Overview / Privacy policy

Privacy policy

KIkal is built privacy-first: the app stores only what tracking needs, and your food diary is never sold, shared for advertising, or profiled.

Controller

[Operator name], [address], Switzerland. Contact: [email].

Data we process

AI processing

Meal texts and photos you submit for recognition are processed server-side by the AI provider currently configured: Anthropic PBC (United States) or Infomaniak (Switzerland). Where Anthropic processes the data, the transfer abroad is covered by Anthropic's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses and a Swiss addendum. Voice recordings are transcribed on KIkal's own servers and are not sent to third parties. AI inputs are used to answer your request, not to train models: neither provider trains on them.

Assistant memory

The assistant can keep lasting notes about you ("does not eat pork", "trains Tuesdays") so a new conversation does not start from zero. It writes them itself while you chat, and you can add your own. They are stored with your account, are visible only to you, and travel to our AI provider as part of the conversation like the rest of your message.

The assistant is instructed to keep only what relates to food, health, training and how you want to be coached, and to refuse anything else. Some content the app refuses by itself, independently of the assistant: a note that singles out a group of people is rejected before it can be stored. Beyond those checks the instruction is not a guarantee, so if you insist on storing something, it may end up stored. Nothing is kept that you did not put into the chat yourself.

You stay in control: every note can be viewed, edited and deleted at any time, in Settings or by telling the assistant, and you can switch the memory off entirely in Settings. Switching it off stops all reading and writing; existing notes remain listed until you delete them.

Cookies

Only essential session cookies (httpOnly) for login. No analytics cookies, no ad tracking.

Email delivery

Verification, password-reset and waitlist confirmation emails are delivered via Brevo (Brevo's privacy policy). Your email address is shared with Brevo for that purpose only. The launch announcement to the waitlist is sent the same way.

Hosting and storage

All data is stored on our own servers at netcup in Nuremberg, Germany, inside the EU.

Your rights

You can access, correct and delete your data. Deleting your account removes your data. Contact us at [email] for any data request.