Vittly — Privacy Notice
Last updated: 2026-07-24
Vittly keeps what you do on your device — including your allergen profile, which is never transmitted anywhere. The one exception is a report that a place has closed: if you choose to send one, it is published to a public database so other people can see it. There are no adverts, no analytics, no third-party code and no Kalmaro server.
What stays on your device
Saved places, recently viewed places, cached ratings and map tiles, your notification and display preferences, and your allergen profile are all stored on your device only. Vittly's database is created with iCloud sync switched off, so none of it syncs — not even to your own private iCloud. A copy of your saved places and alerts is kept in a shared container on the device so the widgets can read it; that container never leaves the device either. Your allergen profile is health-adjacent information and is treated accordingly: it is used on your device to highlight matching food alerts, and it is not transmitted anywhere.
What leaves your device, and who receives it
There is no Kalmaro server. Vittly talks directly to four places and nothing else. The Food Standards Agency ratings API receives your searches; when you tap “Near me” that request carries your coordinates as part of the query, so the FSA can return venues around you. The FSA food alerts API receives no information about you at all. Companies House public data is queried by company name or number when the registered-company panel is shown, and again carries nothing about you. Apple's CloudKit receives closure reports only — see below. None of these requests carry an account, name, email, device identifier or advertising identifier, and none of them reach Kalmaro.
Reporting a place as closed — the one thing that is published
If you tap to report that a venue has closed, Vittly writes a single record to a public database hosted by Apple's CloudKit. That record contains the venue's FSA identifier, a timestamp, and the account identifier Apple's servers stamp on it — no name, no email, no location and no free text. Reporting requires you to be signed in to iCloud; without an account you can still see how many people have reported a place, but you cannot report one yourself. The record is stored under a salted hash of your app-specific iCloud identifier rather than the identifier itself, your identity is never shown in the app — only a count of how many people have reported — and you can retract your own report at any time, which deletes the record.
Location and notifications
Location is requested as “when in use” only, and only when you tap “Near me”. It is read at that moment to search for venues around you; Vittly never reads your location in the background and never uses it to track you. Notifications, if you turn them on, are generated entirely on your device for food recalls and for changes at places you have saved. There is no push server, Vittly never registers for remote notifications, and no device token exists. Vittly asks for nothing else — no camera, contacts, photos, health data or microphone.
No adverts, no analytics, no third-party code
Vittly links no third-party packages at all. There is no analytics, no crash-reporting service, no advertising identifier and no tracking of any kind, and the app declares no tracking domains.
Purchases
Vittly is free and nothing in it is behind a paywall. Two optional one-off purchases exist — a Supporter purchase that adds alternative app icons and a supporter badge, and a tip that grants nothing at all. Neither unlocks any function, and there is no subscription. Purchases are handled by Apple and verified on your device; there is no receipt server, so no purchase information reaches Kalmaro.
What the App Store label says
Vittly's App Store privacy label is not “No Data Collected”, because the closure report described above is published off your device. Two types are declared, both linked to you and neither used for tracking: the report itself (user content) and the account identifier Apple stamps on it. Nothing else Vittly holds is collected. If you have questions about privacy, email Kalmaro at reveal email address, or see the main privacy policy.