KETONOIR

We collect the following categories only to operate the features you use. We do not collect consumer health data for advertising, and we do not use it to build profiles about you for any purpose other than delivering the Service to you.

During onboarding we ask whether any of the following apply to you: pregnancy or nursing, kidney, liver or pancreatic disease, a history of eating disorders, medication for diabetes, blood pressure or blood thinners, gallbladder issues, type 1 diabetes, a heart attack, stroke or major cardiac event in the last six months, use of an SGLT2 inhibitor, and active cancer treatment.

Purpose. To decide whether AI coaching is made available to you or whether the app operates in tracking-only mode, and to give the AI coach the safety context it needs so its guidance accounts for your declared conditions. This is a safety control, not a marketing input.

Body weight and body composition, blood ketones (BHB), blood glucose, blood pressure, and blood lipid panel values (total cholesterol, LDL, HDL, triglycerides).

Purpose. To display your trends and to inform coaching guidance you ask for.

Meals and foods logged, macronutrient intake, water intake, exercise, height, weight, sex, activity level, dietary preferences, allergies and sensitivities, health goals, and your birth year.

Purpose. To calculate your macro targets, produce your logs and forecasts, warn you when a logged food contains an allergen you listed, and confirm you are 18 or older. Only your birth year is retained; the full date of birth is evaluated on your device and is not transmitted to us.

Messages you exchange with the AI coach, and any meal or body photos you choose to upload for nutritional analysis.

Purpose. To generate the coaching response or the nutritional estimate you asked for. Photos are not retained beyond what is needed to complete the analysis and the resulting log entry.

• Directly from you, when you type, log, answer the screening, or upload a photo. This is the source for the overwhelming majority of consumer health data we hold.
• From Apple Health or Health Connect, only where you have connected the platform and granted permission, and only for the measurement types you approved (for example blood pressure). Blood lipid values are entered manually only and are never read from a health platform.
• Derived by us from the above, such as calculated macro targets, streaks, averages and forecasts.

We do not buy consumer health data, and we do not obtain it from data brokers, advertising networks, or public records.

• We do NOT sell consumer health data. Under RCW 19.373.060 a sale would require your written authorization on a specific statutory form. We have never sought one and do not intend to.
• We do NOT use consumer health data for advertising or ad targeting, and we do not share it with advertising networks.
• We do NOT send consumer health data to analytics or crash-reporting tools. Our analytics provider receives feature-usage events only, and our crash reporter scrubs health fields before transmission.
• We do NOT use your data to train AI models.
• We do NOT operate a geofence around any health care facility.

We share consumer health data only with service providers who process it on our instructions in order to run the Service. We do not share it with any third party for that third party’s own purposes.

• Cloud database and authentication: Supabase, Inc. Stores your account, profile, food logs, biomarkers and screening outcome.
• Key-value storage: Upstash, Inc. Stores consent records and usage counters.
• Application hosting: Vercel, Inc. Processes requests in transit to deliver the Service.
• AI processing: Anthropic, PBC. Receives your coach messages and any meal photos you upload, in order to generate the response you asked for. Processed under Anthropic commercial terms; not used to train models.

• Analytics (PostHog): feature-usage and screen-view events only. No biomarker values, no food log entries, no coach conversation content, no screening responses.
• Crash reporting (Sentry): stack traces only, with health, food, biomarker and coach fields scrubbed before the report leaves your device.
• Email (Postmark, MailerLite), payments (Apple, Google, Stripe) and subscription state (RevenueCat): these receive account and billing information, never consumer health data.

If you are a Washington or Nevada resident, you have the following rights regarding consumer health data. We will not discriminate against you for exercising them.

• Right to confirm and access. You may ask whether we collect, share or sell your consumer health data, and receive a list of all third parties with whom we have shared it, together with contact information for each.
• Right to withdraw consent. You may withdraw your consent to our collection and to our sharing of your consumer health data at any time.
• Right to delete. You may ask us to delete your consumer health data. On such a request we delete it from our live systems, and we notify the service providers listed in section 4 and direct them to delete it from theirs.
• Right to appeal. If we decline a request, you may appeal. If we deny the appeal, we will provide you with a way to contact the Washington Attorney General to lodge a complaint.

Email legal@ketonoir.ai with the subject line “Consumer Health Data Request” and tell us which right you wish to exercise. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, in which case we will tell you why before the first period ends.

You may also delete your account and its associated data at any time from inside the app, under Profile, without contacting us.

We will ask you to confirm the request from the email address on your account. If we cannot verify that you are the account holder, we will tell you rather than act on an unverified request.

We keep consumer health data for as long as your account is active, so the Service can show you your own history. When you delete your account we delete the associated consumer health data.

One narrow exception: records of which disclaimers and policies you accepted, and when, are retained for seven years as a legal compliance record. Those records include the outcome of your health screening and the conditions you declared, because that is the evidence that the safety gate was applied correctly. They are not used for any other purpose.

Ketonoir LLC
1145 Santa Fe Drive #1297
Weatherford, TX 76087-3846
legal@ketonoir.ai