Effective date: August 21, 2026 (last updated October 3, 2026)
Kalori AI ("we," "us," "our," or "the App") is an independently operated application based in King Salman District, Riyadh, Saudi Arabia. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Account information. Email address and password (encrypted) when you create an account.
Profile and health information. Age, height, weight, sex, activity level, dietary goals, and dietary preferences (including halal preference settings), which you provide during onboarding and can update any time. This is sensitive health data under GDPR and Saudi Arabia's PDPL. Before we process it, we ask for your explicit, affirmative, separate consent during onboarding — a distinct action from simply accepting this Privacy Policy generally, presented as its own onboarding step rather than a pre-checked box or something bundled into general Terms acceptance. You can decline, though certain features of the App will not function without it.
We treat this information as an amanah (a trust placed in our care) — the same standard of diligence, transparency, and restraint we'd want applied to our own family's health information. That means: we collect only what the App needs to function (data minimization), we do not use it for purposes you haven't agreed to, and we make it as easy to withdraw your consent as it was to give it (see "Your Rights" below).
Photos. Photos you take or upload of meals, for the purpose of AI-based food and calorie recognition. Photos are sent to our AI processing provider (see "Third-Party Processors" below) for analysis.
Usage data. Meals logged, calorie/macro history, app interactions, and feature usage, used to power your dashboard, streaks, and progress tracking.
Voice data. If you use voice-based meal logging, your recording is transcribed in real time and is never written to any database, storage bucket, or log on our own servers — it exists on our infrastructure for zero seconds beyond the single API call that transcribes it. Your recording does necessarily transit our AI transcription provider's systems (the same provider used for meal-photo analysis) to generate the transcript. Only the resulting text is saved to your account.
Device and diagnostic data. Device type, operating system, app version, crash logs, and general usage analytics, used to maintain and improve the App.
Payment information. We do not directly collect or store payment card details. Subscriptions are processed by our payment provider, Adapty, and the applicable app store (Apple App Store / Google Play), who handle payment data under their own privacy policies.
Apple Health and Health Connect data. If you choose to connect Apple Health (iOS) or Health Connect (Android), the App reads steps, active calories burned, exercise minutes, heart rate, and sleep duration on your device only to show your real activity alongside what you log. This data is never uploaded to our servers or shared with third parties — it stays on your device and in the App's local memory while you use it. We do not write data back to Apple Health or Health Connect.
We do not sell your personal information. We do not use your health or fitness data for advertising, marketing to third parties, or data-mining purposes.
We share limited data with the following service providers, solely to operate the App:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, and file storage hosting | Frankfurt, Germany (EU) |
| Google Gemini | Meal photo analysis and voice transcription | Google-managed infrastructure |
| Adapty | Subscription and payment management | United States |
| Apple / Google | App distribution and payment processing for subscriptions | Apple / Google infrastructure |
Each provider is contractually restricted to using your data only to provide services to us, and is required to maintain appropriate security standards. We do not share your personal data with third parties for their own marketing purposes.
Kalori AI provides halal-conscious dietary guidance as a best-effort feature to support your preferences. Pre-vetted, curated recipes labeled as halal-verified within the App are treated as verified halal. AI-based meal analysis and general guidance elsewhere in the App is best-effort and not a certification — it should not be treated as a religious or certification authority. Users seeking certified halal assurance for products should verify directly with the product manufacturer or a recognized halal certification body.
We retain your account and health-adjacent data for as long as your account is active. You may request deletion of your account and associated data any time via the Settings screen or by contacting support@kaloriai.fit.
Requesting deletion triggers a genuine cascading hard delete: your profile, meal logs, AI usage records, and stored meal photos are permanently and irreversibly removed — not deactivated or flagged. Your personal data is removed immediately upon request, except where retention is required by law.
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
If you are located in Saudi Arabia, the PDPL gives you the right to be informed of the legal basis and purpose for collecting your personal data, to access your data, to request correction or deletion of inaccurate or no-longer-necessary data, and to withdraw previously given consent. To exercise any of these rights, contact us at privacy@kaloriai.fit.
If you are located in the EEA, UK, or Switzerland, we process your personal data on these legal bases: performance of a contract (to provide the App's core features), consent (for sensitive data such as health information, which you may withdraw any time without affecting the lawfulness of processing before withdrawal), and legitimate interests (such as maintaining the App's security and integrity, where not overridden by your data protection rights).
Withdrawing consent. Where we rely on your explicit consent to process sensitive health data, you may withdraw that consent any time, as easily as you gave it — via the Settings screen or by contacting support@kaloriai.fit. Withdrawing consent does not affect the lawfulness of processing before withdrawal, but it does mean features that depend on that data (e.g. calorie/macro tracking, personalized goals) will no longer function until consent is given again.
To exercise these rights, contact privacy@kaloriai.fit (our dedicated privacy and data-request inbox) or support@kaloriai.fit.
The App is not directed at children under 16. We do not knowingly collect personal information from anyone under this age. If you believe a child has provided us with personal information, contact us at support@kaloriai.fit.
Your information may be processed in countries other than your own, including our database hosting region in the European Union. Where required under Saudi Arabia's PDPL or other applicable law, we rely on appropriate safeguards, including Standard Contractual Clauses, for such transfers.
We use reasonable technical and organizational measures, including encryption in transit and access controls, to protect your information. No system is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. Material changes — including launching the planned feature noted in Section 1 — will be notified in-app or via email before it takes effect.
Questions about this policy: support@kaloriai.fit