Privacy Policy
Last updated: July 21, 2026
1. Overview
This Privacy Policy explains how Kalori collects, uses, and shares information when you use the Kalori app and the Kalori Band (together, the "Service"). Kalori is a fitness rewards platform: you wear the Kalori Band during workouts, the Service verifies your activity using sensor data, and you earn KaloriPoints that you can redeem with partner brands. This Policy covers the personal information we collect through the Service and the choices you have about it.
2. Information we collect
Account information. When you create a Kalori account, we collect your name, email address, phone number, date of birth, sex, weight, height, and home state.
Biometric and activity data from the Kalori Band. The Kalori Band measures heart rate, heart rate variability, blood oxygen (SpO2), an estimated blood pressure reading, body temperature, stress, sleep, steps, and other activity data. This data is what allows us to verify your workouts and calculate the calories used to award KaloriPoints.
Location. We collect your location when it is needed to verify that a workout happened at a gym you have registered with your account.
Payment information. Payments are processed by our payment processor. Kalori never stores your full card number; our payment processor handles that information under its own security standards.
Device and usage data. We collect information about the devices you use to access the Service and how you interact with the app, such as app version, operating system, crash reports, and general usage events.
3. How we use it
We use the information described above to:
- Operate and provide the Service, including your account and the Kalori Band pairing
- Calculate the calories associated with your sensor-verified workouts and issue KaloriPoints
- Detect and prevent fraud and abuse of the KaloriPoints program
- Send you service communications, such as account, security, and billing notices
- Improve and maintain the reliability of the Service
4. Your consent choices
We ask for your consent at signup to our Terms of Service, this Privacy Policy, the collection of biometric data from the Kalori Band, the use of location to verify workouts at registered gyms, and the expiration schedule for KaloriPoints described in our Terms.
You can also turn on optional features, including activity alerts, wellness insights, sleep tracking, marketing email, marketing text messages, and targeted advertising. None of these optional features are required to use the core Service.
You can review and change any of these choices at any time in the app under Settings, then Privacy.
5. Sharing
We share personal information only with service providers who help us operate the Service, including providers of cloud hosting, payment processing, text message delivery, email delivery, error monitoring, and analytics. Each provider is contractually bound to use your information only to provide services to us, and not for their own purposes.
We do not sell your personal information. If you submit a "Do Not Sell or Share" request, we will honor it for any data sharing that a Do Not Sell or Share request could apply to.
6. Biometric data
The biometric data collected by the Kalori Band, including heart rate, heart rate variability, and related sensor readings, is used only to calculate the calories associated with your workouts and to award KaloriPoints. We do not use this data to identify you, and we do not sell it. Kalori is not currently available to residents of Illinois.
7. Retention and deletion
We retain your information for as long as your account is active. You can delete your account at any time from within the app. Some records may be retained for a period after deletion where we are required to do so by law, such as tax or accounting records.
8. Your privacy rights
If you are a resident of California, you have rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we hold about you, the right to access it, the right to delete it, the right to correct inaccurate information, the right to data portability, and the right to opt out of the sale or sharing of your information and of targeted advertising. You will not be discriminated against for exercising these rights.
If you are a resident of Texas, you have similar rights under the Texas Data Privacy and Security Act, including the right to access, correct, delete, and obtain a copy of your personal information, and the right to opt out of targeted advertising, the sale of personal information, and certain forms of profiling. If we decline your request, you may appeal that decision; we will provide instructions for the appeal process in our response.
We will respond to verified requests within 45 days. To exercise any of these rights, use the privacy controls in the app or contact us at support@getkalori.com.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it.
10. Security
We use encryption to protect your information in transit and at rest, and we limit access to personal information to people and systems that need it to operate the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will notify you through the app or by email before the change takes effect.
12. Contact
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at support@getkalori.com.
This document may be updated as our legal review is completed. Material changes will be announced in the app.