Privacy Policy
Last updated: 26 August 2026
Kalori is a calorie tracking app published by GaiaLight Technology. This policy explains what the app collects, what it does with it, and how you get rid of it. It covers the Kalori mobile app only.
The short version
- Your health and fitness readings stay on your phone. They are never uploaded.
- Meals you log, and the photos or descriptions you submit for calorie estimation, are sent to our servers because that is where the estimate is calculated.
- When the app hits an error it sends a crash report so we can fix it. That report carries no health or fitness data and none of your meal or profile figures.
- We do not sell your data, and we never use health or fitness data to target advertising.
What Kalori collects
Account information
You sign in with Google. We receive an account identifier and your email address, so your meal history survives a new phone. We never see or store your Google password. Held until you delete your account.
Profile information you type in
Age, sex, height, weight, activity level and weight goal. Kalori uses these to calculate your daily calorie target with the Mifflin-St Jeor equation. They are stored on your device and on our servers against your account. If you set your own daily limits for sugar, sodium or saturated fat, those are stored too.
Meals you log
Meal names, item names, calorie and nutrient figures, timestamps, and any photo you attach. Photos and text descriptions are sent to our servers so the calorie estimate can be produced, and are stored with the meal so you can look it back up later.
App settings
Your language, your time zone, and your reminder preferences, so notifications arrive at a sensible local hour. If you turn on reminders we also store a push notification token for your device, which we use only to deliver those reminders.
Health and fitness data from Health Connect (Android) or HealthKit (iOS)
Only if you switch activity tracking on. Kalori reads three types, all read-only — the app never writes anything back to Health Connect or HealthKit:
| Data type | Why Kalori reads it |
|---|---|
| Steps | Estimating the calories you burned between two points in the day |
| Active calories burned | Same estimate, when your device records it directly |
| Exercise / workouts | Recognising a workout so its burn is not counted twice, and detecting the raised burn rate for a short window afterwards |
This data stays on your device. It is read from Health Connect or HealthKit, turned into a calorie burn figure for your daily energy balance, and never transmitted to our servers or to any third party. It is not stored beyond the current day's calculation.
Kalori does not read blood pressure, blood glucose, blood oxygen, heart rate, sleep, or body composition.
Usage data — only if you opt in
Anonymised app usage: which screens you open and how meal estimates perform, used to improve calorie accuracy. It carries no health or fitness readings. You can decline and keep full use of the app, and you can change your mind in Settings at any time.
Crash reports — always on
When the app hits an error, it sends a report to Sentry, our error monitoring provider, so the problem can be found and fixed. This is not optional: without it a crash on your phone is invisible to us. A report contains:
- what went wrong, and where in the app's code it happened
- your device model, operating system version, and the app version
- a short trail of what the app did just before the error: which screens you moved between, which requests it made to our servers and whether they succeeded, and the names of app events such as "meal logged". Names only — never the figures behind them, so no meal name, calorie count, weight, or BMR is included
- the text of any error message the app had shown you
Crash reports do not identify you. No account identifier, no email address, no name, no IP address, no device name. They cannot be traced back to you or linked to your other reports.
Crash reports carry no health or fitness data. Nothing read from Health Connect or HealthKit, and no figure worked out from it, is included.
Sentry processes this on our behalf and is not permitted to use it for anything else. See the Sentry Privacy Policy.
Advertising
Kalori shows ads through Google AdMob. No health or fitness data is passed to AdMob — no steps, no workouts, no calorie burn, no weight, no meals, no profile information. Ad requests carry no targeting parameters from this app. Google's own handling of ad requests is covered by the Google Privacy Policy.
Who we share with
- Our own backend, to produce calorie estimates and store your meal history.
- Google Firebase, which handles sign-in, push notifications and app integrity checks on our behalf.
- Google Gemini, which analyses the meal photos and descriptions you submit in order to produce a calorie estimate.
- Amazon Web Services, where meal photos are stored.
- Sentry, our error monitoring provider, when the app hits an error. No health or fitness data, and no meal or profile figures — see Crash reports above for exactly what a report contains.
- Google Play Billing, if you buy crystals. We never see your card details.
- Google AdMob, for advertising, with no data from this app attached.
- Law enforcement, only where we are legally required to.
We do not sell personal information, and we do not share health or fitness data with anyone.
How long we keep things
| Data | Kept for |
|---|---|
| Health Connect / HealthKit readings | Not retained — used for the current calculation only |
| Meals and photos | Until you delete the meal, or delete your account |
| Profile and account | Until you delete your account |
| Usage data | Up to 24 months, if you opted in |
| Crash reports | 90 days, then deleted by Sentry |
| Crystal purchase and spend records | Kept as an anonymised financial record after your account is deleted — see below |
Deleting your data
- Health and fitness data — Settings → Activity Tracking → off. This stops all reading and clears any burn figures Kalori has cached on the device. You can also revoke access at any time from Health Connect (Android) or the Health app (iOS), which stops Kalori reading anything at all.
- A single meal — open it from History and delete it.
- Everything on the device — Settings → Clear All Data.
- Your account and everything on our servers — Settings → Delete Account in the app, or use the account deletion page if you no longer have it installed.
What happens when you delete your account
Your account is scheduled for deletion 30 days ahead. During those 30 days you can sign back in to cancel it, and everything is restored. Nothing is removed until the 30 days are up.
After that, permanently and with no way to recover it: your profile, every meal you logged, every photo you uploaded, and your sign-in account are all erased.
Two things survive, and neither identifies you. Your record of crystal purchases and spending is kept as an anonymised financial record, with every link to you removed — we are required to keep records of transactions. And we keep a one-way fingerprint of the deletion itself, so that if a dispute ever arises we can confirm the request was genuine. Neither can be used to identify you or to rebuild your account.
Children
Kalori is not intended for children under 13, and will not calculate a calorie target for anyone below that age. For users under 18 the app does not suggest a calorie deficit or surplus at all — only maintenance intake.
Not a medical service
Kalori is not a medical device. It does not diagnose, treat, cure or prevent any medical condition. Calorie and nutrient figures are estimates produced by an AI model and will not be exact. Talk to a doctor or a registered dietitian before making decisions about your diet, and especially before following any calorie target shown in the app.
Your rights
Under Malaysia's Personal Data Protection Act 2010 you may ask us for a copy of the personal data we hold about you, ask us to correct it, or withdraw a consent you previously gave. Health information is treated as sensitive personal data and is only processed with your explicit consent, which you can withdraw at any time in Settings. Write to us at the address below.
Security
Data in transit is encrypted with HTTPS. Data at rest on our servers is encrypted. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If this policy changes materially we will update this page and the "last updated" date, and notify you in the app.
Contact
admin@gaialight-technology.com
GaiaLight Technology