Your meal photos are never stored on our servers. A photo is sent for analysis, the nutrition numbers come back, and the image is discarded in the same request. It is not written to a database, a file store, or a log. The photo stays on your phone.
Kaloro has no account and no login. We do not know your name unless you typed one into the app, and that stays on your device.
When you scan a meal, the photo is sent to our server, which forwards it to Google's Gemini API for analysis and returns the result to your phone. Neither we nor Google retain the image for training. It is held only for the seconds the request takes.
Each installation gets a random identifier from RevenueCat, our subscription provider, and a second random install identifier kept in your phone's Keychain, so the free scan allowance is not reset by reinstalling the app. Both are sent with every scan, so they are linked to each other and to your subscription record. We use them to count your free photo scans, to know whether you have an active subscription, and to stop a leaked identifier from running up an unlimited bill. Neither is the advertising identifier, and neither is linked to your name or email.
If you subscribe, Apple processes the payment. We never see your card. RevenueCat tells us that a subscription exists, when it renews, and when it ends.
We count things like "how many people finished onboarding", "did anyone use the correction chips", whether camera access was allowed, whether a scan came from the camera or the photo library, and whether a meal was scanned before the subscription screen appeared, so we can tell which parts of the app work. These are counts attached to the RevenueCat identifier above. No meal names, photos or body measurements are included. No screen recordings, no behavioural profile.
Your name, height, weight, age, goals, meal history and photos are stored on your device (and in your own iCloud backup if you have one enabled). We cannot read them.
Kaloro does not track you across other companies' apps or websites, never reads the advertising identifier, and so does not ask for App Tracking Transparency permission. Meta's app SDK records app events such as installs, app opens and purchases so that our ad campaigns can be measured; attribution runs through Apple's SKAdNetwork, without the advertising identifier. We do not sell data to anyone, and we do not build advertising profiles.
Kaloro is rated 17+ and blocks anyone under 18 during onboarding. Calorie restriction in adolescence belongs with a clinician, not an app. We do not knowingly process data from anyone under 18.
Because we hold almost nothing that identifies you, deletion is mostly in your hands: removing the app removes your profile, history and photos. To ask about the anonymous identifier or your subscription record, write to necatidogrul7@gmail.com and we will answer within 30 days.
If this policy changes in a way that affects you, the date above changes and the app will tell you.
Yemek fotoğrafların sunucularımızda saklanmıyor. Fotoğraf analiz için gönderiliyor, besin değerleri dönüyor ve görüntü aynı istek içinde siliniyor. Veritabanına, dosya deposuna veya log'a yazılmıyor. Fotoğraf telefonunda kalıyor.
Kaloro'da hesap ve giriş yok. Adın, boyun, kilon, hedeflerin ve öğün geçmişin yalnızca cihazında duruyor — biz okuyamıyoruz.
Abonelik durumunu ve ücretsiz tarama hakkını takip etmek için RevenueCat'ten gelen rastgele bir kimlik ve Anahtar Zinciri'nde tutulan rastgele bir kurulum kimliği kullanıyoruz; ikisi birlikte gönderildiği için birbirine ve abonelik kaydına bağlı, ama reklam kimliği değil ve adına ya da e-postana bağlı değil. Uygulamanın hangi adımlarının işe yaradığını anlamak için anonim sayaçlar tutuyoruz (ör. kamera izni, tarama kameradan mı galeriden mi); yemek adı, fotoğraf veya vücut ölçüsü içermez. Ödemeyi Apple işliyor, kartını hiç görmüyoruz.
Uygulama 17+ derecelendirmesinde ve onboarding'de 18 yaş altını engelliyor.
Soru için: necatidogrul7@gmail.com