What Kalo collects, where it goes, and how to get rid of it. Last updated 1 October 2026.
Kalo is published by Sitesaul and developed by
CodeOfThor. The Android package is com.sitesaul.kalo. For anything in this
policy, write to support@sitesaul.com.
Meals and portions, water, weigh-ins, workouts, your goal, and the profile figures the targets are calculated from: sex, age, height, weight and activity level. This is the diary. It lives on your phone, and in your account when you are signed in.
If you create an account, we store your email address and a user id. Passwords are handled by Google Firebase Authentication and never reach us in a readable form. If you sign in with Google instead, we receive your email address and the display name on that Google account, and nothing else from it.
With your permission, Kalo reads the step counter built into your phone. The figure is stored in your diary alongside everything else. If you refuse the permission, Kalo says so on screen rather than showing a made-up number.
No location, no contacts, no advertising identifier, no browsing activity, and no photographs. Kalo does not build a profile of you for any purpose other than calculating your own targets.
The barcode scanner and Photo AI screens show a live camera preview. Frames are processed on the phone and are never uploaded, stored, or sent anywhere. Only the decoded barcode number leaves the device, and only to look the product up.
| Service | What it receives | Why |
|---|---|---|
| Google Firebase Authentication | Email address, and the Google display name if you use Google sign-in | To create and verify your account |
| Google Cloud Firestore | Your diary and profile, tied to your user id | To sync between devices and restore if you change phone |
| Open Food Facts | The barcode number alone | To look up a product Kalo does not already know |
| Google Play Billing | Handled entirely by Google | To process a Kalo Pro subscription |
These are the only four. The request to Open Food Facts carries the barcode and nothing else: no account, no user id, no device identifier. Firebase and Firestore are operated by Google under their own privacy terms, and data may be processed on Google servers outside your country.
| Permission | Used for | Optional |
|---|---|---|
| Camera | Scanning barcodes and Photo AI | Yes — the rest of the app works without it |
| Physical activity | Reading the step counter | Yes |
| Notifications | Meal and water reminders | Yes |
| Internet and network state | Signing in and syncing | No — but you can use Kalo signed out |
| Run at startup | Re-scheduling reminders after a restart | No |
Kalo asks for nothing else. There is no microphone access, no file or photo library access, and no location access of any kind.
When you add a product after a scan finds nothing, that product's name, brand, barcode and nutrition figures are added to a catalogue other Kalo users can read, so the next person to scan it gets an answer. Your name and email are not attached to it, and nothing from your diary is shared — only the product itself. Entries contributed this way are shown to other people as unverified until they have been checked.
In the app: Settings → Delete Account. This erases every meal, weigh-in, reminder and setting from the phone and from your account on our servers, and deletes the account itself. Signing in again will not bring any of it back, because there is nothing left to restore.
Signing out is different and non-destructive: it ends the session and leaves your data where it is.
You can also ask us to delete your account by writing to support@sitesaul.com from the address the account uses. Products you contributed to the shared catalogue stay, because they are no longer linked to you and other people now rely on them; ask and we will remove specific entries.
Your diary is kept until you delete it or delete your account. An account that has not been signed into for 24 months may be removed along with its data, after an email warning to the address on the account.
Kalo is not intended for children under 13, and we do not knowingly collect their data. A calorie tracker is also not a suitable tool for a child. If you believe a child has created an account, write to support@sitesaul.com and it will be removed.
Depending on where you live, you may have the right to see what we hold about you, correct it, delete it, or receive a copy in a portable format. The app can do most of this directly: Settings → Export Data writes out your whole diary as a file, and Settings → Delete Account removes everything. For anything else, write to support@sitesaul.com and we will respond within 30 days.
Traffic between the app and our servers is encrypted in transit. Access rules on the database restrict every diary to the account that owns it: one user's records cannot be read by another, and this is enforced on the server rather than in the app. No system is perfectly secure, and we do not claim otherwise.
If this policy changes in a way that affects what we collect or who receives it, the date at the top changes and the app shows a notice. Continuing to use Kalo after that means you accept the new version.
Sitesaul — support@sitesaul.com — sitesaul.com
Kalo