Privacy Policy

1. Data we collect

Depending on the features you use, we store the following about you:

• Account: your Apple account identifier from Sign in with Apple and, if Apple provides it the first time you authorize, your name. We do not receive your Apple password.
• Profile: nickname and avatar, and the basic information you enter — gender, height, date of birth and kidney condition.
• Diary and health records: food and drink entries, water intake, weight, and the self-measured health values you log.
• Condition management: condition timeline events and the lab-report values extracted from reports you scan.
• Photos: photos of food and of nutrition labels, and avatar images you upload.
• Apple Health: if you allow it, active energy and step counts read from Apple Health; and, if you turn it on, meals the app writes back to Apple Health.
• Reminders and medication check-offs you set up.
• Social features: friend relationships and requests, items you share with friends, meal plans you co-edit, and blocks and reports you file.
• Purchases: your subscription status (the purchase itself is handled by Apple).
• Technical logs: request time, endpoint and error information needed to run and secure the Service. These logs do not contain the content of your health records.

2. How we use your data

To provide the features you ask for (recognizing meals, calculating nutrition against your targets, trends, reminders, sharing), to keep the Service secure and working, to troubleshoot problems and review the quality of AI results, and to provide the public food library. We do not use your data for advertising.

3. Third parties that process your data

We use the following service providers. They receive only what is needed for the feature you use, and the content sent is the photo, text or report image you submit:

• Anthropic (AI): food photos and text descriptions for meal recognition and follow-up questions; recipe text for recipe analysis; meal text for the daily rough estimate; lab-report images for report parsing; and receipt photos when OpenAI cannot read them (fallback).
• OpenAI (AI): receipt photos for receipt scanning (OpenAI first, with Anthropic as fallback); the same recognition photos and text when our primary AI provider fails (fallback); and nutrition-label photos for label reading.
• Hugging Face (hosts our own self-hosted model): the text of a planned meal for the Plan page single-meal estimate, and food names for the weekly public-library update (see section 6).
• Amazon Web Services: hosting, database and file storage for the Service, and text embeddings of food names for library search.
• Apple: Sign in with Apple and in-app purchases. Apple Health data stays under Apple Health on your device; the app reads it only with your permission.

4. How AI inputs and outputs are handled

When you use an AI feature, the AI input (your photo, text or report image), the model output, and the version you finally save are stored. We keep this only for troubleshooting and quality review.

We do not use the nutrition data you record to train AI models, because its reliability cannot be guaranteed. When we improve our own self-hosted model, we may use de-identified food names as leads and then take the nutrition values from vetted, authoritative nutrition data.

The first time you use an AI feature, the app asks for your consent before sending your data to the providers above. You can withdraw consent in the app settings; AI features then stop working until you agree again.

5. Photos

On the confirmation screen you can choose not to keep the original photo. Uploaded food photos are in any case automatically deleted from our storage after 30 days at most. Lab-report images are deleted right after they have been parsed; only the extracted values are kept.

6. Public food library

Foods you add to the public library, and nutrition-label photos you choose to show to others, are visible to other users together with your nickname and avatar. Each week our system also aggregates the food names and nutrition estimates from all users’ diaries, without identity information, to expand the public library automatically.

7. Apple Health data

Data from Apple Health is used only to adjust your calorie and carbohydrate targets and, if you enable it, to write meals back. We do not use it for advertising, we do not sell it, and we do not use it for anything unrelated to the app’s features.

8. No advertising, tracking or sale of data

We do not show ads, we do not track you across other companies’ apps or websites, and we do not sell your personal data.

9. Retention and deleting your account

We keep your data while your account exists. You can delete your account in the app (Settings → Delete account). Deletion removes your profile, records, photos, friend links, pending shares and reports, and revokes the app’s Sign in with Apple authorization. Foods you contributed to the public library stay available to other users but are anonymized and no longer linked to you; any nutrition-label photo you had chosen to show is deleted. We keep only a record that the account was deleted, when, and how many free AI uses it had spent, so that signing up again with the same Apple ID does not restart the free trial.

10. Security

Data is encrypted in transit and at rest, and access is limited to what the Service needs. No system is perfectly secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect their data.

12. Your choices and contact

You can view and edit your information in the app, withdraw AI consent, block users, and delete your account. For any other request about your data, or questions about this policy, write to business@karmalabs.sg.

13. Changes to this policy

We may update this policy. We will post the new version here with a new effective date, and tell you in the app if the change is significant.