The short version
- Kivo stores what you log (food, weight, workouts and similar) so it can plan with you. Some of it is health data, and we treat it that way.
- On your phone, the app’s database is encrypted. Synced data is stored in the EU (Frankfurt, Germany).
- No ads, no selling of data, no trackers. We use a few service providers only to run the app (listed below).
- You can use Kivo as a guest, without an email address.
- You can delete your account and its data from inside the app, and ask us for a copy at any time.
1. Who we are
Kivo is built and run by an independent developer, referred to here as “the developer of Kivo”, “we” or “us”. The developer of Kivo is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the data controller (veri sorumlusu) under Turkey’s Personal Data Protection Law No. 6698 (KVKK).
Contact for anything about privacy: privacy@app-kivo.com. [TO CONFIRM: controller’s legal name and postal address, EU/UK representative if required, and KVKK VERBİS status]
2. Data we process
What we process depends on what you use. Most of it comes from you.
| Category | Examples |
|---|---|
| Account | A random account ID created when you first open the app (guest mode). If you choose to link an email address, that email address. If sign-in with Apple or Google is offered and you use it, the identifier and email that provider shares with us. |
| Profile and body data (health data) | Sex, birth date, height, weight, body measurements, goal, activity level, dietary preferences and the calorie and macro targets calculated from them. |
| Food and water logs (health data) | Foods you log, amounts, meals, water, and any custom foods you create. |
| Training data (health data) | Your training plan, sessions, sets, saved exercises and swaps. |
| Plans and events | Life Mode events (for example a name and a date), season packs you turn on, plan changes you approve, achievements and Bounce-back data. |
| Coach (Kivo+) | Your messages to the AI Coach and its replies, suggested and approved plan changes, and weekly reports. |
| Logging inputs | The text you type to log a meal; the transcript of what you say when you use voice logging; a meal photo when you use photo logging (Kivo+); a barcode number when you scan. |
| Subscription | Whether you have Kivo+, its product and its renewal or expiry dates. We do not receive your card or bank details. |
| Usage limits and abuse prevention | Daily counts of AI requests and their approximate cost per account. For guests, a daily one-way hash of the IP address (see section 7). |
| Technical data | IP address, device and request metadata in the security logs of our hosting providers. |
Apple Health and Health Connect
Connecting Apple Health or Health Connect is optional. Data Kivo reads from them (steps, active energy, body fat, workouts from other apps) stays on your phone and is never sent to our servers or to the AI Coach. The one exception: a weight reading you import becomes a normal weight entry in Kivo and syncs like any weight you log. If you turn on the matching switches, Kivo writes the food, water, workouts and weight you log in Kivo to Apple Health or Health Connect.
3. Why we use it, and on what legal basis
- To provide the app (store and sync your logs, calculate targets, build training plans, run Life Mode and insights): performance of our contract with you (GDPR Art. 6(1)(b)).
- Health data (body, food and training data): your explicit consent (GDPR Art. 9(2)(a); KVKK Art. 6, açık rıza). You can withdraw consent at any time by deleting your account; this does not affect processing that happened before. [TO CONFIRM: the app does not yet show an explicit consent step for health data during onboarding; one must be added before launch]
- AI features (text, voice and photo logging, AI Coach): to provide the feature you asked for, based on the same contract and consent.
- Subscriptions: to give you the Kivo+ features you paid for (contract).
- Security, fair use and abuse prevention (rate limits, cost limits, logs): our legitimate interest in keeping the service safe and available (GDPR Art. 6(1)(f)).
- Legal obligations, for example answering requests from authorities when the law requires it (GDPR Art. 6(1)(c)).
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Where your data lives
- On your phone. Kivo keeps a local database so the app works offline. It is encrypted (SQLCipher) with a random key stored in your phone’s secure storage (iOS Keychain or Android Keystore). It is excluded from Android cloud backups.
- On our servers. Synced data is stored with Supabase in the EU (AWS eu-central-1, Frankfurt, Germany). Each account can read only its own rows.
- Transfers outside the EU. Some providers below are based in the United States. When data goes to them, we rely on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. [TO CONFIRM: transfer mechanism per provider, and KVKK cross-border transfer basis]
5. Who helps us run Kivo
We share data only with these providers, only what they need, and only to run the service. They act on our instructions (as processors) unless stated otherwise.
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database, sign-in, server functions (EU, Frankfurt) | Your account and the data you sync |
| Anthropic | The AI models behind text, voice and photo logging and the AI Coach | Only the content of that request (see section 6) |
| RevenueCat | Managing Kivo+ subscriptions | Your account ID and purchase information from the app store |
| Apple and Google | App Store and Google Play purchases; sign-in with Apple or Google if you use it; speech-to-text for voice logging on your phone | What their services need to process the purchase, sign-in or dictation, under their own privacy terms |
| Open Food Facts | Product information for barcode scans | The barcode number, sent from your phone (Open Food Facts also sees your IP address). No account data. |
| Cloudflare | Hosting this website | Standard request data (see section 10) |
| Resend | Sending sign-in codes by email | Your email address and the code |
6. AI features
- Text and voice logging. Your words (for voice: the transcript your phone produces) go to our server, which asks an Anthropic model to split them into foods. Nutrition values come from our food catalogue, not from the model.
- Photo logging (Kivo+). The photo goes to our server and to an Anthropic model to recognise the foods. We do not store the photo.
- AI Coach (Kivo+). To answer you, our server adds a summary of the relevant data from your account (for example recent logs, targets, training plan and upcoming Life Mode events) to your message. The model has no direct access to our database. It can only suggest changes; nothing in your plan changes until you approve it.
- No training on your data. Under Anthropic’s commercial API terms, content sent through the API is not used to train their models. Anthropic may keep request data for a limited period for trust and safety. [TO CONFIRM: current Anthropic retention period and whether zero-data-retention applies]
- AI can be wrong. Always check what the AI logs or suggests. Kivo is not medical advice.
7. How long we keep data
- Account data and logs: until you delete your account. Account deletion permanently removes your rows, your custom foods, your profile and your sign-in account.
- AI Coach messages: deleted automatically after 90 days.
- Guest IP hashes: stored as a one-way keyed hash that changes every day (never the raw IP address) and deleted after 2 days.
- Provider backups and logs: kept for the provider’s standard backup and log periods, then overwritten. [TO CONFIRM: Supabase backup/log retention on the project’s plan]
- Guest accounts you abandon (for example after uninstalling without linking an email) remain until deleted. [TO CONFIRM: clean-up period for inactive guest accounts]
8. Your rights
Under the GDPR and the KVKK (Art. 11) you have the right to access your data, get a copy in a portable format, correct it, delete it, restrict or object to processing, withdraw consent, and learn who receives it.
- Delete: in the app, Profile › Delete my account.
- Correct: edit your profile and logs in the app at any time.
- Copy of your data: email privacy@app-kivo.com from the address linked to your account, or include the account ID shown in the app. [TO CONFIRM: in-app “Download your data” is built on the server but not yet in the app]
- Anything else: write to privacy@app-kivo.com. We answer within one month (KVKK: within 30 days).
You can also complain to a data protection authority, for example the one where you live or work. In Turkey this is the Personal Data Protection Authority (KVKK Kurumu).
9. Security
Connections use HTTPS only. On the phone, the database is encrypted and sign-in tokens are kept in secure storage. On the server, every table limits each account to its own rows, and secrets never ship inside the app. The app does not write your health values to logs. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
10. This website
app-kivo.com sets no cookies and loads no analytics, ads or third-party scripts or fonts. It is served by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site.
11. Children
Kivo is for people aged 16 and over. The app asks for your birth date and does not allow sign-up under 16. If you believe a child under 16 has given us data, contact us and we will delete it.
12. Changes to this policy
We will update this page when the app or the law changes, and change the effective date at the top. If a change materially affects how we use your data, we will also tell you in the app before it applies.
13. Contact
Privacy questions and requests: privacy@app-kivo.com. Everything else: hello@app-kivo.com.