Privacy Policy

This Privacy Policy explains how Kcaloi ("we", "us") handles information when you use the Kcaloi app and kcaloi.com. We built Kcaloi to help you understand your nutrition — your data exists to power that experience, never to be sold.

We collect only what we need to make Kcaloi work for you:

• Account information: email address and authentication identifiers (including Sign in with Apple).
• Profile & goals: details you provide such as age, height, weight, activity level, and dietary goals.
• Food logs: photos you scan, foods you log, and the resulting nutrition data.
• Health data: with your permission, metrics synced from Apple Health (e.g. weight, energy, activity).
• Usage & device data: requested scan type, AI token counts, response latency, success status, app interactions, and basic device information used to enforce fair-use limits and keep the service reliable and secure.

We use your information to provide and improve Kcaloi — analyzing food photos, calculating calories and macros, generating reports, syncing with Apple Health, and personalizing your goals.

Food photos you scan are processed solely to return the nutrition analysis you requested. Kcaloi does not persist the submitted photo bytes on its server after the request completes; a copy stays on your device only when you save it with a meal. Your personal content is never used for advertising.

Health and fitness data is sensitive. Data obtained through Apple Health is used only to provide app features you request and is never used for advertising or sold to third parties, consistent with Apple's HealthKit requirements.

Food, menu, and fridge photos are processed only to provide the Kcaloi analysis you request. Apple Health data is not included with a photo-analysis request, and submitted content is never sold or used for advertising.

Data is otherwise shared only with service providers necessary to operate Kcaloi, when required by law, or to protect users and the service. We require service providers handling personal data to provide the same or equal protection described in this policy.

This applies to the kcaloi.com website only — the Kcaloi app contains no analytics SDK, and no health or nutrition data is ever sent to an analytics provider.

We use Google Analytics 4 (Google Ireland Limited) to measure aggregate website traffic, such as page views and referrers. It is loaded with Google Consent Mode defaulting to denied and with IP anonymisation, so no analytics identifier is stored until consent is granted. Google acts as our processor, and transfers outside the UK/EEA rely on Google's Standard Contractual Clauses.

Cookie names, lifetimes, and opt-out options are listed in our Cookie Policy.

Account, nutrition, and scan-result data is retained while your account is active so Kcaloi can provide the service. When you use Delete Account in the app, your account and associated personal data are removed from active systems immediately. Residual copies in encrypted disaster-recovery backups are isolated from normal use and age out within 30 days.

You can permanently delete your account in Profile. Depending on where you live, you may also have rights to access or correct your personal information; contact us to make an access request.

We use industry-standard measures including encryption in transit, hashed credentials, and access controls. No method of transmission or storage is 100% secure, but we work hard to protect your data.

Kcaloi is designed for adults age 18 and older. We do not knowingly collect account or health information from children.

We may update this policy from time to time; material changes will be reflected by the date above.

Questions? Email us at hello@kcaloi.com.