Privacy, Terms & Support

Who we are

Kallos One is developed by Ahmad Junaid ("we", "us"). This policy explains how the Kallos One app for iPhone, iPad and Mac handles information.

What the app stores

To run your studio, Kallos One stores the information you enter: bookings and their history (including the client, models, fees and rights agreed, reschedules, cancellations, the cancellation reason you choose, such as a no-show, and any note you add, and the client's wishes for the booking, and the shoot care you agree with a model: the level agreed, what's planned and not included, how touch is handled, the closed set, the support person, the stop word and the model's wishes), weddings and events (the kind of event, the couple's or host's names, the client and main contact, each day's venue and theme or dress code, the number of guests, each day's timeline of moments (times, places, who's needed), family members and key contacts with their phone numbers, your team, sensitivities you note (such as women-only areas or guests not to photograph), must-have shots and group photo lists, reference photos the client shares, and delivery dates, the client's wishes and your notes, the event's fees, deposit, deliverables and the Event Agreement it's signed with), model details (name, nickname, email, phone, address, date of birth, headshot and private notes, and their model card: measurements, sizes, hair and eye colour, tattoos and piercings, experience, the kinds of shoots they're interested in, availability, travel, TFP or paid, and how they heard about you), client details (name, company, email, phone, address, tax ID, private notes and, for adults-only shoots, date of birth), makeup artist and stylist details (name, business name, role, email, phone, address, tax ID and private notes, plus whether they were on each shoot and what you agreed to pay them), parent or guardian details for minors (name, relationship, phone and email), signatures (drawn on your device or taken from a photo), signed model releases and client agreements (including who each was signed with, which is kept after you delete that person, the shoot date and place each names, and the name and title of the person who signed for the client), invoices to clients and statements to models (including TFP) and when each was paid, quotes, business expenses with the receipt photos you add, your rate card, your code of conduct (How I Work), your PayID, bank details and payment links, mood board and portfolio photos you add, a model's Instagram, portfolio link and agency, an activity log of what happened to your documents and data (names, numbers and the device name only), whether and when each document was emailed, contract templates and your governing law choices, business profiles, your master signature and app settings.

This information is stored on your device. When iCloud sync is on (it's on by default where available, and you can switch it off in Settings › Cloud & Multi-Device Sync), it is also stored in your private iCloud account, which Apple operates under Apple's Privacy Policy, so it appears on your other devices signed in to the same Apple Account. Your studio settings (such as What You Shoot, your bookkeeping codes, booking defaults and calendar choice) are kept in iCloud key-value storage in the same private iCloud account, so they follow you to your other devices; the archive folder, app lock, appearance and sample data stay on each device. We cannot access your device or your iCloud data.

What we collect

Nothing. Kallos One has no accounts, no servers, no analytics, no advertising, no tracking and no third-party SDKs. We do not collect, receive, sell or share any personal or financial information, including invoice amounts.

Permissions and why they're used

• Calendar: to add your booked shoots to your iCloud or on-device calendars (On My iPhone, iPad or Mac) and check for clashes with events in those calendars. Calendars from other accounts, such as Google or Exchange, are not read. A calendar entry holds the shoot's title (which often includes a model's, client's or couple's names), its time and place, and notes on who's coming (the shoot type, client, models, makeup and styling) or, for a wedding or event day, the event's name, the day and its theme. Entries are part of your calendar, so they sync wherever that calendar does (for example iCloud) and can be seen by anyone you share that calendar with. Kallos One removes them when you delete a booking or an event, when you cancel a booking with Remove from Calendar and Reminders on, or with Delete All Data if you choose. They stay in your calendar when you archive a shoot or delete a model; delete them in the Calendar app if you no longer want them.
• Notifications: to remind you an hour before a shoot if a release isn't signed yet, to wrap up after a shoot, and when an invoice is overdue. Reminders are scheduled on your device and you can turn them off in Settings › Notifications.
• Reminders: to create shoot reminders, a wedding or event's countdown reminders and, only if you choose one, a Prepare reminder with the client's wishes, and to let you tick them off from the widget.
• Contacts: when you import a model, client, makeup artist or stylist, save one to Contacts, or choose to update a contact or refresh from it. When you open Kallos One it also reads the contacts you've linked to show you what changed in Contacts. If a link has stopped working, it looks for that person in Contacts by their name, phone number or email to link them again. Nothing is changed until you choose Use New Details or Update All, and nothing is sent anywhere. When updating, only the name (first, middle and last), company, and the specific phone number, email and address you picked are changed; other details on the contact are kept. Private studio, client and crew notes, dates of birth, headshots and guardian details are never written to Contacts. A contact's birthday is only ever read: it fills in a model's date of birth when you import them, and a changed birthday is offered for you to review one person at a time (Update All never changes a date of birth).
• Face ID or Touch ID: to lock the app, if you turn this on, and to leave Signing mode. Biometric data is handled by your device's operating system and never seen by the app.
• Spotlight and Siri: names of bookings, models, crew, clients, contracts and invoices, shoot dates and shoot places (a place can be a home address) are added to Spotlight search on this device so you can find them from the Home Screen (or with ⌘Space on a Mac). Email addresses, phone numbers and notes are never added, and nothing is sent to Apple or anyone else. You can turn this off in Settings › Privacy & Data › Show in Spotlight, or leave out just the places with Show shoot places in Spotlight. If you ask Siri about your next shoot, the answer is read from this device, and Siri asks you to unlock first. What you say to Siri is handled by Apple under Apple's Privacy Policy.
• Archive: when you archive old shoots, Kallos One saves them, with their signed contracts, invoices, quotes, enquiries and PDFs, to the folder you choose, then removes them from the app. Invoices, sales and expenses stay in the app until you mark their tax year as lodged; then they're saved to the same archive, with a summary and spreadsheet of the year, and removed. You can protect the archive file with a password; it's then encrypted, and the password is kept in your iCloud Keychain (end-to-end encrypted by Apple) so your other devices can add to the same archive. Separate PDF copies aren't password-protected. The archive stays wherever you put it; Kallos One never sends it anywhere, so keep it somewhere only you can open.
• Camera: only when you choose Take Photo for a model's headshot or a receipt. The photo stays in Kallos One and isn't saved to your photo library.
• Photos: only the specific photo you pick for a logo, headshot, signature, receipt or reference photo. The app does not get access to your photo library.
• Files and folders: only the location you choose when you save or open a backup, choose your archive folder, or save a contract or invoice. The app can't see any other files.
• Local network: only when you use Sign on Another Device or a Signing Station. Kallos One finds your own nearby iPad, iPhone or Mac over Bluetooth or Wi-Fi and sends the contract to be signed, and the signature back, encrypted and directly between the two devices. Nothing goes over the internet, the other device must accept each connection, and your device asks for the 4-digit code shown on the other device before sending each contract.

You can change any permission in Settings on iPhone or iPad, or System Settings on a Mac. The app keeps working without them; only the related feature is unavailable.

When information leaves your device

Only when you choose to share it: for example, emailing a signed release or client agreement, an invoice, or a reschedule or cancellation message to a model, saving a document to Files, creating a backup file and choosing where to save it, exporting a money summary spreadsheet (CSV) or files for Xero or MYOB for your accountant or bookkeeping app, or keeping iCloud sync on. Emails are sent from your own Mail account. For a model under 18, emails about their shoots are addressed to their parent or guardian, with the model copied in. Backups are never uploaded by Kallos One; a full backup contains model, client and crew details and signed contracts, so keep it private and protect it with a password.

Address search uses Apple Maps; the text you type is sent to Apple to suggest addresses, under Apple's Privacy Policy. A shoot's or event day's place, and a timeline moment's own place, is also looked up in Apple Maps to find it on the map: when a shoot is added to your calendar (so Calendar can show travel time), and for weather, golden hour, timeline maps and travel times between places, whether or not the shoot is in your calendar. Only the place's text goes to Apple, under Apple's Privacy Policy.

Weather forecasts come from Apple WeatherKit, using each booking’s own map pin (the location you added to the shoot), your studio’s address or a city you type. Only if you choose Where I am on Home does Kallos One ask for your device’s location: it reads an approximate position (about a kilometre) while Home is open, sends it to Apple’s weather service for that lookup only, and never saves, syncs or shares it. You can turn location off at any time in the Settings app. Otherwise only the coordinates and date of the place being looked up go to Apple’s weather service. Lookups happen when you open the app, when you save a shoot and, on iPhone and iPad, a few times a day in the background (you can turn this off with Background App Refresh in the Settings app). See Apple’s WeatherKit terms for how Apple handles that request.

Square: if you take a card payment with Square (Get Paid › Card), Kallos One opens the Square Point of Sale app on your device with the invoice's amount, currency and number. Square handles the payment under its own terms and privacy policy; Kallos One only receives whether the payment went through, and marks the invoice paid.

Apple Intelligence: on devices that have it, From a Message and Draft a Message use Apple's own model on your device. The message you paste and the booking's details are read on your device only and are never sent to us, to Apple or to anyone else.

Sample data: if you turn on sample data, a separate sample studio is kept on this device only. It never syncs to iCloud and never goes to Calendar, Reminders, notifications or Spotlight.

Add to Kallos One links: a model form on your own website can email you a link with a model's details. Opening it fills in a new model for you to check and save. The details travel inside the link itself; the page it passes through doesn't keep or send them, and nothing is saved until you choose to. The form itself runs on your own website, not in Kallos One: if its address suggestions are on, what the model types in the street box is sent to Apple Maps (when the photographer adds an Apple Maps token) or otherwise to OpenStreetMap's address search (photon.komoot.io), to suggest matches. Neither Kallos One nor its developer receives it. An enquiry form on your own website works the same way: a client's enquiry and their answers travel inside the link, and nothing is saved until you tap Save Enquiry.

Information about models and minors

When you record a model's details, you decide what is collected and are responsible for having a lawful basis and the model's consent, and for parent or guardian consent when the model is a minor. Kallos One gives you tools to record that consent, but doesn't verify it. Kallos One never allows a model under 18 in an adults-only shoot (see Children below).

Cancellation reasons and notes are personal information about the model. Record only what you need for your business, and keep notes factual.

Models you've worked with: a short text record of each model you book (name, email, phone, city and country, date of birth, their comfort level and whether they're OK with private images, and the list of their shoots) is kept on your devices even after you archive their shoots or delete the model (unless you choose to delete their history too), so you have a lifetime history. It's included when you export a model's data. That export (Export Their Data) leaves out your private notes unless you choose to include them, and other models' details on shared shoots; it lists the releases kept in your archive, and the zip is deleted from your device once you've shared it. You can delete any record from Models › Models You've Worked With.

A model's comfort level (from Clothed only up to full art nude) and whether they're OK with private images are recorded only if you choose to, only for models 18 or older, and only for your own records. They never allow or skip any age check. Ask the model and keep them up to date.

A “Needs Info” badge may appear on a model’s card when a mandatory field (date of birth, address or at least one contact detail) is still blank, so you remember to ask them next time you meet. The badge is only shown to you on this device and your other signed-in devices; nothing is sent anywhere, and optional fields never trigger it.

Keeping and deleting information

You decide how long information is kept. You can cancel a booking and keep its record, delete a booking together with its signed contracts and invoices, delete a model (keeping or removing their contact in Contacts), or erase everything from Settings › Privacy & Data › Delete All Data. After deleting an item you have a few seconds to tap Undo; after that it's gone. Delete All Data always asks first. With iCloud sync on, anything you delete on one device is also deleted on your other devices. Deleting the app removes the data stored on the device; data in iCloud can be managed in Settings › your name › iCloud (System Settings › your name › iCloud on a Mac).

Signed releases may be your proof of consent, and signed client agreements your record of what was agreed. Consider exporting them, or making a full backup in Settings › Backup & Restore, before deleting.

Security

Your data is protected by Apple's built-in data protection and your device passcode or Mac login password. You can also lock Kallos One with Face ID or Touch ID, and the app hides its contents in the app switcher on iPhone and iPad. Kallos One keeps the SHA-256 of each signed contract's PDF file, so you can check that a copy hasn't been altered (on the contract's page, or with Settings › Privacy & Data › Verify a PDF File…); the PDF's footer carries a content fingerprint of what was signed. Widgets and Live Activities, if you add them, show upcoming shoot details (title, time, location and model name) and, on an event day, the names of the day's timeline moments (private moments are hidden) on your Home Screen and Lock Screen, where they can be seen without unlocking your device. Notifications show the shoot's title and, when a release isn't signed yet, the model's name, or an overdue invoice's number; depending on your notification settings they can appear on the Lock Screen too. To hide what they say until you unlock, set Show Previews to When Unlocked in Settings › Notifications (System Settings › Notifications on a Mac). Spotlight results (names, shoot dates and shoot places) can be seen by anyone using your unlocked device, even when Kallos One is locked with Face ID; turn off Show in Spotlight (or just Show shoot places in Spotlight) to prevent this. Signing mode keeps a signer to the contract on screen until you confirm with Face ID, Touch ID or your passcode.

Children

Kallos One is a tool for professional photographers and is not directed at children.

Models under 18 may only be photographed for appropriate shoots, such as portfolio, fashion, family and portrait work, with a parent or guardian's written consent and with the parent or guardian present.

Kallos One never allows, and we will never support, any shoot of a person under 18 involving nudity or implied nudity, lingerie, underwear, swimwear, boudoir, glamour or any sexualised content. These shoots are for adults only, with no exceptions, even with a parent or guardian's consent. Adults-only shoot types are marked 18+ and are not even offered when booking anyone under 18. The app also stops a booking, an edit and any signature when anyone under 18, or anyone whose age isn't confirmed, is part of such a shoot, and every adults-only shoot requires confirming that everyone photographed is 18 or older.

Your rights

Because we don't hold any of your information, you can access, correct, export and delete it directly in the app at any time. This applies wherever you live, including under the GDPR and the Australian Privacy Act.

Changes and contact

If this policy changes, the updated version will appear here and in the app with a new effective date. Questions? Email contact@ahmadjunaid.com.

Licence

Kallos One is licensed to you under Apple's Standard Licensed Application End User License Agreement, together with the points below.

Protecting children

You must not use Kallos One to arrange, record or document any shoot that sexualises or exploits a person under 18, including nudity or implied nudity, lingerie, underwear, swimwear, boudoir or glamour shoots, whatever the stated purpose and even with a parent or guardian's consent. Doing so breaks these terms and the law, and your licence to use Kallos One ends.

If you suspect a child is being exploited, call the police on 000 in an emergency, or report it to the Australian Centre to Counter Child Exploitation at accce.gov.au/report. Outside Australia, contact your local police.

Not legal advice

Sample templates and governing law choices are for convenience only. Photography laws vary by state and country. Have a local lawyer review your agreements.

The sample model release and client agreement, the electronic-signature consent and the parent or guardian wording are starting points only. Laws on model releases, client contracts, consumer rights, electronic signatures and minors differ between countries and states, and some protections cannot be waived. You are responsible for the agreements you use and for complying with the law where you work.

The governing law choices (Australian states and territories, and other countries) only fill in the place named in your contract. Choosing one doesn't make a template comply with that place's law, so check your agreement with a local lawyer, especially before working in another state or overseas. The same applies to the extra terms Kallos One can add for particular kinds of shoot (such as commercial use, stock, swimwear, nudity, safety, workshops and private images): they are short starting points added to your own template, not legal advice.

The Money Summary, its GST and BAS figures and the accountant spreadsheet are added up from the invoices and statements you entered, by issue date. They are a convenience, not tax or accounting advice. Check them with your accountant or registered tax agent before you lodge a BAS or tax return.

Electronic signatures

Kallos One records when, how and on which device each signature was given, and prints this on the release or client agreement with a fingerprint of the document. Whether an electronic signature is valid for a particular agreement depends on local law.

A signature taken from a photo shows only that an image was supplied, not that the person signed that document at that moment. Use photo signatures for your own master signature, and have models and guardians sign live on your device.

Make sure the right person is signing.

Your content

You own everything you create in Kallos One. Keep your own copies of important documents, such as signed releases and client agreements, for example with Settings › Backup & Restore; deleted data can't be recovered. If you protect a backup with a password and lose it, the backup can't be opened.

No warranty

To the extent permitted by law, Kallos One is provided "as is". Nothing in these terms limits rights you have under consumer law, including the Australian Consumer Law.

Contact

Email contact@ahmadjunaid.com.