Scope and contact
This policy covers the Kcalibre iOS app and introduction website provided by Quinton World Project. Data processing depends on the features you use, sign-in status and sharing choices. Contact info@quintonworldproject.com for privacy questions or data requests.
Accounts, records and sync
Manual records can be used on your device first. Account creation involves identifiers and details from your sign-in provider, such as email, and the name you enter. When signed in, selected food, workout and body records, preferences and saved foods sync using Google Firebase Authentication and Firestore. Food thumbnails and AI conversations are not included in account backups. Content you submit for analysis or sharing is handled separately as described below.
AI analysis and third parties
The app asks for consent before AI analysis. Depending on the feature, food images, nutrition-label or InBody OCR text, questions, body information, goals or selected workout summaries pass through our backend to Google Gemini. Workout analysis may include energy, heart-rate summaries and exercise metrics. AI and cloud services also process account, usage and technical information needed to provide the service. You can use manual logging without AI. Stop submitting analyses to stop new AI transfers. Providers process information under the applicable service terms; we do not promise immediate deletion or zero retention by AI providers.
Photos, body reports and sharing
Training photos, friend images, shared attachments and Nutrition Board photos you select and confirm are stored through the relevant Firebase Storage flow. Training and Board photos are resized and EXIF/GPS metadata is removed before upload. Original InBody reports, when you choose to save them, follow the private report feature. Private food logs are not automatically published. You choose public or friends-only visibility for Board posts and the scope of shared training. Copies you export, save or send to others may remain with their recipients.
Friends, matching and public information
Other signed-in users can see your public name, bio, level, badges and VIP status without becoming friends. The gym friends map and partner matching process the venues, preferences and matching information you provide. Private messages and shared content use their respective access controls. A public profile does not thereby expose private body records, private notes or your full friend list. Use the available blocking, reporting, sharing and deletion controls.
Health, location and device permissions
With your permission, the app reads authorised Health data and workout routes to display activity, heart rate, weight, water or workout summaries. Enabled features may write selected records to Apple Health. Outdoor workouts and nearby-gym features may use location; route recording stops when that workout ends. Camera, photos and notifications require your permission. Health and route data are not automatically public. If you submit workout analysis or share a summary, the selected content follows that flow. Revoke permissions in iOS Settings or Health; this affects the relevant features.
Payments, support and other providers
Apple handles iOS membership payments. We do not receive card details. Our backend verifies products, transaction identifiers, expiry and account associations for access, renewal, restoration and refund status. Support messages are processed with information needed to respond. Push registration processes device notification identifiers. Barcode lookup may query Open Food Facts. Cloud and AI providers may process information outside Hong Kong. See the Google privacy policy, Apple privacy policy and Open Food Facts privacy policy.
Retention, export and deletion
Retention depends on the account, feature and security or legal needs; there is no single fixed period for every data category. Delete individual records, photos, Board posts and your comments in the app. Data and Privacy offers supported CSV exports. Account deletion clears the relevant cloud data and authentication account. Necessary transaction bindings, account-closure markers, replay prevention and abuse records may remain. Backups, system logs and information retained by providers follow their applicable arrangements. See account deletion.
Website, children and changes
This introduction website does not offer sign-in, health-record uploads or payments. We have not added advertising or third-party analytics trackers. Local storage remembers your language preference; hosting may generate technical logs such as IP addresses, browser details and requests. The app is not directed to children under 13. Contact us about suspected child data or to request access, correction or deletion. We may update this policy as features and requirements change and show the date here. New purposes will be accompanied by notice or consent where needed.
