Privacy Policy
Last updated: September 22, 2026
This page covers both the kalo.quest website and the Kalo.Quest mobile app. It describes what stays on your device, the little that leaves it, to whom, and what you can ask of us.
1. Who is responsible for your data
The service is published by Smartness Home, a French SAS, 5 rue Agrippa d'Aubigné, 91090 Lisses, France (SIREN 829 550 185). Our contact address is on the Legal Notice page.
2. What stays on your device
The following is written to the app's private storage. We never receive it, and the app never uploads it to a server of ours or of a partner:
- your food log: meals, quantities, calories and macros;
- your weight entries and your goal (lose, maintain, gain);
- your sport sessions, streaks, trophies and points;
- your progress photos (before/after shots);
- your display preferences: theme and units.
Because this data lives only on your phone, uninstalling the app deletes it, and we have no copy to return to you. That is the trade-off of a local-first app, and we would rather state it plainly than hold your health data to avoid it.
One exception belongs to your phone, not to us: its own backup. It works differently on the two systems, so here is each one.
- On iPhone, if iCloud Backup is on, that backup can include an encrypted copy of the app's data inside your Apple account. It is your copy, in your account: we have no access to it and no way to read it. iOS gives an app no way to opt out on your behalf, so if you would rather that copy did not exist, exclude Kalo.Quest or turn the backup off under Settings → [your name] → iCloud.
- On Android, from the next update onwards, the app tells the system to keep its data out of both of Google's copy mechanisms: the automatic backup to your Google account, and the direct phone-to-phone transfer offered when you set up a new device. Your journal therefore stays on the phone that wrote it and does not follow you to the next one. If you installed Kalo.Quest before this was added, a copy may still sit in your Google account; you can review and delete your device backups under Settings → Google → Backup.
3. What leaves your device, and when
| Feature | What is sent | To whom | When |
|---|---|---|---|
| Photo meal analysis | The compressed photo of your plate | Google (Gemini API), through our stateless relay | Each time you analyze a meal |
| Ads | A device advertising identifier and approximate location from IP | Google AdMob and its partners | From the first ad shown (no consent form is required in the United States) |
| Ads | Usage and ad-interaction data: which ad was shown, tapped or skipped, and how the app was used around it | Google AdMob and its partners | Each time an ad is requested |
| Ads | Diagnostics from the ad SDK: crash reports and performance data | Google AdMob | Each time an ad is requested |
The last two rows are the advertising SDK's own doing, not ours: Google's ad library reports how its ads performed and when it crashed. What it is never given is your journal: your weight, your goal, your history and your progress photos are not handed to the ad SDK, and nothing you log is used to choose an ad.
To be exact about the first row, because it is the one that does concern your meals: what our relay receives is the photo of the plate you chose to analyze — or, if you type your meal instead and the app's built-in parser cannot make sense of it, the short line of text you typed — plus the display language. Nothing else: not your weight, not your goal, not your day's total, not your history. Your journal itself is never uploaded.
The photo of your meal is never kept. It passes through our relay, goes to Google to be analyzed, and is discarded once the result comes back. What is saved, on your phone, is the list of foods and their nutrition values, not the image. The thumbnail you see later in your journal is a copy kept on your device only.
Our relay is stateless: it forwards the photo to Google and returns the result. It has no database, keeps no logs of your meals, and stores nothing about you. Analyzing a meal requires a connection; browsing your journal and statistics works offline.
One technical detail, for completeness: like any online request, a call to our relay carries your device's IP address to our host, Cloudflare, which keeps short-lived access logs as a standard security measure and purges them automatically after a few days. Those logs never contain what you eat.
4. Health information
Your goal, your calorie intake and your weight are health-related information. Because Kalo.Quest is local-first, this information stays on your device: we do not receive it, we do not store it, and it is never used to target ads. The one health-related thing that does leave the phone is the meal photo you choose to analyze (section 3), and it is discarded as soon as the answer comes back. The ads shown in the app receive nothing about what you eat, your weight or your goal. Kalo.Quest is a wellness and self-tracking tool, not a medical device, and is not a HIPAA-covered service.
5. Your U.S. privacy rights (California and other states)
We do not sell your personal information, and we never have. Under the California Consumer Privacy Act (as amended by the CPRA) and similar state laws, you have the right to know what we collect, to access it, to delete it, and to opt out of the "sale" or "sharing" of personal information.
In practice, we hold almost nothing to disclose or delete: your data is on your device. What could count as "sharing" for cross-context behavioral advertising is what AdMob takes when it serves an ad: the advertising identifier, the approximate location that comes with your IP address, and how you interacted with the ad. No consent form stands in front of it here, so the opt-out lives in your phone's settings, and it works at any time:
- reset your advertising identifier, or turn off ad personalisation altogether, in your phone's system settings: Settings → Google → Ads on Android; on iPhone, decline the tracking prompt the app shows, or turn it off later under Settings → Privacy & Security → Tracking.
Either of these acts as your "Do Not Sell or Share My Personal Information" choice, and it applies to every ad shown after it.
For completeness, the categories of personal information involved are limited to: an advertising identifier, approximate location from IP, and ad-interaction and diagnostic data (those three shared with Google AdMob for advertising), and your IP address (received by our host to deliver and secure the service). The photo of a meal you send for analysis passes to Google and is discarded; we keep no copy. We do not collect your name, email or phone number. Your sensitive personal information, your health data, stays on your device, so there is nothing for us to limit the use of.
We do not knowingly process the personal information of anyone under 13, so we do not "sell" or "share" the information of minors. You will never be discriminated against for exercising a privacy right.
6. Service providers
| Provider | Role | Location |
|---|---|---|
| Google LLC | Gemini API (photo analysis) and AdMob (ads) | United States |
| Cloudflare, Inc. | Website and stateless relay hosting | United States (edge processing) |
We do not sell your data and do not disclose it to anyone else, except where we are legally required to and cannot refuse.
7. How long we keep things
| Data | Retention |
|---|---|
| Your food log, weight, trophies, progress photos | On your device until you erase them or uninstall the app |
| Photo sent for analysis | Processed then discarded, never stored |
| Host access logs (incl. IP address) | Kept briefly by Cloudflare for security, purged automatically after a few days |
| Advertising identifier | Held by Google under its own policies; reset it anytime in your phone settings |
| Ad consent choice | Stored on your device for 6 months, then asked again |
8. Deleting your data
Because everything is on your device, you are in control. To delete all of it, open the app and choose Settings → Erase everything, or simply uninstall the app. There is no server-side copy for us to delete. See Delete your data for details.
9. Ads and cookies
Ads pay for the free photo analyses: each analysis costs money, and the ad that follows covers it.
On this site
The site may show ads via Google AdSense, and it uses the Whop pixel
(t.whop.tw), which counts page views and attributes purchases made
through Whop to the ads that brought you here. The AdSense script, the Whop pixel,
and the third-party cookies they use, load only after your explicit
consent. If you decline, no advertising or measurement script loads and no
third-party cookie is set. The only thing stored by default in your browser is your
consent choice (the kalo_consent key in local storage). You can change
it anytime:
.
In the app
The app shows Google AdMob ads: one after a photo analysis, one on every other launch, and never less than a minute after the last one. They never appear before a photo or during an analysis. A third kind is optional: if you run out of daily analyses, you may choose to watch a rewarded video to earn one more. Nothing is taken from you if you decline it.
Kalo.Quest is distributed in the United States, where no prior consent form is required. Ads therefore run without a form and may be personalized by default, using your device's advertising identifier. You can opt out in your phone's settings: on Android, delete or reset your advertising ID under Settings → Privacy → Ads. On iPhone, ads are personalized only if you allow tracking when the app asks (App Tracking Transparency); decline, or change your answer later under Settings → Privacy & Security → Tracking, and you get non-personalized ads.
10. Children
Kalo.Quest is not directed to children. It is intended for people 13 and older, which is what its App Store rating says, and we do not knowingly collect information from anyone under 13 (COPPA). If you believe a child has used the app, write to us and we will help.
11. Security
All exchanges with our relay are encrypted (HTTPS). Because your data stays on your device, the surface for a server-side breach is essentially nil. We hold no journal, no account and no profile to lose.
12. Changes
Any change to this page is dated at the top. If a change affects what leaves your device, you will be told inside the app.
The terms that govern your use of the app are on the Terms of Service page.
A question, a request, a doubt: our contact address is on the Legal Notice page.