Privacy Policy.
Introduction
Kaky ("we", "us", "the app") is a voice-first nutrition tracker developed by Mira Acaya. This policy explains what data we collect, how we use it, who we share it with, and the choices you have. We've written it to be readable in five minutes — no legalese where we can help it.
What we collect
When you use Kaky, we collect the following data — and nothing else:
| Data | Source | Linked to you |
|---|---|---|
| Email address | Sign-in (Apple or Google) | Yes |
| Name | Profile setup | Yes |
| User ID | Generated at sign-in | Yes |
| Food log entries | You — via voice or manual entry | Yes |
| Daily calorie/macro goals | You — during onboarding | Yes |
| Analytics / tracking data | — | No |
| Advertising identifiers | — | No |
| Location | — | No |
How we use it
Your data is used exclusively to operate the app:
- Authenticate you across devices
- Save and sync your food log entries to your account
- Calculate your daily calories and macros
- Send the text of your meal descriptions to an AI nutrition service (see Section 04)
We do not sell your data. We do not share it with advertisers. We do not use it for any marketing purpose.
AI services and data sharing
Kaky uses a third-party AI service to analyze the meals you describe. The first time you use the voice feature, the app asks for your explicit consent before any data is sent. If you decline, the AI feature is disabled and you can continue to use the app for manual food entry.
What is sent: only the text describing your meal (e.g. "three eggs and a banana"). No audio, no name, no email, no user ID, no other personal data.
Who receives it: The text is transmitted to OpenRouter, Inc. ("OpenRouter"), which routes the request to Google's Gemini 2.5 Flash AI model for nutrition analysis. The response — per-100g nutrition density for each food item — is returned to your device, where Kaky computes your meal's totals locally.
Why: AI is necessary to identify foods from a natural-language description and return their nutritional density. Without it, you would have to look up every food in a database manually.
Retention: OpenRouter and Google's terms apply to data they process. We do not store your meal text on our own servers beyond the immediate request lifecycle. Google's Gemini API does not use your data to train its models per its paid-tier terms.
Third-party services
Kaky uses the following third-party services. Each one has its own privacy policy, which we've linked.
- Supabase — account authentication, cloud sync of your food log. Privacy policy
- OpenRouter — AI request routing for meal analysis. Privacy policy
- Google (Gemini API) — the AI model that analyzes your meal text. Privacy policy
- Apple Sign-In / Google Sign-In — used for authentication if you choose those methods. Apple · Google
We have reviewed each provider's privacy practices and confirmed they provide protection equal to or stronger than what is described in this policy. We do not share your data with any third parties not listed above.
What stays on your device
By design, the following data never leaves your iPhone:
- Your voice audio. Speech is transcribed locally using Apple's on-device Speech Recognition framework. Only the resulting text is ever transmitted.
- Any meals you log while offline. They sync to your account once your device reconnects.
Practical implication: if you decline AI consent or use Kaky in airplane mode, the app remains functional for manual food entry. No data leaves your device.
Storage and security
Your food log and profile are stored locally on your device using encrypted storage (Hive) and synced to Supabase, which encrypts data in transit (TLS) and at rest. Your account is protected by your sign-in provider's authentication (Apple or Google). We do not have access to your passwords.
Your rights and controls
You can, at any time:
- Withdraw AI consent from the in-app Settings screen. The AI feature will be disabled; manual entry continues to work.
- Delete individual food entries from the History screen.
- Delete your account and all associated data from Settings → "Delete account." This is immediate and irreversible.
- Export your data on request — email us at the address below.
Children's privacy
Kaky is rated 9+ and is not designed for children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete the information promptly.
Changes to this policy
If we change this policy materially, we will notify you in-app before the changes take effect. The "Last updated" date at the top of this page always reflects the most recent version.