Privacy Policy

Effective Date: July 1, 2026

1. Introduction

Welcome to Klav AI ("we", "us", or "our"). We built Klav AI to help you track your nutrition, health, and fitness goals. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

By creating an account or using Klav AI, you agree to this Privacy Policy. If you do not agree, please do not use the app.

---

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Email address
• Password (stored in encrypted form — we never see it in plain text)

2.2 Profile Information

Information you provide to personalise your experience:

• Name
• Age
• Biological sex
• Height and weight
• Fitness goal (fat loss, muscle gain, maintenance)
• Activity level
• Target weight
• Preferred measurement units (kg/lb, ml/fl oz)

2.3 Health and Nutrition Data

Data you log while using the app:

• Daily diary entries (meals, calories, macros: protein, carbs, fat, fiber)
• Water intake logs
• Weight logs over time
• Supplement names, doses, and daily check-in logs
• Protein powder scoop settings

2.4 Meal Scan Photos

When you use the Meal Scan or Fridge Scan feature:

• You take or upload a photo of your meal or fridge
• That image is sent securely to our server-side proxy, which forwards it to a third-party AI provider for nutritional analysis
• A compressed thumbnail of your meal photo may be stored locally on your device only — we do not permanently store full-resolution photos on our servers
• The nutritional data extracted from the photo (calories, macros, micronutrients, health score) is stored in your account

2.5 Health Platform Integrations (Optional)

You may optionally connect Klav AI to health platforms to enhance your daily health score and tracking accuracy. These integrations are entirely voluntary and can be disconnected at any time.

Apple Health (iOS only)
We read step count and active calories burned to track your daily activity and health score. We do not write any data to Apple Health.

Google Health Connect (Android only)
We read step count and active calories burned to track your daily activity and health score. We do not write any data to Google Health Connect.

Future integrations
We may add support for additional health tracking apps and wearable devices over time (such as Fitbit, Garmin, Whoop, or similar platforms). Any new integration will always be optional, clearly disclosed, and subject to this Privacy Policy.

2.6 Usage and Technical Data

• Device type and operating system
• App version
• Crash reports and error logs (used only to fix bugs)
• General usage patterns (which features are used — no keystroke logging)

---

3. How We Use Your Information

We use your data exclusively to:

• Create and manage your account
• Calculate your personalised daily calorie and macro targets
• Generate your daily health score
• Display your progress, streaks, and trends over time
• Analyse meal photos using AI to estimate nutritional content
• Send you local push notifications about your daily goals (optional, can be disabled)
• Improve the app's performance and fix bugs

We do not sell your personal data to any third party. We do not use your health data for advertising targeting.

---

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases as required by GDPR Articles 6 and 9:

Data Category	Legal Basis
Account and profile data	Contract — necessary to create your account and deliver the service
Health and nutrition data (diary, weight, water logs)	Explicit Consent — health data is a special category under GDPR Article 9; you provide consent by actively logging this data
Meal scan photos and AI processing	Consent — you initiate each scan; your image is sent to a third-party AI provider only on your explicit action
Crash reports and usage analytics	Legitimate Interest — to maintain security, fix bugs, and improve the service

You may withdraw consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing before withdrawal.

---

5. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers (including Supabase and our AI provider) are based. These transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards, ensuring your data receives a level of protection equivalent to that required within the EEA.

---

6. AI-Powered Nutritional Analysis

When you scan a meal or fridge, your image is processed by one or more third-party AI providers via our secure server-side proxy. The AI analyses the image and returns a nutritional estimate — your image is not stored on our servers.

Important: nutritional values returned by AI are estimates based on visual analysis. They are not clinically measured and may not reflect exact nutritional content.

---

7. Data Storage and Security

Your data is stored securely using Supabase, a cloud database provider. All data is:

• Encrypted in transit using TLS/HTTPS
• Stored in encrypted databases
• Accessible only to your account via authenticated sessions

We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, or deletion. However, no system is completely secure — please keep your account credentials confidential.

---

8. Data Retention & Account Deletion

We retain your personal data for as long as your account is active. If you delete your account:

• All your profile, diary, water, weight, and supplement data is permanently deleted from our servers within 30 days
• Locally cached data on your device is removed when you uninstall the app

How to delete your account:

1. Open the Klav AI app on your device
2. Tap the Account tab (bottom right of the screen)
3. Tap Delete Account
4. Confirm the deletion when prompted

Deletion is immediate and irreversible. All personal data including your profile, diary entries, weight logs, water logs, supplement logs, and scan history will be permanently removed from our servers within 30 days.

---

9. Your Rights

All users:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data

EU/EEA users (GDPR):

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to erasure ("right to be forgotten")
• Right to lodge a complaint with your local data protection authority

California users (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of sale (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at: contact@klavtech.com

---

10. Children's Privacy

Klav AI is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account immediately.

---

11. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Database and authentication	supabase.com/privacy
Google Gemini	AI nutritional analysis	policies.google.com/privacy
Apple HealthKit	Step count (iOS, optional)	apple.com/legal/privacy
Google Health Connect	Step count (Android, optional)	policies.google.com/privacy

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. For significant changes, we will notify you within the app. Continued use of Klav AI after changes are posted constitutes your acceptance of the updated policy.