Privacy policy
Last updated 13 November 2026
The short version. Your food diary, weight, measurements and photos are private to you. We use them to run the app and to give you advice. We don’t sell your data or show you adverts. You can download or delete everything from the app at any time.
Who we are
Kilo & Fork is run by Nicholas Kelly, a sole trader in the United Kingdom. We are the data controller for the information you give us. Contact us at [email protected] or through Help and support in the app.
We are registered with the Information Commissioner’s Office (ICO), registration number ICO number.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email address, password (stored scrambled, never readable) | To create and secure your account |
| Profile | Date of birth, sex, height, weight, target weight, goals, experience, equipment, units | To work out your targets and plans |
| Health and fitness data | Food diary, allergies and diet, weigh-ins, body measurements, workouts, fasting, water, sleep and recovery check-ins | To track your progress and adjust your plan |
| Progress photos | Photos you take in the app | Stored privately for you to compare over time. Only shared if you post them yourself |
| Coach conversations | Messages to the AI coach, food photos or descriptions you ask it to log | To answer you and log food |
| Community | Handle, display name, bio, posts, comments, likes, friends, reports, blocks | To run the community features you choose to use |
| Subscriptions | Your plan, trial and renewal status (not your card details — Apple or Google handle payment) | To unlock the features you pay for |
| Device and usage | Notification token, app version, which features you use, error logs | To send notifications you’ve turned on, fix problems and improve the app |
| Support | Messages you send us | To help you |
Information about your health (weight, body measurements, food, fasting, photos and similar) is “special category” data under UK law. We only use it with your explicit consent, which you give when you set up the app. You can withdraw it at any time by deleting your account.
How we use it — and our legal reasons
- To provide the app you signed up for (contract): your diary, targets, plans, reminders and coach.
- With your explicit consent for health data, and for optional things like notifications and community posts.
- Our legitimate interests in keeping the app secure, preventing abuse, moderating the community and improving the app. We weigh these against your rights.
- Legal obligations, such as keeping records needed for tax.
We don’t sell your data, use it for advertising or share it with data brokers. We don’t make decisions about you that have legal or similarly significant effects using automated means.
The AI coach
When you use AI features, the relevant parts of your profile, diary and question are sent to our AI provider, Anthropic, to produce a reply. Anthropic processes it on our behalf, doesn’t use it to train its models, and only keeps it for a limited time for safety and abuse monitoring. AI replies can be wrong: they’re general guidance, not medical advice.
Who we share it with
We use a small number of trusted companies to run the app. They can only use your data to provide their service to us.
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and servers | London, UK |
| Anthropic | AI coach and AI food logging | United States |
| RevenueCat | Managing subscriptions | United States |
| Apple and Google | App downloads, payments and push notifications | Worldwide |
| Expo | Delivering push notifications | United States |
| Open Food Facts | Looking up barcodes and products (no personal details are sent) | France |
Where data goes outside the UK, we rely on safeguards approved under UK law, such as the UK–US data bridge or the UK’s international data transfer agreement. We may also share information if the law requires it, or to protect someone’s safety.
Community
Other members only see your handle, display name, bio and badges (if you allow it), plus anything you post. Your age, weight, food diary and photos are never shown unless you choose to post them. Members under 18 can only share with friends and can’t share photos. Reported content is reviewed by our moderators.
How long we keep it
We keep your data while you have an account. When you delete your account, your profile, diary, photos, posts and everything else are deleted straight away. Copies in our encrypted backups are overwritten within 7 days. We keep basic subscription records for as long as tax law requires.
Keeping it safe
Data is encrypted in transit and at rest. Every request is checked so members can only reach their own data, progress photos are stored privately and shown through short-lived links, and only a small number of staff can access the admin tools, with every action logged.
Your rights
You can:
- See and download your data — Account → Export my data in the app.
- Correct it — edit your profile and entries in the app.
- Delete it — Account → Delete my account (see deleting your account).
- Object to or restrict how we use it, and withdraw consent at any time.
Contact us at [email protected] for anything else. If you’re unhappy with how we’ve handled your data, you can complain to the ICO.
Age
Kilo & Fork is for people aged 16 and over. Members under 18 get extra protections: no calorie deficits, no fasting, and friends-only community sharing.
This website
This website doesn’t use cookies or tracking. It loads fonts from Google Fonts, which sees your IP address.
Changes
If we make important changes we’ll tell you in the app before they take effect.