Privacy Policy
Effective July 16, 2026
- No account, no sign-up, and no server database of you.
- Your food log, goals, and all health data stay on your iPhone.
- Meal photos and descriptions you submit are analyzed and then discarded — never stored, never used for ads.
- We show no ads, use no tracking SDKs, and never sell data.
What we process to analyze your meals
When you use cloud-powered analysis, the content you submit is sent over an encrypted connection (HTTPS) to our server so it can compute nutrition estimates:
- Meal photos you scan are passed to an AI vision model (currently Google's Gemini) to identify foods and estimate portions.
- Meal descriptions and chat messages (when the on-device engine isn't available) are passed to an AI language model (currently NVIDIA-hosted) to itemize your meal.
- Barcodes and food names are looked up against public food databases to verify macros — Open Food Facts (a free, open, global product database) for packaged items worldwide, and USDA FoodData Central. Only the barcode number or food name is sent — never anything about you.
Our server processes these requests in memory and does not retain your photos, descriptions, or conversations after the analysis is returned. We do not use them for advertising or to build a profile of you.
On-device Apple Intelligence
On iPhones that support Apple Intelligence, the meal chat runs entirely on your device. Those conversations never leave your iPhone and never reach our servers.
What never leaves your iPhone
Your food log, macro goals, profile details (age, height, weight, sex, diet style), fasting history, water, steps, calories burned, weight history, and anything Ketolock reads from Apple Health (steps, active energy, blood glucose) are stored locally on your device. Ketolock reads Apple Health data only with your permission and never uploads it anywhere.
Purchases
Subscriptions are processed by Apple through your Apple ID. We never see or store your payment details.
Optional connected services
If you choose to connect a third-party service (such as Fitbit via the Google Health API, when available), Ketolock will read only the activity data you authorize (such as steps and active calories), use it solely to display your activity in the app, and let you disconnect at any time. Ketolock's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
No ads, no trackers, no data sales
Ketolock contains no advertising, no third-party analytics SDKs, and no trackers. We do not sell, rent, or share personal information.
Data retention and deletion
Because your data lives on your device, deleting an entry in the app deletes it, and deleting the app deletes everything. There is no server-side account or database to request deletion from.
Children
Ketolock is not directed at children under 13, and we do not knowingly collect information from them.
Not medical advice
Ketolock provides wellness estimates for informational purposes only. It is not a medical device and does not provide medical advice. Consult a clinician before making significant dietary changes.
Changes and contact
If this policy changes, the update will be posted here with a new effective date. Questions: hfoster17@gmail.com.