KK Lean - AI Health Coach Privacy Policy KK Lean AI Health Coach Support Privacy Terms Privacy Policy and Notice at Collection Privacy Policy This Privacy Policy explains how Bobby King Trust collects, uses, discloses, retains, and protects personal information when you use KK Lean - AI Health Coach. It also explains the privacy choices and rights that may be available to you. Important privacy commitments We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. We do not use Apple Health information or other health and wellness information for advertising, and we do not disclose that information to data brokers. Who we are Bobby King Trust, located in the United States, is responsible for the personal information described in this Privacy Policy. In European privacy terminology, we are the data controller. In California privacy terminology, we are the business responsible for determining how and why personal information is processed. You may contact us at support@kklean.app. Information we collect and how we use it We collect only the information reasonably needed to provide, personalize, secure, and support KK Lean. The categories below describe the information we may collect, where it comes from, how it is used, who may receive it, and our general retention approach. Identifiers and account data What this includes: Email address, account ID, authentication records, and support communications. Why we use it: Authentication, account sync, support, security, and privacy-rights fulfillment. Where it comes from: You and our authentication provider. Who may receive it: Supabase and service providers supporting account operations. How long we keep it: While the account is active and afterward only as needed for security, legal, fraud-prevention, and backup obligations. Health, body, and wellness information What this includes: Age, height, weight, goals, health focus, food and nutrition entries, fasting, hydration, activity, progress, and Apple Health activity you permit. Why we use it: Provide and personalize wellness features, calculations, progress views, and coaching. Where it comes from: You, your device, and Apple Health only after device permission. Who may receive it: Supabase for optional account sync and processors needed for requested app features. How long we keep it: Until you delete it, withdraw consent where consent is the legal basis, or request account deletion, subject to limited backup and legal retention. Photos, barcode, and food-query content What this includes: Meal photos you submit, barcode values, food search terms, and corrections. Why we use it: Identify food, estimate nutrition, return food information, prevent abuse, and improve reliability. Where it comes from: You and your device camera. Who may receive it: OpenAI for requested AI Coach and meal-photo analysis, USDA or other food-data providers for lookup, and Supabase infrastructure. How long we keep it: Only for the time needed to process the request and operate, secure, debug, and improve the feature; account results may remain until deleted. Commercial and subscription information What this includes: Product ID, entitlement status, renewal status, and transaction references; KK Lean does not receive full payment-card details from app stores. Why we use it: Activate paid features, restore purchases, prevent fraud, and provide support. Where it comes from: Apple, RevenueCat, and you. Who may receive it: Apple, RevenueCat, and Supabase. How long we keep it: For the subscription relationship and as required for accounting, tax, fraud-prevention, dispute, and legal obligations. Device, usage, and security information What this includes: App version, platform, timestamps, request status, error and rate-limit information, and security events. Why we use it: Operate, secure, diagnose, meter, and protect the service. Where it comes from: Your device and our service infrastructure. Who may receive it: Supabase, hosting, and operational service providers. How long we keep it: For the shortest period reasonably necessary for security, diagnostics, abuse prevention, and legal compliance. Health and wellness information Information about your body, nutrition, fasting, hydration, activity, goals, and progress may be considered sensitive personal information under California law and special-category personal data under European law. We use this information only to provide the wellness features you request, personalize your experience, maintain the service, and comply with applicable law. Where European law applies, we ask for your explicit consent before processing health and wellness information for personalization. You may withdraw that consent through the app. Withdrawing consent does not affect processing that was lawful before withdrawal. After withdrawal, health personalization will stop unless you provide consent again. You may also request deletion of the information associated with your account. Apple Health Apple controls the device permission prompt. If you choose to connect Apple Health, KK Lean reads only the activity types identified in the app. This release does not write to Apple Health. Apple Health data is not sold, used for advertising, or disclosed to data brokers. AI, meal photos, and food lookup When you request AI Coach or Photo AI, KK Lean sends the information needed for that request to OpenAI through KK Lean servers. Coach requests may include your question, profile goals, food totals, hydration, fasting status, and activity summary. Photo AI requests include the meal image and scan details needed to identify visible foods and estimate nutrition. AI data sharing is requested separately in the app consent flow. Please do not include faces, personal documents, medication labels, or unrelated sensitive information in meal photos. Barcode and nutrition searches may be sent to food-data providers. AI responses, food matches, and nutrition calculations are estimates and should not be treated as medical advice. Service providers - Supabase: hosting, database, authentication, edge functions, and optional account sync - OpenAI: requested AI Coach and meal-photo processing after in-app permission - USDA FoodData Central and other disclosed food-data sources: nutrition and barcode lookup - Apple Health: device-controlled read access to permitted activity data - Apple and RevenueCat: subscriptions, entitlements, and purchase restoration Providers may process information only for contracted services and their own legally disclosed obligations. We do not authorize them to sell KK Lean health information or use it for their advertising. California privacy rights If California privacy law applies to your information, you may have the right to know the categories and specific pieces of personal information we maintain about you, request correction of inaccurate information, request deletion, and receive information about the sources, purposes, and recipients of your information. You may also have the right to limit certain uses of sensitive personal information and to exercise your rights without discriminatory treatment. KK Lean does not sell personal information and does not share it for cross-context behavioral advertising. If these practices ever change, we will update this Privacy Policy and provide any legally required opt-out controls before beginning the new practice. European and UK-style data rights If European data protection law applies, you may have the right to access your personal data, correct inaccurate data, request erasure, restrict certain processing, receive portable data, or object to certain processing. Where processing is based on consent, you may withdraw consent at any time. You may also file a complaint with the data protection authority in the country where you live or work. We respond to verified requests without undue delay and generally within one month where the GDPR applies, unless the law permits an extension. International transfers KK Lean and its providers may process information in the United States and other countries. Where European transfer rules apply, we will use an approved transfer mechanism, such as an adequacy decision or standard contractual clauses, and appropriate supplementary safeguards when required. Security and deletion We use administrative, technical, and organizational safeguards designed to protect personal information. These measures include encrypted network connections, account-scoped authorization, server-side secret storage, database access controls, and safeguards against abusive traffic. No online service can guarantee absolute security. You may submit a privacy request through the signed-in app or by emailing support@kklean.app. We may need to verify your identity before providing, correcting, restricting, or deleting account information. Children KK Lean is not directed to anyone under 18 and does not knowingly create accounts for children. Contact us if you believe a minor provided personal information. Changes and contact We will update the effective date and provide additional notice or request renewed consent when a material change requires it. Privacy questions and authorized-agent requests may be sent to support@kklean.app. Effective and last updated: August 21, 2026 KK Lean - AI Health Coach