Cookie Policy.

01What cookies are

A "cookie" is a small text file that a website places on your device when you visit. Cookies have many purposes — some are essential for the site to function, others are used for analytics or advertising.

This Cookie Policy describes what cookies are used on kaleway.com (our marketing website). It does not describe data handling within the KaleWay app — that is described in our Privacy Policy and AI Privacy Notice.

For any term used here that overlaps with our Privacy Policy, the Privacy Policy controls.

02What cookies KaleWay uses

KaleWay uses a deliberately small set of cookies on kaleway.com.

2.1 Strictly necessary cookies

These keep the website functioning. We do not ask for consent to use them because removing them would break the site.

Examples:

• Session identifier — remembers your visit across pages (so navigating from /privacy-policy to /terms-of-service doesn't reset the experience).
• CSRF protection — protects forms (like the contact form on /support) from cross-site request forgery attacks.
• Cookie consent state — remembers whether you've made a choice on our cookie banner (if shown).

Retention: typically the duration of your visit (session cookies) or up to 12 months (consent state).

2.2 Analytics (currently none)

We do not currently use analytics cookies on kaleway.com. We use Vercel Analytics for aggregate page-view counts; it is privacy-respecting and does not place cookies on your device.

If we add a different analytics tool in the future (such as Plausible, Fathom, or a similar privacy-first solution), we will:

• Update this Cookie Policy
• Disclose the specific tool and what it tracks
• Where required by law, request your consent before placing the cookie

2.3 Advertising (none, and never)

We do not use advertising cookies. We do not place pixels or tracking tags from advertising networks (Meta, Google Ads, TikTok, etc.) on kaleway.com.

This is a permanent commitment, not a current state. We do not plan to introduce advertising cookies on our marketing website.

03Third-party cookies

Some third-party services we use may set cookies on your device when you interact with their content embedded on kaleway.com. These are limited and described below.

3.1 YouTube / Vimeo embeds

If we embed a video from YouTube or Vimeo on a marketing page, those services may set cookies in your browser when the video loads. We use "no-cookie" embed modes where available (for example, youtube-nocookie.com).

3.2 Vercel (our hosting platform)

We host kaleway.com on Vercel. Vercel may set a small number of cookies for security and operational reasons (for example, to detect and block automated abuse, or to route requests to the nearest edge). These are functionally necessary for the site to work and to defend against abuse.

3.3 What we do not embed

Scope. This Cookies Policy describes cookies and similar technologies on the kaleway.com website only. Our iOS app does not use cookies — it uses two attribution SDKs for advertising measurement: the Meta App Events SDK (existing) and the AppsFlyer SDK (added in V1.0.2 as a Mobile Measurement Partner that fans out to Meta, TikTok, Apple Search Ads, Google, and ~5,000 other ad networks). Both SDKs are disclosed in our Privacy Policy §5. The Meta SDK will be retired in a near-future release once the AppsFlyer migration completes. The bullets below describe the website's cookie practices specifically.

We do not embed:

• Facebook / Meta tracking pixels
• Google Analytics or Google Tag Manager
• LinkedIn Insight tags
• TikTok pixels
• Heatmap or session replay tools (Hotjar, FullStory, Microsoft Clarity, etc.)
• Customer data platforms (Segment, Rudderstack, etc.)

If you have ad-blocker software (uBlock Origin, AdGuard, Privacy Badger, etc.), it should not need to do any work on kaleway.com — the absence of these trackers is intentional.

04The KaleWay app does not use cookies

The KaleWay mobile app (iOS, and Android in the future) is a native application. It does not use cookies — cookies are a browser concept. The app stores some local data (your preferences, your weight log, etc.) on your device using standard mobile storage. That is not a cookie.

The app does communicate with our backend (Supabase) and with Anthropic's Claude API. Those communications are governed by our Privacy Policy and AI Privacy Notice, respectively.

05How to manage cookies

You have full control over cookies in your browser:

5.1 In your browser

Most browsers let you:

• See what cookies are stored
• Delete specific cookies or all cookies
• Block cookies from specific sites
• Block all third-party cookies
• Set "Do Not Track" preferences

Browser-specific instructions:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Safari: Settings → Privacy → Manage Website Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Edge: Settings → Cookies and site permissions

If you block all cookies on kaleway.com, the site will largely still work — but the consent banner (if you've seen one) may reappear on each visit, and forms may not behave correctly.

5.2 Cookie banner (where applicable)

If you visit kaleway.com from a region requiring explicit cookie consent (such as the EU, UK, or California for certain categories), you may see a cookie banner. This banner gives you the choice to accept, reject, or customize cookie preferences.

We currently use only strictly necessary cookies, so the banner — if shown — primarily exists for transparency rather than to gate analytics or advertising.

5.3 Global Privacy Control (GPC)

We honor the Global Privacy Control signal where applicable. If your browser sends a GPC signal, we treat it as a signal to opt out of any non-essential tracking — effectively the same as our default behavior, since we do not run tracking.

06Changes to this policy

We may update this Cookie Policy from time to time. When we make a material change (such as adding a new analytics or advertising cookie), we will:

• Update the "Last updated" date at the top
• Notify visitors through a banner on kaleway.com
• Where required by law, request your consent before placing any new non-essential cookie

You can always read the current version at kaleway.com/cookies.

Recent updates

• v1.3 — May 11, 2026. Expanded the §3.3 scope statement to disclose the AppsFlyer SDK as a second iOS in-app measurement integration added in V1.0.2, supplementing the existing Meta App Events SDK disclosure. Clarified the planned retirement of the Meta SDK once the AppsFlyer migration completes. (Version jumped from v1.1 to v1.3 to stay in lockstep with the other docs in this batch.)
• v1.1 — May 5, 2026. Added a scope statement at the top of §3.3 clarifying that the no-Meta-pixel commitment applies to the kaleway.com website only, with a cross-link to Privacy Policy §5 for the iOS app's separate Meta App Events SDK measurement disclosure.

07Contact

For questions about this Cookie Policy: