Privacy Policy – Kaivro

Introduction

We respect your privacy and are committed to being transparent about our data practices. This policy describes what information we collect, why we collect it, and the choices you have. We do not sell your personal data.

Please also review our Terms of Use for more information about using the Service.

Information We Collect

We collect information you provide directly and information collected automatically.

• Account and contact information (for example, email address).
• Profile information (for example, name, preferences, and other details you choose to add to your account).
• User-generated content you enter into the Service, such as nutrition logs, workouts, training notes, sleep and water entries, meal photos, and related content.
• Support communications when you contact us for help or provide feedback.
• Technical and usage information such as device information, operating system version, app version, approximate location (derived from IP address), log data, and crash reports.
• Health and fitness data imported from Apple Health (iOS) or Health Connect (Android) when you enable Health Sync in the app (Pro).
• Subscription and billing identity processed via RevenueCat and Apple/Google (for example, a store purchase token linked to your Kaivro account ID). We do not store full payment card numbers.

Health Data Sync (Apple Health & Health Connect)

Kaivro can connect to Apple Health on iOS and Health Connect on Android to reduce manual logging and keep your wellness data consistent across apps. This sync is entirely optional.

Enabling Sync

Sync is off by default. You can connect Kaivro to Apple Health or Health Connect from the Health Sync settings within the app. Sync only begins after you opt in and grant the necessary permissions. You choose which data types to enable.

Data Kaivro May Read (With Permission)

• Sleep data (duration and sleep sessions)
• Exercise and workout sessions
• Activities / movement (where supported by the platform)
• Heart rate (where supported; platform permissions vary)
• Nutrition and water intake (where enabled)

Data Kaivro May Write (With Permission)

• Workouts logged in Kaivro
• Nutrition (calories and macros from meals logged in Kaivro)
• Hydration / water intake logged in Kaivro

Platform Differences

Available data types depend on Apple Health or Health Connect permissions and what you enable in Kaivro's Health Sync settings. You choose which types to allow.

Purpose

Health data sync is used solely to import sleep and workout data into Kaivro and to export workouts, nutrition, and hydration data you log in Kaivro. This data is not sold. It is not used for advertising.

Storage and Security

Health data imported into Kaivro is stored with your account and protected using the same security practices described in this policy (encryption in transit, access controls, operational safeguards). Data written to Apple Health or Health Connect is subject to those platforms' controls.

User Control

You can enable or disable specific read/write data types in Kaivro's Health Sync settings. You can also revoke permissions at any time in your device's Apple Health or Health Connect system settings, or disconnect sync entirely within Kaivro. Revoking permissions stops future sync; data previously imported into Kaivro remains in your account until you delete it or delete your account.

AI Insights

Health data imported via Apple Health or Health Connect (such as sleep and workouts) may be included in AI insight requests the same way manually logged data is, as described in the "Data Shared with OpenAI" section below. This only applies if you have consented to AI data sharing.

How We Use Your Information

We use information to operate and improve the Service, including to:

• Provide, maintain, and improve features and functionality.
• Create and personalize coaching experiences and recommendations.
• Send emails necessary to operate your account, including service notifications, support responses, feedback requests, and important updates about the Service.
• Monitor performance, troubleshoot issues, and prevent fraud or abuse.
• Comply with legal obligations and enforce our terms.

We do not sell your personal data.

AI-Powered Features and Third-Party AI Services

Kaivro uses AI and automated processing to generate personalized coaching insights, suggestions, and other outputs based on information you provide (such as nutrition, workouts, sleep, mood, and water) and technical context needed to deliver the feature.

Third-Party AI Provider

To provide AI-powered features, Kaivro uses OpenAI's API services to generate personalized wellness insights. OpenAI acts as a third-party data processor, processing information on our behalf according to our instructions and applicable agreements.

Data Shared with OpenAI

The following user data may be sent to OpenAI to generate personalized insights:

• Profile information (age, gender, height, weight)
• Fitness goals and daily nutrition/calorie targets
• Recent activity logs (meals, workouts, sleep duration, mood entries)
• Patterns and trends derived from your logged data

Third-Party Data Protection

OpenAI, our AI service provider, provides equivalent data protection to the standards described in this policy. OpenAI processes your data solely to generate your personalized insights and does not use your data to train their AI models. For details on how OpenAI handles data, see their Privacy Policy and API Data Usage Policies.

Data NOT Shared with OpenAI

We do NOT share the following information with OpenAI:

• Your name
• Email address
• Contact details
• Payment information

Purpose and Retention

Data is sent to OpenAI only to generate personalized insights in real-time. Your data is not used to train OpenAI's models, in accordance with OpenAI's API data usage policy. OpenAI may retain data for a limited period for abuse monitoring and compliance purposes as described in their privacy policy.

User Consent

You must explicitly consent to AI data sharing during onboarding before any data is sent to OpenAI. No data will be shared with OpenAI until you provide this consent.

You can withdraw your consent at any time in the app under AI data settings, or by contacting us at support@kaivro.com with the subject line "Withdraw AI Consent". Upon withdrawal, we will disable AI-powered features for your account and cease sharing your data with OpenAI. Please note that withdrawing consent will limit your access to personalized AI insights within the Service.

Legal Basis

The legal basis for processing your data through OpenAI is your explicit consent, which you provide during onboarding via an opt-in mechanism.

Important Disclaimer

AI output may be inaccurate or incomplete and should not be treated as medical advice. You are responsible for decisions you make based on the Service.

Data Storage and Security

We store information on secure systems (including Firebase Auth, Firestore, and Cloud Storage for items such as meal photos) and take reasonable measures to protect it, such as encryption in transit, access controls, and operational safeguards. Backend processing for the Service runs in the europe-west1 region where applicable. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention and Deletion

We retain information for as long as necessary to provide the Service and for legitimate business purposes, such as maintaining records, resolving disputes, improving safety and security, and complying with legal obligations.

You can request deletion of your account and associated personal data from the app (Account → Data & deletion) or by contacting us at support@kaivro.com . For more information about the account deletion process, see our Account Deletion page. You may also request a copy of your information by initiating a data export request in the app, which notifies support@kaivro.com — this is not an automatic CSV/PDF download. We may retain limited information where required or permitted by law, or for security and fraud prevention purposes.

When data is deleted, it is removed or anonymized in accordance with our internal processes.

Third-Party Services

We may rely on third-party service providers to help operate the Service (for example, cloud hosting via Firebase, AI providers such as OpenAI, subscription infrastructure via RevenueCat, email delivery, analytics with your consent, and crash reporting). These providers may process information on our behalf according to our instructions and applicable agreements.

You may also connect Kaivro to platform integrations such as Apple Health (iOS) and Health Connect (Android). These connections are initiated by you and allow data to flow between Kaivro and the platform you connect. We do not sell data to these platforms.

If you enable friend discovery features, limited profile information may appear in a public search index used only for finding friends inside Kaivro (for example display name). You can control discoverability in the app when that module is available.

Your Rights

Depending on where you live, you may have rights regarding your personal data, such as the right to access, correct, delete, or object to certain processing. You may also be able to request a copy of your information.

To exercise these rights, contact us at support@kaivro.com .

Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at support@kaivro.com .