Vittly — Privacy Notice
Last updated: 2026-08-11
Vittly keeps what you do on your device — including your allergen profile, which is never transmitted anywhere. The one exception is a report that a place has closed: if you choose to send one, it is published to a public database so other people can see it. There are no adverts, no analytics, no third-party code and no Kalmaro server.
What stays on your device
Saved places, recently viewed places, cached ratings and map tiles, your notification and display preferences, and your allergen profile are all stored on your device only. Vittly's database is created with iCloud sync switched off, so none of it syncs — not even to your own private iCloud. A copy of your saved places and alerts is kept in a shared container on the device so the widgets can read it; that container never leaves the device either. Your allergen profile is health-adjacent information and is treated accordingly: it is used on your device to highlight matching food alerts, and it is not transmitted anywhere.
What leaves your device, and who receives it
There is no Kalmaro server. Vittly talks directly to four places and nothing else. The Food Standards Agency ratings API receives your searches; when you tap “Near me” that request carries your coordinates as part of the query, so the FSA can return venues around you. The FSA food alerts API receives no information about you at all. Companies House public data is queried by company name or number when the registered-company panel is shown, and again carries nothing about you. Apple's CloudKit receives closure reports only — see below. None of these requests carry an account, name, email, device identifier or advertising identifier, and none of them reach Kalmaro.
Reporting a place as closed — the one thing that is published
If you tap to report that a venue has closed, Vittly writes a single record to a public database hosted by Apple’s CloudKit. That record contains the venue’s FSA identifier, a timestamp, and the account identifier Apple’s servers stamp on it — no name, no email, no location and no free text. Reporting requires you to be signed in to iCloud; without an account you can still see how many people have reported a place, but you cannot report one yourself. That identifier is pseudonymous and specific to this app — it is not your Apple ID, your name or your email, and Kalmaro has no way to turn it back into a person. It is, though, part of a public database: anyone querying that database could group reports by identifier and see which venues one anonymous account has reported. Apple stamps it on every public record, and it is what stops one account reporting the same place over and over. Inside the app your identity is never shown — only a count of how many people have reported — and you can retract your own report at any time, which deletes the record. A report also cannot outlive the evidence behind it: whether it still counts is judged on Apple’s own server timestamp, so a fresh FSA inspection clears earlier reports. If you believe a place has been reported wrongly, the closure card carries a link to say so, and there is a support row in Settings — both lead to Kalmaro’s support page.
Location and notifications
Location is requested as “when in use” only, and only when you tap “Near me”. It is read at that moment to search for venues around you; Vittly never reads your location in the background and never uses it to track you. Notifications, if you turn them on, are generated entirely on your device for food recalls and for changes at places you have saved. An alert that matches your allergen profile says only that it matches — the allergens themselves are never named in the notification, so they never appear on your Lock Screen. There is no push server, Vittly never registers for remote notifications, and no device token exists. Vittly asks for nothing else — no camera, contacts, photos, health data or microphone.
No adverts, no analytics, no third-party code
Vittly links no third-party packages at all. There is no analytics, no crash-reporting service, no advertising identifier and no tracking of any kind, and the app declares no tracking domains.
Purchases
Vittly is free and nothing in it is behind a paywall. Two optional one-off purchases exist — a Supporter purchase that adds alternative app icons and a supporter badge, and a tip that grants nothing at all. Neither unlocks any function, and there is no subscription. Purchases are handled by Apple and verified on your device; there is no receipt server, so no purchase information reaches Kalmaro.
What the App Store label says
Vittly's App Store privacy label is not “No Data Collected”, because the closure report described above is published off your device. Two types are declared, both linked to you and neither used for tracking: the report itself (user content) and the account identifier Apple stamps on it. Nothing else Vittly holds is collected. If you have questions about privacy, see the main privacy policy, which carries the contact address.