Privacy Policy
Last updated: July 28, 2026
This page covers both the kalo.quest website and the Kalo.Quest mobile app. It describes what stays on your device, the little that leaves it, to whom, and what you can ask of us.
1. Who is responsible for your data
The service is published by Smartness Home, a French SAS, 5 rue Agrippa d'Aubigné, 91090 Lisses, France (SIREN 829 550 185). Contact: [email protected].
2. What stays on your device
The following is written to the app's private storage and is never sent to any server, not ours, not a third party's:
- your food log: meals, quantities, calories and macros;
- your weight entries and your goal (lose, maintain, gain);
- your sport sessions, streaks, trophies and points;
- your progress photos (before/after shots);
- your display preferences: theme and units.
Because this data lives only on your phone, uninstalling the app deletes it, and we have no copy to return to you. That is the trade-off of a local-first app, and we would rather state it plainly than hold your health data to avoid it.
3. What leaves your device, and when
| Feature | What is sent | To whom | When |
|---|---|---|---|
| Photo meal analysis | The compressed photo of your plate | Google (Gemini API), through our stateless relay | Each time you analyze a meal |
| Ads | A device advertising identifier and approximate location from IP | Google AdMob and its partners | Only after you allow ads |
The photo of your meal is never kept. It passes through our relay, goes to Google to be analyzed, and is discarded once the result comes back. What is saved, on your phone, is the list of foods and their nutrition values, not the image. The thumbnail you see later in your journal is a copy kept on your device only.
Our relay is stateless: it forwards the photo to Google and returns the result. It has no database, keeps no logs of your meals, and stores nothing about you. Analyzing a meal requires a connection; browsing your journal and statistics works offline.
One technical detail, for completeness: like any online request, a call to our relay carries your device's IP address to our host, Cloudflare, which keeps short-lived access logs as a standard security measure and purges them automatically after a few days. Those logs never contain what you eat.
4. Health information
Your goal, your calorie intake and your weight are health-related information. Because Kalo.Quest is local-first, this information stays on your device: we do not receive it, we do not store it, and it is never used to target ads. The ads shown in the app receive nothing about what you eat, your weight or your goal. Kalo.Quest is a wellness and self-tracking tool, not a medical device, and is not a HIPAA-covered service.
5. Your U.S. privacy rights (California and other states)
We do not sell your personal information, and we never have. Under the California Consumer Privacy Act (as amended by the CPRA) and similar state laws, you have the right to know what we collect, to access it, to delete it, and to opt out of the "sale" or "sharing" of personal information.
In practice, we hold almost nothing to disclose or delete: your data is on your device. The one category that could count as "sharing" for cross-context behavioral advertising is the advertising identifier used by AdMob when you allow ads. You can opt out at any time:
- reset or turn off the advertising identifier in your phone's system settings (iOS: Settings → Privacy & Security → Tracking, turn off Allow Apps to Request to Track; Android: Settings → Privacy → Ads, delete or reset your advertising ID);
- if you are in a region where Google's consent form appears (the EEA, the UK, or Switzerland), decline it, or change your answer later in the app under Settings → Privacy & legal → Privacy choices.
Either of these acts as your "Do Not Sell or Share My Personal Information" choice. If you never allow ads, nothing is shared in the first place.
For completeness, the categories of personal information involved are limited to: an advertising identifier and approximate location from IP (shared with Google AdMob for advertising, only if you allow ads), and your IP address (received by our host to deliver and secure the service). We do not collect your name, email or phone number. Your sensitive personal information, your health data, stays on your device, so there is nothing for us to limit the use of.
We do not knowingly process the personal information of anyone under 16, so we do not "sell" or "share" the information of minors. You will never be discriminated against for exercising a privacy right.
6. Service providers
| Provider | Role | Location |
|---|---|---|
| Google LLC | Gemini API (photo analysis) and AdMob (ads) | United States |
| Cloudflare, Inc. | Website and stateless relay hosting | United States (edge processing) |
We do not sell your data and do not disclose it to anyone else, except where we are legally required to and cannot refuse.
7. EU/UK users (GDPR)
Kalo.Quest is offered in the United States. Because our publisher, Smartness Home, is established in France, EU and UK data-protection law still applies to the little processing we do. Where it applies, our legal basis is your explicit consent. Each meal analysis is triggered by your action, and ads run only after you agree. You may access, rectify, erase, restrict, port or object to the processing of your data, and withdraw consent at any time. Write to [email protected]; we respond within one month. You may also complain to your local supervisory authority. In France, the CNIL.
8. How long we keep things
| Data | Retention |
|---|---|
| Your food log, weight, trophies, progress photos | On your device until you erase them or uninstall the app |
| Photo sent for analysis | Processed then discarded, never stored |
| Host access logs (incl. IP address) | Kept briefly by Cloudflare for security, purged automatically after a few days |
| Advertising identifier | Held by Google under its own policies; reset it anytime in your phone settings |
| Ad consent choice | Stored on your device for 6 months, then asked again |
9. Deleting your data
Because everything is on your device, you are in control. To delete all of it, open the app and choose Settings → Erase everything, or simply uninstall the app. There is no server-side copy for us to delete. See Delete your data for details.
10. Ads and cookies
Ads pay for the free photo analyses: each analysis costs money, and the ad that follows covers it.
On this site
The site may show ads via Google AdSense. The AdSense script, and the third-party
cookies it uses, loads only after your explicit consent. If you
decline, no advertising script loads and no third-party cookie is set. The only
thing stored by default in your browser is your consent choice (the
kalo_consent key in local storage). You can change it anytime:
.
In the app
The app shows Google AdMob ads: one after a photo analysis, one on every other launch, and never less than a minute after the last one. They never appear before a photo or during an analysis.
Whether you see a consent form first depends on where you are. In the European Economic Area, the United Kingdom, and Switzerland, Google's certified consent form (UMP, IAB TCF v2.2) appears before the first ad, asks whether you accept personalized ads, and lists the ad partners. There, no ad request is sent until you answer, and a Privacy choices button under Settings → Privacy & legal lets you change your answer anytime. That button only appears where the form is required.
In the United States and other regions where no consent form is required, ads run without a prior form and may be personalized by default, using your device's advertising identifier. You can opt out in your phone's settings: on iOS, turn off Settings → Privacy & Security → Tracking → Allow Apps to Request to Track; on Android, delete or reset your advertising ID under Settings → Privacy → Ads.
11. Children
Kalo.Quest is not directed to children. It is intended for people 16 and older, and we do not knowingly collect information from anyone under 13 (COPPA). If you believe a child has used the app, write to us and we will help.
12. Security
All exchanges with our relay are encrypted (HTTPS). Because your data stays on your device, the surface for a server-side breach is essentially nil. We hold no journal, no account and no profile to lose.
13. Changes
Any change to this page is dated at the top. If a change affects what leaves your device, you will be told inside the app.
The terms that govern your use of the app are on the Terms of Service page.
A question, a request, a doubt: [email protected].