Privacy Policy

Welcome to KalAI by KalorTech ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our mobile application and related services (collectively, the "Service").

By using KalAI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2.1 Information You Provide

• Account Information: Name, email address, and profile details when you create an account.
• Health & Nutrition Data: Dietary preferences, calorie goals, macro targets, food allergies, and health conditions you voluntarily provide.
• Food Scans: Photos of meals you scan using our AI vision feature. These images are processed to identify food items and estimate nutritional content.
• Manual Entries: Any meals, water intake, or nutritional data you manually log.

2.2 Location Data (Foreground & Background Access)

KalAI accesses and collects your device's precise (GPS) and approximate location data under the following conditions:

• Active Workout Tracking: When you start an outdoor workout session (e.g., Outdoor Walk, Outdoor Run, Outdoor Cycling), the app collects real-time location data to map your workout routes, measure precise distances, compute instantaneous speeds, and calculate active pace.
• Background & Foreground Service Location: When an outdoor workout is in progress, KalAI continues to collect location data even when the app is closed, running in the background, or when your screen is locked. This is managed via an active, persistent foreground service notification in your device status bar, ensuring your workout route and distance are recorded without interruption while allowing you to multitask.
• No Third-Party Sharing or Sale: We do not sell, rent, trade, or share your precise or approximate location data with any third-party advertisers, brokers, or external analytics providers. Location data is strictly used for your personal fitness tracking and display within the app.
• User Control & Storage: Location tracking only activates when you explicitly tap "Start Workout" and immediately terminates when you pause or finish the session. Route coordinates are stored securely on your device and synced only to your private account for workout history review. You can delete your workout history or revoke location permissions at any time through your device settings.

2.3 Physical Activity & Sensor Data

KalAI uses device hardware sensors (such as step counter sensors / pedometer) and physical activity recognition permissions to:

• Count and display your daily steps, sync real-time progress to your activity rings, and calculate 7-day cumulative step trends.
• Measure cadence and step frequency during walking and running workout sessions.

2.4 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: Features used, interaction patterns, scan frequency, and session duration.
• Log Data: IP address, browser type, access times, and pages viewed when accessing our website.

2.5 Camera & Photo Access

KalAI requires camera access to scan meals. Photos taken within the app are processed on-device using our AI models whenever possible. Images are not stored on our servers unless you explicitly choose to save them to your meal journal with cloud sync enabled.

We use the information we collect to:

• Provide Core Nutrition & Food Scanning: Analyze meals, calculate nutritional data, track caloric and macronutrient goals, and deliver personalized nutrition recommendations.
• Workout & Fitness Tracking: Record outdoor workout paths, map exercise routes, calculate live distance, pace, speed, and track step counts to display progress on activity rings and fitness charts.
• Improve Accuracy: Enhance our AI vision models and food recognition algorithms using aggregated, anonymized scan data.
• Personalize Experience: Customize your dashboard, suggest meals, and adapt to your dietary patterns.
• Communicate: Send you service updates, nutritional insights, and promotional content (with your consent).
• Ensure Security: Detect fraud, prevent abuse, and maintain the integrity of our platform.
• Legal Compliance: Fulfill legal obligations and respond to lawful requests.

We do not sell your personal data. We may share information only in the following circumstances:

• Location Data Exclusion: We never share, sell, or disclose your location coordinates or workout route data to third-party ad networks, data brokers, or marketing partners under any circumstances.
• Service Providers: Trusted third parties who assist in operating our Service (e.g., cloud database hosting). They are contractually bound to protect your data.
• Aggregated Data: We may share anonymized, aggregated statistics that cannot identify you individually (e.g., "Users scanned 1.2M meals this month").
• Legal Requirements: When required by law, subpoena, court order, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
• With Your Consent: When you explicitly opt in to share data with third-party integrations (e.g., health apps like Apple Health or Google Fit).

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
• On-Device Processing: Our AI food scanning primarily runs on your device, minimizing the data sent to our servers.
• Access Controls: Strict role-based access controls limit employee access to user data on a need-to-know basis.
• Regular Audits: We conduct periodic security assessments and penetration testing.
• Secure Infrastructure: Our servers are hosted on reputable cloud platforms with SOC 2 Type II compliance.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and keep your app updated.

• Active Accounts: We retain your data for as long as your account is active and as needed to provide our services.
• Deleted Accounts: When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Scan Images: Meal photos processed on-device are not retained by us. Cloud-synced images are deleted when you delete the corresponding journal entry or your account.
• Anonymized Data: Aggregated, anonymized data used for model training and analytics may be retained indefinitely.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("Right to be Forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time via app settings or email unsubscribe links.
• Restrict Processing: Request that we limit how we use your data.
• Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at authentication.kalortech@gmail.com. We will respond within 30 days.

KalAI is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Our Service may contain links to third-party websites or integrate with external services (e.g., Apple Health, Google Fit, wearable devices). This Privacy Policy does not apply to third-party services. We encourage you to review their privacy policies independently.

Our website uses minimal cookies for:

• Essential Cookies: Required for site functionality (e.g., theme preference).
• Analytics Cookies: Help us understand how visitors interact with our site (anonymized).

You can control cookie preferences through your browser settings. The mobile app does not use cookies.

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: