us") is committed to protecting your privacy and ensuring compliance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), as well as other international regulations where applicable (such as GDPR).
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website (featcal.com), mobile applications, and related services (collectively, the "Services").
By using Featcal, you consent to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Personal Information
Name, email address, phone number, and login credentials
Payment and billing information (if applicable)
Professional or organizational details (for doctors, nutritionists, or coaches)
1.2 Health & Wellness Information
Body measurements and metrics (e.g., weight, BMI, body fat, hydration, sleep, steps, heart rate)
Nutrition data (food logs, photos, dietary preferences, allergies, meal plans)
Fitness information (workout plans, activities, consultation notes)
Device integration data from third parties such as InBody, Seca, Omron, and Tanita
1.3 Automatically Collected Information
Device information (hardware model, operating system, browser type)
Usage data (logins, feature use, pages visited, actions within the app)
IP address, location (if enabled), cookies or similar technologies
1.4 Communication Data
Messages, notes, or consultation summaries exchanged between professionals and clients
Responses from AI-powered chatbot interactions
2. How We Use Your Information
We use your information to:
Provide and personalize the Services (meal plans, workout plans, progress tracking)
Facilitate integrations with third-party health devices and platforms
Automate nutrition analysis, consultation summaries, and progress reports using AI
Send push notifications, reminders, and engagement messages
Support secure communication between professionals and their patients or clients
Process payments, subscriptions, and account management
Improve performance, functionality, and security of the Services
Conduct analytics and generate anonymized insights for product improvement
Meet regulatory and compliance requirements (including PIPEDA and Law 25)
3. Consent
We will always request explicit consent before collecting, using, or sharing sensitive personal information such as health data.
Consent is requested at the time of registration and can be withdrawn at any time by contacting us (see Section 10).
If you withdraw consent, certain features of the Services may no longer be available.
4. Sharing of Information
We do not sell your personal information.
We may share your data in the following cases:
With Healthcare Providers and Coaches:
If you are a patient or client, your information may be shared with your assigned professional for the purposes of care, coaching, and progress tracking.
Service Providers:
With trusted vendors who perform services on our behalf (hosting, analytics, payment processing, cloud storage, AI models).
Integrations:
When you choose to connect external devices or services (InBody, Seca, Omron, Tanita), we share the necessary data to enable these integrations.
Legal Obligations:
If required by law, regulation, or valid legal request.
Business Transfers:
In the event of a merger, acquisition, or sale of assets.
5. International Data Transfers
Your information may be processed and stored outside Québec and Canada, including in the United States and other jurisdictions.
When this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses, data protection agreements, or equivalent legal protections, in compliance with Law 25.
6. Data Security
We implement industry-standard safeguards to protect your information, including:
Encryption in transit and at rest
Role-based access controls and secure authentication
Regular monitoring and vulnerability testing
Healthcare-grade security infrastructure for handling health-related data
While we take reasonable steps to protect your data, no system is 100% secure.
7. Data Retention
We retain personal and health data only as long as necessary to fulfill the purposes described in this policy, or as required by law.
Users may request deletion of their account and associated data at any time (subject to legal or medical record retention requirements).
8. Your Rights
In accordance with PIPEDA, Law 25, and other applicable laws, you have the right to:
Access and obtain a copy of your data
Request correction or deletion of your data
Restrict or object to processing
Withdraw consent at any time
Receive your data in a structured, portable format (data portability)
File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec
Requests can be made to privacy@featcal.com
9. Children's Privacy
Featcal is not intended for individuals under 18 years of age.
We do not knowingly collect information from minors.
If such information is discovered, it will be deleted.
10. Privacy Officer
In compliance with Law 25, Featcal has appointed a Privacy Officer responsible for oversight and compliance.
Privacy Officer
Email: privacy@featcal.com
Address: [Insert Business Address]
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Changes will be posted on this page with the updated date.
Significant updates will be communicated through email or in-app notifications.
12. Contact Us
If you have questions or requests regarding this Privacy Policy or how your information is handled, you can contact us at:
Featcal
Email: privacy@featcal.com
Website: https://featcal.com