Kalo (“we”, “us”) is an iOS app published by Lumio Studio. This policy explains what we collect when you use Kalo, how we use it, and the controls you have. If anything is unclear, email us at ortak@lumiostudio.co.
What we collect
- Account data. You can use Kalo anonymously. If you invite a peer, we prompt you to upgrade to Apple, Google, or email sign-in; at that point we store your display name, email, and a user identifier.
- Profile inputs. Age range, sex, height, weight, activity level, and daily kilocalorie goal — used only to compute your personalised target.
- Meal photos & entries. Photos you capture, dish classifications, estimated portions, calories, and macros.
- Peer content. Meal photos, calories, and reactions you share inside a 2–3 person peer circle.
- Device & diagnostic data. App version, OS version, crash logs, and basic analytics events (non-advertising).
How we use it
- Run the agentic AI pipeline (classify dish → estimate portion → reconcile nutrition) to return your meal’s calories and macros.
- Sync your meals across your devices and into your peer circle.
- Send push notifications you enabled (reactions, peer logs).
- Fix crashes, measure reliability, and improve the product.
We do not sell your data, run third-party ad targeting, or share your meal photos outside of your peer circle.
Peer sharing scope
Peer accountability is explicitly 2–3 trusted people invited by a 6-character code. The only content shared is same-day meal photos, calories, and reactions. There is no public feed, leaderboard, or open social graph.
Where data is stored
Kalo uses Firebase (Firestore, Authentication, Cloud Messaging, Analytics, Crashlytics) and Google Cloud Storage for meal photos. AI inference runs through Google Vertex AI / Gemini models. Subscription state is managed by Apple StoreKit.
Third-party AI services
To estimate calories, Kalo sends a copy of your meal photo, voice recording, or typed meal description to Google’s Gemini large language model, accessed through Google Cloud Vertex AI. Specifically:
- What is sent. The meal photo (or up to three photos per meal), voice recording (as compressed m4a audio, max 90s), typed text description, and the locale you selected so we can prompt the model in your language.
- Who receives it. Google LLC, operating Vertex AI inside the Google Cloud project linked to Kalo’s Firebase project. The request is authenticated via Firebase App Check.
- How it is used. Google processes the data to identify the food and return structured nutrition estimates. Per Google’s Vertex AI Generative AI terms, customer data sent to Vertex AI is not used to train Google’s foundation models.
- Retention. Google logs API requests for 30 days for abuse monitoring per Vertex AI’s data governance. After that they are deleted.
- Your control. Kalo requests your explicit permission during onboarding before any data is sent. Without consent, no AI calls are made from the app.
Kalo does not send your meal data to any other third party. Photos and meal records are stored only in your own Firebase Firestore database under your Firebase Auth user id.
Retention
Meal photos and entries are retained while your account is active. If you delete your account from in-app settings, we remove your profile, meal entries, photos, and peer invitations within 30 days. Aggregated and anonymised analytics may be retained longer.
Your rights
Depending on your region (GDPR / UK GDPR / CCPA), you may request access, correction, export, or deletion of your personal data. Email ortak@lumiostudio.co and we will respond within 30 days.
Children
Kalo is not directed to children under 13 and is not intended for use by children under 13. If we learn we have collected personal data from a child under 13, we will delete it.
Changes
If we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app.
Contact
Lumio Studio — ortak@lumiostudio.co