changaal logo

Privacy Policy

This Privacy Policy outlines the types of personal information collected when you access and use the Changaal website and mobile apps (referred to as the "Website," "App," or collectively the "Service"). It also details how your personal information will be processed, shared, and how you can manage it.

BY USING THE SERVICE, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND ACCEPT THIS PRIVACY POLICY.

How We Collect Information:

The type of information we gather varies based on your interactions with us, the services you utilize, and the preferences you set. We collect information about you through multiple sources and methods when you engage with our services. This includes data you provide directly, data collected automatically, information obtained from third-party sources, and insights we derive or generate from other data.

Data you give us

When you sign up for or use Changaal, certain personal details are shared with us, including:

Basic Personal Information: We collect details like your name, username, or alias, as well as contact information such as your email address, postal address, and phone number.

Demographic Data: We may ask for or you may provide information such as your age, gender, marital status, or other demographic details.

Payment Information: When you make a purchase or conduct a financial transaction, we gather credit card details, financial account information, and other payment-related data.

Content and Files: We collect any photos, documents, or files that you upload to Changaal. Additionally, if you communicate with us via email or other messaging platforms, we store and retain those communications.

Sensitive Personal Information:

Account Access Information: We collect data like usernames or account numbers along with passwords, security codes, or other credentials that grant access to your account.

Health Data: Information regarding your health, including weight, height, target weight, exercise routines, daily water intake, daily step counts, and dietary habits, is collected and analyzed for the purpose of providing you with our services.

Technical Data we collect automatically

When you interact with our website or mobile application, specific information about your internet and electronic network activities is generated and recorded automatically. Below are the types of data we collect:

Log Data: Our servers automatically log information ("log data") when you use Changaal. This includes details your browser sends whenever you visit our site or information your mobile app transmits during its use. The log data comprises your IP address, browser type, and configuration, along with the date and time of your usage.

Geolocation Data: Depending on your device and application settings, we may gather geolocation data while you access our services. For instance, we can estimate your approximate geographic location (like city, state, and country) based on your IP address.

Cookie Data: We and our partners utilize cookies, web beacons, mobile analytics, advertising IDs, and other similar technologies. These tools are employed across our websites, apps, and online services to gather personal data, including the pages you visit, links you click, and other usage details. This also encompasses information about your online behavior over time and across various platforms.

Device Information: Alongside log data, we collect details regarding the device you use to access Changaal, such as the device type, operating system, settings, unique device identifiers, and any crash reports.

Usage Data and Personalization: While using Changaal, we analyze your activities—such as the foods you commonly log—to enhance your experience. We also automatically record your interactions on our websites, apps, and connected devices, including the URL of the site you visited prior to ours, pages viewed, time spent on each page, access times, and additional usage details.

Sensor Data: If you choose to link third-party sensors, we may receive data from those devices. For example, if you connect your Apple Watch Health App to Changaal, we can access and help you monitor your step count and exercise metrics.

Generated Information: We may derive new insights from the data we collect using automated methods. This includes making inferences about your likely preferences or characteristics based on the information gathered. For instance, we can estimate your BMI from the height and weight data you provide.

Information Collected from Third-Party Services:

We also gather the types of information mentioned above from external sources. These third-party sources include:

Third-Party Partners: This includes applications and services, such as social networks, that you opt to connect with our services. The information we can access is determined by the privacy settings or policies of those accounts.

Information from Our Advertisers: We receive data regarding your activities from our advertising partners and other collaborators. For instance, online advertisers and third-party entities provide us with information to assess, report on, or enhance the effectiveness of advertisements for Changaal.

Co-Branding and Marketing Partners: We collaborate with partners for co-branded services or joint marketing initiatives.

Service Providers: We work with third-party organizations that collect or supply data in relation to the services they perform on our behalf. For example, some companies help us identify your device’s location based on its IP address.

When requested to provide your information, you have the option to decline or adjust your browser or device settings to limit specific types of data collection. However, if you decide not to share certain necessary information, some features or services may not be accessible or function properly.

Our Use of Collected Information

We are dedicated to delivering a service that is engaging, relevant, and tailored to your needs. To achieve this, we utilize your information to enhance and personalize your experience.

How We Use ItWhat Data We Collect
To provide and deliver products and services, including order fulfillment, troubleshooting, and service personalization.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Account access information, contents of communications, and health data.
To understand your preferences and enhance your experience while using our services.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Account access information, contents of communications, and health data.
To provide assistance and respond to your inquiries.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Account access information, contents of communications, and health data.
To send you information, including confirmations, invoices, technical notices, updates, security alerts, reminders, support, and administrative messages.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Health data.
To enhance our existing products and services, develop new offerings (including AI/ML), and conduct user research (surveys, interviews).Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Account access information, contents of communications, and health data.
To manage our business activities, such as billing, accounting, enhancing internal operations, securing systems, detecting fraudulent or illegal activities, and fulfilling legal obligations.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Account access information, contents of communications, and health data.
To inform you about new services, offers, promotions, rewards, contests, upcoming events, and other information related to our services and those of our selected partners.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Health data.
To present advertisements to you.Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, log data, usage data, sensor data, and inferences.
Sensitive Information: Health data.

Sharing of Your Information

We may share your personal information with various parties under specific circumstances, including:

Connected Services:

We share your information with other services if you choose to link your account to them. This may include third-party apps or platforms you have authorized. Data shared with these services is subject to their respective privacy policies.

Service Providers:

We may share your personal information with trusted vendors or agents acting on our behalf. These partners assist with functions such as customer support, system security, and service improvement, requiring access to your data for those purposes.

Financial Institutions and Payment Processing:

For any purchases or transactions, your payment information is shared with banks or other entities to enable payment processing, fraud prevention, and related financial services.

Corporate Transactions:

In the event of corporate changes such as mergers, acquisitions, bankruptcy, or business sales, your information may be shared or transferred as part of such transactions.

Legal Obligations:

We may disclose your information to comply with legal requirements, respond to valid legal processes, or cooperate with law enforcement or government agencies.

Security and Risk Protection:

Your information may be shared to protect the safety and security of our customers, services, and systems. This includes preventing fraud, enforcing our policies, and ensuring the security of our network.

Advertising and Analytics Providers:

Third-party companies, such as analytics or advertising partners, collect personal data through our platform. This can include device identifiers, IP addresses, and usage data, which may be aggregated across multiple services to enhance analytics and marketing. For example, Google Analytics is used to help understand website usage patterns, and you can review their privacy practices atwww.google.com/policies/privacy/partners.

Data Retention

We retain your information for as long as necessary to deliver our services, fulfill the purposes outlined in this policy, comply with legal requirements, resolve disputes, and enforce our agreements. The exact duration of retention may vary depending on factors such as your consent, the nature and sensitivity of the data, available automated controls, and any legal or contractual obligations we must adhere to.

Your Rights:

We offer you straightforward and meaningful control over your personal information. If you have an account with us, many options can be accessed directly through your account settings. For instance, you can:

In certain regions, the above mentioned choices may also be recognized as enforceable rights under local laws.

Access and Portability: You can request to receive your data in a portable format, and we will typically provide it within 30 days. To initiate a data export, reach out to our support.

Objection to Processing: You have the right to ask us to stop processing your data for specific purposes, such as marketing. If you opt out of marketing communications, we may still send you account-related notifications like login reminders.

Targeted Advertising: To opt-out or adjust your preferences for targeted ads, refer to our Cookie Policy.

Data Sharing or Sales: Certain privacy laws categorize some data disclosures as “sharing” or “selling”. You may have the right to opt out of the "sale" or "sharing" of your personal information. As part of our services, Changaal may share information about you and your interactions with Changaal to facilitate interest-based marketing and advertising beyond our platform. Additionally, you may have the right to limit the use of sensitive personal information for purposes other than providing Changaal services. Since we are a wellness service, much of the information we collect relates to your health. if you prefer that we do not share information about you or your use of Changaal for marketing and advertising purposes, please contact our support.

Browser and Device Controls: For information on using your browser or device settings to manage your data preferences, including the Global Privacy Control, please refer to our Cookie Policy. If you have any questions, feel free to contact us.

Transferring your information:

The information we collect may be stored and processed in Canada or any other country where we or our affiliates, subsidiaries, or service providers operate. Currently, we primarily use data centers in Canada, chosen to ensure efficient operations and improve our performance.

We take steps to protect your information as outlined in this policy, regardless of where it is stored. Some of these locations may not have data protection laws deemed adequate by authorities like the European Commission. When transferring data internationally, we use legal mechanisms, including contracts, to ensure your rights and protections are upheld. For more information on Canada’s data protection regulations, please refer to the Personal Information Protection and Electronic Documents Act (PIPEDA).

Rights and Disclosures for Residents of Specific Regions

Residents of certain regions may have additional rights and choices, depending on local privacy laws, including:

1. Notice at Collection:

You have a right to be informed about our data collection practices before or when we collect your information. This includes details about the categories of information collected, the purposes for collection, and whether the information is shared or sold. You can find these details in this policy under the relevant headers.

2. Right to Access:

You have the right to request a copy of the information we have collected about you. To access your data, you may contact our support. You also have the right to request additional details about our collection, use, and sharing practices.

3. Right to Opt-Out or Limit Use of Personal Information:

You have the right to opt out of certain data-sharing practices, including the "sale" or "sharing" of your personal information for marketing and advertising purposes. You may also request that we limit the use of sensitive personal information to purposes that are strictly necessary for providing our services. To learn more or make these requests, please contact our support.

4. No Discrimination:

We will never discriminate against you for exercising any of these rights.

5. Authorized Agents:

You may designate an authorized agent to exercise these rights on your behalf. Before accepting a request from an agent, we will require proof that you have authorized them to act on your behalf, and we may also need you to verify your identity directly with us.

6. California Shine the Light Law Notice

Following California Civil Code Section 1798.83, commonly referred to as the "Shine the Light" law, residents of California who have shared personal information with a business for personal, family, or household use ("California Customers") are entitled to request details about whether their personal information has been shared with third parties for direct marketing purposes.

7. Rights for Residents of the EEA, UK, and Switzerland

If your information is processed under the data protection laws of the European Economic Area (EEA), the United Kingdom, or Switzerland, you have specific rights regarding that data:

7.1 Access and Correction: You may request access to your information and request corrections or deletions by contacting our support.

7.2 Data Portability: If any automated processing is based on your consent or a contract, you have the right to obtain a copy of your data in a usable and portable format.

7.3 Withdraw Consent: If the processing is based on your consent, you can withdraw that consent at any time for future processing.

7.4 Object and Restrict Processing: You can object to or request a restriction on the processing of your information under certain conditions.

7.5 Post-Mortem Instructions: For residents of France, you may provide specific instructions regarding the use of your data after your death.

To make any of these requests, please reach out to our customer support team. If we are processing data on behalf of another party acting as the “data controller,” please direct your request to that party. You also have the right to file a complaint with a supervisory authority; however, we recommend contacting us first with any inquiries or concerns.

We base our collection and processing of your information on various legal grounds, including your consent, the necessity to provide our services, operational needs, legal obligations, security requirements, or other legitimate interests.

If you have any questions about our data processing practices, feel free to contact our support.

If you believe we have not complied with data protection regulations, you have the right to lodge a complaint with the entity governing privacy in your jurisdiction

If you are not a resident of these regions, the rights described here may not apply to you. However, we still aim to protect your privacy and handle your information responsibly in accordance with applicable laws.

Updates to This Policy

We may periodically update this policy, and any changes will be posted on this page. By continuing to use Changaal after the changes take effect, you agree to the updated policy. For significant changes, we may provide a more prominent notice or seek your consent before implementing the changes.

Contact us:

The best way to get in touch with us is by: support@changaal.com

Last Updated: 26.12.2024