Last updated: 13 October 2026
1. Who we are
Kolvi is provided by Skilldrill Pro Private Limited ("we", "us"), a company registered in India (CIN: U62011TS2026PTC214569), with its registered office at Plot No 30/c, Sy. No 83/1, Knowledge City, Raidurg, HITEC City, Hyderabad, Telangana 500081, India. We decide how your data is used (in EU law, we are the "controller"). Contact us at [email protected] about anything in this policy.
2. What we collect and why
| What | Why |
|---|---|
| Food log: foods, amounts, meal and time, and the nutrients and water in them | To track your calories, macros and water, and show your daily and weekly progress. |
| Body and goal details: age, sex, height, weight, goal, diet style, optional waist and body fat, weigh-ins, and safety answers (for example pregnancy) | To work out your targets and plan, and to keep the plan safe (no plans for under-18s or during pregnancy, a safe calorie minimum and a safe rate of weight change). |
| Account: your email address and a user ID from Google or Apple sign-in (or the email you sign in with) | To back up your data and restore it on a new phone. |
| Foods you add: products from barcodes and nutrition labels, your own portion sizes | So you can log them again quickly. |
| Ad-free plan: whether you have it and when it renews | To remove ads. Payments are handled by Apple or Google; we never see your card details. |
| Steps (only if you turn them on) | Counted by your phone's motion sensor and shown in the app. Steps stay on your phone. |
Food, weight and body details count as health data under many privacy laws. We use them only to provide Kolvi to you.
Voice
When you speak to Kolvi, your phone's own speech service (from Apple or Google) converts your voice to text, under their privacy terms. Kolvi receives only the text. We never record or store your voice.
Barcodes and label photos
When you scan a barcode, the barcode number is sent to our server, which looks it up in Open Food Facts. Nothing about you is sent to Open Food Facts. Nutrition label photos are read on your phone and are not uploaded; only the numbers you save are kept.
Foods Kolvi doesn't recognise
If Kolvi doesn't recognise a food you mention, we record only the food name, not who said it, so we can add it. To count each phone only once, we keep a scrambled code made from the app's install code (see below) next to the food name; it cannot be turned back into the install code and is not linked to your account.
Crash reports and reminders
If the app crashes, it sends a crash report to Sentry, our error-reporting provider: the error, where in the app it happened, and your phone model and system version. Reports never include your account, email, foods, weight or other health data. Reminders (if you turn them on) are made on your phone; nothing about them is sent to us.
Limits that stop misuse
Barcode lookups and unknown-food counts work without an account, so the app sends a random install code with these two requests only. It is made by the app when first used, is not an advertising ID and is not linked to your account. Our server keeps only a scrambled form of it (or of your network address, if the code is missing) to limit how many requests one phone can make. These counters are cleared within a day.
Ads
Kolvi shows a small number of ads, provided by Google AdMob. To show and measure ads, AdMob receives your device's advertising ID, your approximate location (from your network address) and basic app and device information. It never receives your food log, weight, body details, goals, diet or any other health data.
Ads are personalised (based on your activity in other apps and websites) only if you allow it: in the EU and UK we ask for your consent first, on iPhone Apple asks whether Kolvi may track you, and everywhere you can turn personalised ads off in Me > Personalised ads. If you turn them off, you still see ads, but they are not based on your activity elsewhere. The Ad-free plan removes ads completely.
3. Using Kolvi without an account
You can use Kolvi without signing in. Your data then stays only on your phone. When you sign in, it is backed up to your account.
4. Where your data is kept
Your account data is stored with Supabase, our database provider, on servers in the United States. Data is encrypted in transit, and access controls ensure only you can read your records. For users in the EU and UK, transfers to the US are covered by the European Commission's Standard Contractual Clauses.
5. Who we share data with
We never sell your data. We share it only with the service providers that help us run Kolvi, and only what each one needs:
| Provider | Purpose |
|---|---|
| Supabase | Database and sign-in for your account |
| Apple and Google | Sign-in, speech to text on your phone, app stores and payments |
| RevenueCat | Managing the Ad-free subscription (no health data) |
| Open Food Facts | Barcode lookups (only the barcode number) |
| Google AdMob | Showing ads (advertising ID, approximate location, device information; never health data) |
| Sentry | Crash reports (the error, where in the app it happened, and the phone model and system version; no account, health or food data) |
| Cloudflare | This website and our support email |
We may also disclose data where required by law.
6. Legal basis (EU and UK)
- To provide the app you signed up for (performance of a contract).
- Health data: your explicit consent, given in the app. You can withdraw it at any time, after which we stop using and delete that data.
- Personalised ads: your consent, which you can withdraw at any time in Me > Personalised ads.
- To keep Kolvi secure and fix problems (legitimate interests).
7. Data retention
We keep your data while your account is active. When you delete your account, we delete your data within 30 days, including from backups.
8. Your rights
You can request access to your data, a copy of it, or its correction or deletion, or object to how we use it. Email [email protected] and we will respond within 30 days. To delete your account, see Delete account.
In the EU or UK, you can also lodge a complaint with your local data protection authority. In India, you can approach the Data Protection Board of India. Residents of California and other US states with privacy laws have these rights too, including the right to opt out of the "sharing" of personal data for targeted advertising: turn off Me > Personalised ads. We never sell personal data, and we never share health data for advertising.
9. Children
Kolvi is intended for users aged 16 and over. Meal plans are available only to users aged 18 and over.
10. Changes
If we update this policy, we will change the date above and, for significant changes, notify you in the app first.