CalkoCALKO / PRIVACY
Calko privacy notice
Preparation version · 23 October 2026. This notice describes the current Calko design and development state. Production cloud processing remains disabled pending its checks.
Who is responsible
Calko is provided by ALLYGENIX PTY LTD. Contact us for support, privacy enquiries, access or correction requests and complaints using the details below. The postal address is taken from our company website; it is a contact address, not a claim about a registered office.
Your quotes, customers, price book, photos and invoice history are stored on your device. You can create encrypted version backups in iCloud Drive or export an encrypted backup. Calko has no product account and cannot recover a lost backup passphrase. Only one device should issue invoices; an old backup may require number reconciliation.
Cloud AI is optional and has a separate permission. When enabled and available, chosen work photos, a short audio or confirmed description, country/language and relevant item names are sent through Calko to Google in the EU. Business/customer fields, actual prices and tax identifiers are excluded from this request. Work content is processed temporarily; customer AI remains disabled until the applicable production privacy, contract and normal-access conditions are completed. Remove visible personal details before upload; automated removal is not guaranteed.
Optional measurement starts off. With your permission, the random installation identifier links available Apple Ads attribution, limited usage events and verified subscription stages. It is pseudonymous rather than fully anonymous. Turning it off clears the local optional event queue immediately and retries server withdrawal when connected. Optional details are retained up to 90 days. Essential quota and request metadata may remain up to 90 days; budget audit records 24 months and subscription-abuse records until 24 months after expiry. These records contain no quote content. Deleting optional server data does not reset AI allowance. Local documents and iCloud/exported backups have separate deletion controls.
Necessary pseudonymous installation, authentication and abuse-prevention recovery records do not depend on measurement permission and remain while the service association is active. Deleting that association invalidates access credentials and removes the active public key and subscription details. Only the necessary recovery binding, measurement-off version and deletion state remain, with expiry set to no later than 24 months after deletion, to prevent reconnecting from resetting AI allowance. Key-reuse prevention records have a separate 24-month expiry from creation. These records contain no business content. The stated periods describe expiry settings; database TTL cleanup can occur later, so physical deletion is not instantaneous.
We use the contact details and message you provide to respond to support and privacy enquiries.
Why we process information
Local document work happens on your device. Necessary authentication, quotas, security and subscription verification operate the requested service and prevent abuse. Optional cloud processing and optional measurement have separate controls.
Providers and international handling
The application service and metadata database are hosted in the Netherlands; Google model inference uses an EU endpoint. Apple separately operates purchases and your chosen iCloud service. EU inference does not mean that every service or security record stays in the EU. Google abuse monitoring may retain suspicious prompts for up to 90 days for authorised review. We do not promise zero retention across providers.
Service records
Application summaries use an EU log bucket with 7-day retention. Required administrative audit records have global storage and 400-day retention; a global default log bucket also exists. Model request-response logging and project caching are disabled. Expired database records are removed by scheduled cleanup and database TTL; physical removal can occur after the expiry time.
Your choices and rights
You can decline cloud processing, turn off optional measurement, manage local and backup copies, and request access, correction, deletion, restriction, objection or portability where applicable. Withdrawal does not undo prior lawful processing or remove necessary abuse-prevention records. Write to our contact address; we will verify requests proportionately and respond within the applicable legal period. We cannot retrieve local-only documents or a lost backup passphrase.
Complaints and changes
You can contact us about a privacy complaint so we can investigate and explain the outcome. You may also contact the relevant supervisory authority, including the ICO in the UK, your EU data-protection authority, or the OAIC in Australia. We will date material changes and provide an updated notice before changed processing begins. Calko is intended for tradespeople; it is not designed for children.