OnKalo Privacy Policy

Last updated: July 15, 2026

OnKalo is a nutrition app operated by RoadTech. This policy explains what data the app uses, where it lives, and what your rights are. Our principle is simple: your data is yours, and we collect the minimum.

Who is responsible

RoadTech, the data controller. Contact: contato@roadtech.com.br.

What data the app uses

• Account. If you create an account, we store your email for authentication.
• Profile. Weight and height are requested during onboarding; date of birth, sex, body type, and goals are optional. These data personalize calculations and screens.
• Diary and habits. The meals you log, water, fasting, progress photos, and body composition measurements.
• AI usage. In OnKalo Complete, we record operation, status, estimated usage, and dates to manage quota and security, without storing photos, prompts, or raw food data in those records. In OnKalo Free, the device keeps an estimated cost ledger for your transparency.
• Subscription. Your internal account ID, product, store, status, purchase/expiration dates, and billing events needed to unlock access and provide support.
• Updates and diagnostics. Expo's EAS Update service may receive the operating system, a randomized installation token, update downloads, and related failures to deliver versions and measure reliability. We do not use this data for advertising.

Where your data lives

Habits, body progress, plans, products, and progress photos stay on the device. Account, profile, configured meals, reference objects, estimates, and diary may sync with Supabase in production. App updates are delivered through Expo (EAS Update). Data is encrypted in transit. Content submitted to AI follows only the route explained in the app's consent screen.

Subscription and stores

Apple or Google processes payment. RevenueCat receives and normalizes purchase and access-right information; we use your OnKalo account UUID as the identifier. We do not send photos, food, weight, prompts, or AI keys to RevenueCat. OnKalo Complete includes an AI quota; in OnKalo Free, any provider costs are billed separately by that provider.

How AI receives your content

OnKalo Complete. When you confirm an analysis, a photo, label, text, or document goes from the device to OnKalo's secure function and then to the AI provider disclosed on the consent screen. RoadTech uses that content only to answer the requested operation and does not store the photo, prompt, or raw content in quota records.

OnKalo Free (BYOK). Your provider key stays only on the device, in secure system storage. Content goes directly from the device to your chosen provider under its terms and privacy policy. The key is never sent to RoadTech servers.

What the app does NOT do

• It does not sell your data.
• It does not show ads.
• It does not use third-party ad trackers.

Health data

Weight, body composition, and food logs are sensitive information. They stay on your device and, when synced, only to make the app work. We do not share this data with third parties for any other purpose.

Your rights (GDPR/LGPD)

You can access, correct, export, and delete your data inside the app. These actions remain available even with an inactive subscription.

How to delete data without deleting the account

In the app: under Progress → Progress photos, press and hold a photo to delete it; under Settings → Account and data, you can turn off all reminders. To request deletion of a specific category of synced data without closing the account, email contato@roadtech.com.br from the account email and state which data you want deleted. We will verify ownership and keep the rest of the account.

How to delete your account and data

In the app: open Settings → Account and data → Delete account and data, read the warning, and confirm. Deletion removes the OnKalo account, local documents, synced data, AI keys, and reminders.

If you cannot access the app: email contato@roadtech.com.br from the account email with the subject “Delete OnKalo account”. We will verify ownership before deletion.

Deleting the account does not automatically cancel the store subscription. Use Manage Subscription in the app, Google Play, or App Store to stop renewal.

Retention and deletion

We retain data while the account exists or as needed to operate and meet legal obligations. Deletion removes local documents, AI keys, reminders, synced data, and the account. Apple, Google, and RevenueCat may retain transaction records required by law and store rules.

Children

OnKalo is not directed at children under 13 and does not knowingly collect their data.

Changes to this policy

We may update this policy. When we do, we'll change the date at the top and, if the change is significant, let you know in the app.

Questions about privacy? Write to contato@roadtech.com.br.