Privacy Policy

Last Updated: 14 November 2025

1. Introduction

Welcome to Kalo (“we”, “us”, or “our”). We are committed to protecting your privacy and handling your personal data in a secure and transparent way.

This Privacy Policy explains how we collect, use, store, and share information when you use the Kalo mobile application (“App”), visit our website at thekalo.app (“Website”), or interact with us in any other way.

If you have any questions, please contact us at support@thekalo.app.


2. What Information We Collect

2.1 Information You Provide

We may collect the following information that you provide directly:

  • Email address and password

  • Profile information such as age, height, weight, gender, and goals

  • Nutrition and lifestyle information, including logged foods and barcode scans

  • Optional health-related information such as activity levels and daily calorie intake

  • Feedback, support queries, and any information you choose to submit


2.2 Automatically Collected Information

When you use the App or Website, we may automatically collect:

  • Device identifiers

  • Usage events and feature interactions

  • Crash logs and performance diagnostics

  • Subscription events such as trials, renewals, and cancellations

  • IP address and device metadata


2.3 Website Data

When you visit our Website, we may also collect:

  • Cookies

  • Log files

  • Browser type

  • IP address

  • General analytics data


3. How We Use Your Information

We use your information to:

  • Provide and personalise the Kalo service

  • Calculate calorie and nutrition recommendations

  • Improve app features and user experience

  • Analyse performance and usage patterns

  • Process payments, trials, and subscriptions

  • Deliver customer support and respond to enquiries

  • Maintain security and prevent fraud

  • Operate, optimise, and grow the platform


We do not sell personal data.


4. Legal Basis (UK GDPR / EU GDPR)

We rely on the following lawful bases to process your information:

  • Performance of contract: to operate and provide access to the Kalo App.

  • Legitimate interests: to analyse usage, improve the product, and maintain security.

  • Consent: for website cookie usage and certain analytics where required by law.

  • Legal obligations: for financial record-keeping, fraud prevention, or compliance purposes.


5. Third-Party Data Providers and Analytics Partners

To operate Kalo and deliver app functionality, we use trusted third-party services.


5.1 Nutrition and Food Data Providers

FatSecret Platform API  
We use the FatSecret Platform API to provide nutrition data, food search results, and barcode lookups.

Open Food Facts (ODbL)  
We use open-source food and barcode information from the Open Food Facts database, which is made available under the Open Database License (ODbL). Attribution: “Contains data from Open Food Facts, available under the Open Database License (ODbL).”

We do not share personal data with these food data providers.


5.2 Analytics, Attribution and Subscription Providers

Mixpanel  
We use Mixpanel for product analytics, feature usage analysis, and app improvement.

AppsFlyer  
We use AppsFlyer for mobile attribution, install measurement, and marketing analytics.

Adapty  
We use Adapty for subscription management, including trials, renewals, cancellations, and paywall interactions.

These providers may collect and process device identifiers, IP address, session data, and subscription-related events. They do not receive your food logs, calorie data, weight data, or other sensitive health information.


5.3 Cloud Infrastructure and Security

We may use cloud platforms (for example, AWS or Firebase) to securely store data, manage authentication, run the service, and protect the platform from abuse.


6. How We Share Information

We may share your information with:

  • The service providers listed in this Privacy Policy

  • Cloud hosting and infrastructure providers

  • Legal authorities when required by law or to protect our rights

  • Fraud prevention and security partners

  • Vendors acting strictly on our behalf and under our instructions

We never share your logged food data, health data, or weight data with advertisers for their own independent use.


7. Data Retention

We retain data for as long as necessary to provide the service and for legitimate business or legal purposes:

  • Account and profile data: retained until you delete your account or we no longer need it to provide the service.

  • Food logs and nutrition history: retained while your account remains active.

  • Analytics data: typically retained for 12–36 months.

  • Subscription and payment history: retained as required for financial, tax, and audit purposes.

You may request deletion of your account and data at any time, subject to legal or regulatory obligations that may require certain records to be retained for a longer period.


8. Your Rights

If you are located in the UK or EU, you have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data we hold about you.

  • Right to rectification: to correct inaccurate or incomplete data.

  • Right to erasure: to request deletion of your personal data, where applicable.

  • Right to restrict processing: to limit how we use your data in certain circumstances.

  • Right to data portability: to receive your data in a structured, commonly used format and transmit it to another controller where technically feasible.

  • Right to object: to object to certain types of processing, including direct marketing or processing based on legitimate interests.

  • Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@thekalo.app.


9. Children’s Privacy

Kalo is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us so that we can delete that information.


10. Cookies and Website Tracking

Our Website may use cookies or similar technologies to:

  • Enable essential site functions and security

  • Analyse website activity and performance

  • Improve the user experience on the Website

Where required by UK PECR or GDPR, we will seek your consent before setting non-essential cookies, such as analytics cookies. You may adjust your cookie preferences through your browser settings or, where available, through the cookie banner.

The Kalo mobile app does not use cookies, but may use SDK-based analytics and attribution tools as described in this Privacy Policy.


11. Security

We use industry-standard security measures to protect your personal data, including:

  • Encryption of data in transit and at rest where appropriate

  • Restricted access controls and authentication mechanisms

  • Monitoring and intrusion detection measures

  • Secure storage of authentication data and credentials

While we take reasonable steps to protect your information, no system is completely secure. We cannot guarantee the absolute security of your data, but we are committed to continually improving our security practices.


12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where changes are significant, we may notify you within the App or via email.


13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, you can contact us at:

Email:
support@thekalo.app  

Website:
www.thekalo.app