Privacy Policy

Your data protection is built into the system at Kalio. As a "Local-First" app, your private health data is not transferred to our servers by default.

1. Controller

Max Trommer
Lienhardweg 13
12557, Berlin
Email: [email protected]

2. Data Processing

Local Storage (Offline)

All data you enter in the app (meals, calorie goals, meal photos, settings) is stored exclusively locally in your device's IndexedDB. Optional meal photos are stored as compressed images on the device. We have no access to this data. If you uninstall the app, this data will be deleted unless you have created a manual backup. With the optional large offline database, the app can be used 100% offline; only AI features require an internet connection.

External Services (Online Functions)

The app only uses the internet if you explicitly use the following functions:

Product Search & Barcode Scanner: The app first checks the optional offline database. Only if there is no match does it send the barcode or search term to the Open Food Facts API. No personal data is sent.
Subscription Management: For the Pro version, we use RevenueCat. An anonymous ID and the app store receipt are transmitted to check the purchase status.
AI Analysis (Optional): If you use AI capture (text, dictation, and/or images), data is transferred to the chosen provider (Google Gemini, OpenAI, or Anthropic Claude). You can choose a preset model or enter a custom model ID.
- With Kalio Pro, the request runs through our proxy server for subscription validation; texts/images are not stored permanently on our proxy.
- With your own API key (BYOK) for Gemini, OpenAI, or Anthropic, the data goes directly from your device to that provider.
- Without Pro and without your own key, AI analysis is not available.

3. Permissions

The app asks for access to:

Camera / Gallery: For scanning barcodes, taking or selecting meal photos, and optional AI photo analysis.
Microphone: Optional, only if you use speech-to-text dictation for AI capture.
Storage / Share: For exporting and importing .kalio backups (JSON content; .json also accepted on import). Backups may include meal photos (as Base64). API keys are stripped from exports and are not included in the backup file.

4. Your Rights

Under GDPR, you have the right to information, correction, or deletion of your data. Since we do not store any of your data on our servers (no user accounts), you can exercise these rights most effectively yourself by deleting entries in the app or uninstalling the app.

Imprint

Information according to § 5 TMG:

Max Trommer
Lienhardweg 13
12557 Berlin
Email: [email protected]