Privacy Policy

Effective 11 October 2026 · Applies to the KaloBite app for Android

1. Who we are

KaloBite is a calorie and nutrition tracking app for Android, built and run by an independent developer (“we”, “us”). This policy explains what data KaloBite collects, why, who it is shared with, and the choices you have. If you use KaloBite, you agree to the practices described here.

2. What we collect

Account information

• Email and password if you sign up with email. Passwords are handled by our authentication provider and stored as a hash, so we never see them.
• Name, email address and Google account ID if you sign in with Google.

Profile and health information you provide

• Sex, age or birth year, height, weight, activity level, goal (lose, maintain or gain) and target pace.
• Your daily calorie target and protein, carbohydrate and fat split, whether calculated or set by hand.
• App preferences such as units and whether notifications and reminders are on.

Logs and content you create

• Food entries, custom foods, favourite and recent foods, and saved recipes.
• Water intake, weight history and logged activities.
• Meal scan results: meal name, estimated calories and number of items, with a timestamp.
• Progress data such as streaks, challenges, badges, levels and your daily meal-scan allowance.
• Reports you send about a meal scan result: the reason you picked and the result as it was shown (meal name, foods, grams and calories). The photo is not included.

Purchases

KaloBite is currently free and has no in-app purchases or subscriptions, so we collect no payment or purchase information. If that changes, we will update this policy first.

Technical information

Our service providers may log basic technical data when the app talks to their servers, such as IP address, device and OS type, app version, request time and error details. We use it to keep the service running and to fix problems.

Device identifier. When you create an account, the app reads your device's Android ID and sends only a one-way hash of it to our server, never the ID itself. We use it for one purpose: to stop a single device from claiming the new-account bonus many times. It is not used for advertising or to track you across apps.

We do not collect your precise location, contacts, microphone audio, or files outside the app.

3. Meal photos

When you scan a meal, the photo you take is sent securely to our server and then to Google's Gemini API, which estimates the foods, calories and macros. Then:

• Only the result (meal name, calories, item count) is saved to your account. The photo is not stored in your KaloBite account or database.
• To improve scan accuracy and debug failed scans, we may keep a diagnostic record of a scan, which can include the photo and the model's response, in our monitoring tool (Langfuse). Only the developer can access these records. They are kept for a limited time (see section 7) and are never published or sold.
• Google processes the photo under its Gemini API Terms.

Please don't photograph people, documents or anything else you don't want processed. Point the camera at your food only.

4. How we use your data

• To provide the app: calculate your targets, record and show your logs, run meal scans, and sync your data across devices you sign in on.
• To run meal scans and challenges: keep track of your daily scan allowance and the progress and rewards you earn.
• To send reminders you turn on, such as streak or logging reminders.
• To keep KaloBite working and secure: diagnose errors, stop abuse (including with the hashed device identifier described above), and improve scan accuracy, including by reviewing results you report.
• To reply when you contact us.

We don't sell your personal data, we don't share it with data brokers, and we don't use your health information for advertising.

If you are in the EEA or UK, our legal bases are: performance of our contract with you (providing the app), your explicit consent for health-related information you choose to enter, and our legitimate interests in securing and improving the service.

5. Who we share it with

We share data only with the service providers needed to run KaloBite. They process it for us and may not use it for their own purposes, except where their own terms linked below say otherwise.

These providers may store and process data in the United States and other countries. Where required, they use safeguards such as Standard Contractual Clauses.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or transfer of the app. If the app changes hands, this policy will continue to apply to your data.

Advertising

KaloBite does not show ads and does not collect or use your device's advertising ID.

6. Device permissions

• Camera: to take meal photos for scanning. Only used when you open the scanner.
• Notifications: to send the reminders you turn on. You can turn this off at any time in the app or in Android settings.
• Internet: to sign in, sync your data and run meal scans.

7. How long we keep it

• Account, profile and logs: until you delete them or your account.
• Scan diagnostics in Langfuse: up to 90 days, then deleted.
• Scan result reports: until you delete your account, when they are deleted with it.
• Technical logs kept by our providers: deleted on their standard schedules, usually within a few weeks.

8. Deleting your account

In the app, open Profile and tap Delete account & data. This permanently deletes your account and everything linked to it from our database: profile, food, water, weight and activity logs, recipes and scan history and any scan reports you sent. It cannot be undone.

You can also request deletion without the app on our account deletion page. If you can't access the app, email us from the address on your account at muhammadzainulabadeen7@gmail.com with the subject “KaloBite account deletion”. We will delete your account within 30 days and confirm by email.

9. Your rights

Depending on where you live, including under the GDPR, UK GDPR and California law, you may have the right to:

• access a copy of your data, or receive it in a portable format;
• correct inaccurate data (you can edit most of it directly in the app);
• delete your data;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting processing that has already happened;
• complain to your local data protection authority.

To use any of these rights, email us at the address below. We will reply within 30 days. We will never treat you differently for using your rights.

10. Security

All data travels over encrypted HTTPS connections. Our database uses row-level security, so each account can read and write only its own records. Secret keys stay on our servers and are not built into the app. No system is completely secure, but we work to protect your data and will notify you as the law requires if a breach affects you.

11. Children

KaloBite is intended for adults aged 18 and over. The app does not accept a younger age during setup, and we do not knowingly collect data from anyone under 18. Calorie tracking and weight-loss targets are not suitable for children or teenagers without guidance from a health professional. If you believe someone under 18 has given us data, contact us and we will delete it.

12. Not medical advice

Calorie and macro figures in KaloBite, including meal scan results, are estimates. KaloBite is a tracking tool, not a medical device, and does not give medical advice. Talk to a qualified health professional before making major changes to your diet, especially if you are pregnant, have a medical condition or have a history of disordered eating.

13. Changes to this policy

We may update this policy as KaloBite changes. We will change the effective date at the top and, for significant changes, tell you in the app before they take effect.

14. Contact

Questions or requests about your privacy: muhammadzainulabadeen7@gmail.com