Rondo

Privacy Policy

Rondo is a companion app for people taking GLP-1 medication, made by Knightloom Software of Ontario, Canada ("we", "us"). It keeps what you enter on your device. Rondo has no account, and we do not run a server that stores your profile, medication, weigh-ins, check-ins or photos.

Data you enter

The app stores the information you give it, including:

  • Your first name, height, weight, activity level and body-fat estimates, including any tape measurements
  • Your medication, dose history, start date and shot days
  • Weigh-ins, daily check-ins (such as protein and side effects) and your goal
  • Food preferences, including the eating pattern, food rules and allergies you choose, and your country
  • The foods and meals you log, and foods you add yourself
  • Reminder settings
  • Progress photos, if you choose to take them

How it is stored

This data is stored in the app's private storage on your device. Rondo does not send it to us, and the app contains no analytics or advertising tracking of its own. Three things contact a third party without your data in them: the app update check, described under App updates, the text reader used for label scanning on Android, described under Food labels, and the optional assistant model download, described under Ask Rondo.

Progress photos

Progress photos are taken with your camera only when you tap to take one. They are saved in the app's private storage, not in your photo library, and the app never uploads them.

  • On Android, progress photos are excluded from Android backups and device-to-device transfers.
  • On iPhone, progress photos are excluded from iCloud and computer backups of your device.

Food labels

You can scan a nutrition label to add a food. The photo is taken with your camera, or picked from your photos, only when you tap to do so. It is read on your phone, and the photo is deleted as soon as it has been read; only the numbers you check and confirm are kept, as one of your foods.

  • On Android, the text is read by Google's ML Kit, which runs on your phone. The photo and the text read from it never leave your phone. Under Google's ML Kit terms, ML Kit may send Google usage and diagnostics information about how the feature runs, not the photo or its text: the device model and Android version, Rondo's package name and version, a per-installation identifier that is not meant to identify you or your device, performance figures such as how long reading took, and error codes. Google uses this to measure, fix and improve ML Kit and to detect misuse. It is encrypted in transit, and Google says it does not pass it to third parties.
  • On iPhone, the text is read by Apple's Vision on your phone, which sends nothing.

Ask Rondo

Ask Rondo turns your speech into text on your phone and works out what you asked with the phone's built-in language model, or with a model you chose to download. Your words, your plan and your numbers never leave your phone. The optional model file is downloaded once, from its publisher, only when you ask for it.

  • On Android, the built-in model is Gemini Nano, reached through Google's ML Kit, which runs on your phone. What you said and what Rondo answered never leave your phone. Under the ML Kit terms, ML Kit may send Google the same usage and diagnostics information described under Food labels, not your words.
  • On iPhone, the built-in model is Apple's, on your phone, and it sends nothing.
  • On Android, if the phone has no offline English speech pack, Rondo can ask Android to download one when you tap the button. Android fetches that pack from Google; Rondo only makes the request and sends nothing with it.

Device backups

Your Rondo data is health data: your medication history, weight, food logs and notes. Apart from progress photos, it may be included in the device backups you have turned on (for example Google or iCloud backups), so it can be restored to a new phone. Those backups are managed by your device and account settings, not by us. On Android 12 and later, Rondo's data goes into Google's backup only when it can be end-to-end encrypted, which needs a screen lock on the phone. On Android 11 and earlier, Rondo's data is included in Google's backup with Google's standard backup encryption.

Backup files

You can save a backup file of your Rondo data. The app makes it only when you ask, or, on Android, weekly when you turn that on. It is saved where you choose (a folder on your phone, a Drive or OneDrive folder, or wherever you send it from the share sheet) and is encrypted with a passphrase you choose unless you decide to save it without one. Rondo never receives the file or the passphrase.

Subscriptions

Rondo is a subscription. Purchases are handled by the App Store or Google Play. The app uses RevenueCat to check whether your subscription is active. To do this, RevenueCat receives an anonymous app user ID and your purchase and subscription status from the store. It does not receive the health information you enter in the app. RevenueCat and the stores process this information under their own privacy policies.

Sharing your plan

If you choose to export your plan, the app creates a PDF on your device and opens your system share sheet. Where it goes next is up to you.

Reminders

Reminders are scheduled on your device as local notifications. They are not sent from a server.

App updates

When Rondo starts, it checks Expo's update service for a newer version of the app's code, so fixes can reach you between store releases. Expo makes the tools Rondo is built with. The check sends your phone's platform (iPhone or Android), the app's version and update details, and a random identifier for this installation of the app. It includes none of the data you enter in Rondo. Expo processes this under its own privacy policy.

This website and the email list

If you join the Rondo email list on getrondo.app, we keep your email address with our email provider so we can send you the launch email, any launch offer code and occasional news. We use it for nothing else and do not sell or share it. Every email has an unsubscribe link, and you can ask us to delete your address at any time. The website itself uses no analytics or advertising trackers.

Keeping and deleting your data

Your data stays on your device until you remove it:

  • Uninstall Rondo, or clear its storage in your device settings, to delete the data and photos on the device
  • Delete any backup files you saved, wherever you saved them
  • Delete any device backups that contain it through your Google or Apple account settings

Children

Rondo is for adults aged 18 and over. It is not meant for children.

Data sharing

We do not sell your personal data. Because we do not hold your app records, we have none to share. The only personal data we hold is the email address you give us if you join the email list.

Changes to this policy

If we change this policy, we will post the new version on this page and update the date below.

Contact

If you have privacy questions, contact us at support@getrondo.app.

Last updated: 1 November 2026