- We collect what Kae needs to work out your nutrition: your meals, your profile and goals, and the photos or scans you choose to send.
- We do not sell your data, show ads, or track you across other apps and websites.
- AI services read your meal text and photos only to work out the nutrition. We don't send them your name or email.
- Apple Health, location and reminders stay off unless you turn them on.
- You can delete your account, and everything in it, from Settings at any time.
1. Who we are
Kae is a nutrition journal for iPhone and Apple Watch, with widgets and this website (kaeapp.com). Kae is made and run by Khalid Hadadi, an independent developer in the Kingdom of Saudi Arabia. In this policy, "we" and "us" mean Khalid Hadadi, who is the controller of your personal data.
This policy explains what we collect, why, who processes it, and the choices and rights you have. It is written to meet:
- Saudi Arabia's Personal Data Protection Law (PDPL), Royal Decree M/19 of 1443H, and its Implementing Regulations
- The EU General Data Protection Regulation (GDPR) and the UK GDPR
- The California Consumer Privacy Act, as amended by the CPRA
- Apple's App Store Review Guidelines and HealthKit rules
Contact us any time at khalid.support@gmail.com.
2. What we collect
2.1 Information you give us
| Data | Why we need it | Legal basis |
|---|---|---|
| Account: name and email from Sign in with Apple or Google, and an account ID | To create your account, keep your journal in sync and reply to you. Apple lets you hide your email behind a private relay address. | Contract |
| Profile: age, sex, height, weight, activity level, goal and units | To calculate your daily calorie and nutrient needs | Explicit consent (health data) |
| Food sensitivities and preferences, if you add them | To warn you when a food may contain them, and to keep tips relevant | Explicit consent (health data) |
| Your journal: meal text, meal times, photos of food, labels and menus, barcodes, servings, water and weight entries | To work out the nutrition, show your history and build your weekly insights | Contract; explicit consent for health data |
| Voice logs | Speech is turned into text, on your device when possible, otherwise by Apple's speech service. We keep the text, not the recording. | Consent |
| Saved meals and food corrections | To bring your usual foods back in one tap, with your portion | Contract |
| Reports, ratings and notes on results | To fix wrong numbers and improve accuracy | Legitimate interest |
| Community foods, only if you choose "Add to community" | Shared with other Kae users, marked as community-contributed and unverified, without your name | Consent |
| Messages to support | To answer you | Legitimate interest |
2.2 Information collected automatically
| Data | Why we need it | Legal basis |
|---|---|---|
| Usage events, such as "meal logged" or "scanner opened", linked to a pseudonymous account ID (never your name or email). Session recording and screen capture are off. | To learn which features work and fix the ones that don't | Legitimate interest |
| Crash reports: device model, iOS and app version, and technical details of the error. No IP address, device name or screenshots. | To find and fix bugs | Legitimate interest |
| Service logs: which AI step ran, how long it took, its cost, and the result | To keep Kae working, control costs and prevent abuse | Legitimate interest |
| Subscription status: plan, trial and renewal dates. Apple handles payment; we never see your card. | To unlock your plan and prevent repeat free trials | Contract |
2.3 Only if you turn it on
| Permission | What Kae does with it |
|---|---|
| Apple Health | Reads your weight and steps to keep your goal right; writes your meals' calories and nutrients. See section 3. |
| Location | Uses your city to find nearby restaurants and local dishes when working out a meal. Not your exact address, not in the background. |
| Camera and Photos | Only when you take or pick a photo or scan a barcode, label or menu. Kae never browses your library. |
| Microphone and Speech | Only while you record a voice log. |
| Notifications | Reminders you choose. Scheduled on your device. |
2.4 What we don't collect
- Advertising identifiers (IDFA). Kae has no ads and does not track you.
- Your contacts, messages, calendar or browsing history.
- Payment card details.
- Your precise location.
3. Health data
Your weight, body measurements, food sensitivities and eating habits are sensitive (health) data under the PDPL and the GDPR. We process them only with your explicit consent, which you give during setup and can withdraw at any time by deleting the data or your account.
- We use health data only to provide Kae's features to you.
- Data from Apple Health is never used for advertising or marketing, never sold, and never shared with third parties for their own use. It is not stored in iCloud by us.
- Data you write to Apple Health stays under Apple Health's control; deleting Kae does not delete it from Health.
- Kae is not a medical device and does not give medical advice. See our Terms of Use.
4. How AI is used
Kae uses artificial intelligence to read meal descriptions, photos, labels and menus, match foods to nutrition sources, and write weekly tips.
- What AI receives: the meal text or image, your language, and, where needed for context, your city or the restaurant name. We don't send it your name, email or account details.
- Estimates, not decisions: AI results are estimates that you can see, edit and report. Kae makes no decisions about you that have legal or similarly significant effects.
- Sources first: when a product label, the Saudi Food and Drug Authority (SFDA) data or USDA data is available, Kae uses it before any AI estimate, and shows you which source it used.
- Human review: to fix mistakes, the developer may review meals, results and reports. Access is limited to the developer and used only to improve accuracy.
- Shared improvements: when a food is corrected or a menu is read, the food's nutrition facts (not who logged it) may be saved so the next person gets a better answer.
5. How we use data
- Provide Kae: work out nutrition, keep your journal, and sync it between your devices.
- Personalize: set your goals, remember your usual foods, and write insights about your week.
- Improve accuracy and fix bugs.
- Communicate: emails about your account, trial and important changes. You can unsubscribe from non-essential emails.
- Protect Kae: prevent fraud, trial abuse and misuse, and enforce our terms.
- Meet legal obligations.
What we never do: sell your personal data, share it for cross-context behavioral advertising, show ads, or build an advertising profile of you.
6. Who we share it with
We use service providers (processors) that work on our behalf, under contracts that limit them to providing their service. Each receives only what it needs.
| Provider | Purpose | Data it receives |
|---|---|---|
| Supabase | Database, sign-in and server | Account, profile and journal |
| Google (Gemini API) | AI that reads meals, photos, labels and menus; weekly tips | Meal text or images, language, city or restaurant name |
| OpenRouter | Routes AI requests to model providers | Meal text, language |
| DeepSeek | Backup AI planning when the main step struggles | Meal text |
| Exa | Web search for restaurant nutrition | Food and restaurant names |
| Google Places | Finding a restaurant's official menu | Restaurant name and city |
| Open Food Facts | Barcode lookup | The barcode number |
| RevenueCat | Subscriptions and trials | Pseudonymous account ID, purchase status |
| PostHog | Usage analytics | Usage events, pseudonymous account ID |
| Sentry | Crash reports | Technical crash details |
| Braintrust | Checking the accuracy of AI results | A sample of meal text and results, without name or email |
| Loops | Account and trial emails | Email address, plan status |
| Resend | Internal daily quality reports to the developer | Summaries of results and reports |
| Cloudflare | Hosting this website | Standard web request data (see section 14) |
| Apple and Google | Sign-in, payments (Apple), Apple Health, speech recognition | As described in their own privacy policies |
We may also disclose data when required by law or a valid order from a competent authority, to protect the rights, safety or property of our users or others, or to a successor if Kae is ever transferred, in which case your data stays protected by this policy or one at least as protective.
7. International transfers
Our providers may store or process data outside Saudi Arabia, including in the United States and the European Union. When we transfer personal data outside the Kingdom, we do so only as permitted by the PDPL and its Regulation on Personal Data Transfer, limit it to what's needed, and rely on appropriate safeguards such as standard contractual clauses. For the EU and UK, we rely on the EU Commission's Standard Contractual Clauses (and the UK addendum) or an adequacy decision.
8. App Store privacy details
This is how Kae's data appears in Apple's privacy label. Kae does not track you: none of this data is linked with other companies' data for advertising, or shared with data brokers.
| Category | Data | Linked to you | Purpose |
|---|---|---|---|
| Health & Fitness | Weight, body measurements, nutrition, steps | Yes | App functionality |
| Contact Info | Name, email | Yes | App functionality, support |
| User Content | Meal text, photos, notes, reports | Yes | App functionality, product improvement |
| Location | Coarse location (city), if allowed | No | App functionality |
| Identifiers | Account ID | Yes | App functionality, analytics |
| Purchases | Subscription status | Yes | App functionality |
| Usage Data | Feature usage | Yes (pseudonymous) | Analytics |
| Diagnostics | Crash data | No | App functionality |
9. How long we keep it
| Data | Kept until |
|---|---|
| Account, profile, journal, saved meals, water and weight | You delete them or your account |
| After you delete your account | Deleted from our active systems promptly, and from backups and stored files within 90 days. Service logs kept for cost and security lose their link to you. |
| Community foods you shared | Stay available to others without your name, unless you ask us to remove them |
| Nutrition facts learned from corrections and menus | Kept, as they contain no personal data |
| Usage analytics and crash reports | Up to 12 months |
| Support emails | As long as needed to help you; deleted on request |
| Records we must keep by law | For the period the law requires |
10. Security
- All data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our database provider.
- Database rules ensure each account can only read its own journal.
- Access to production data is limited to the developer.
- On your device, data is protected by iOS app sandboxing and device encryption.
No system is perfectly secure. If a breach is likely to harm you, we will notify the Saudi Data & AI Authority (SDAIA) and you as required by law, including within the deadlines the law sets.
11. Your rights
Wherever you live, you can use these rights for free. Email khalid.support@gmail.com from the address linked to your account; we may ask you to confirm your identity. We reply within 30 days (we may extend this once, by up to 30 more days, for complex requests, and will tell you why).
| Right | What it means | How |
|---|---|---|
| To be informed | Know what we collect and why | This policy |
| Access | Get a copy of your personal data | Email us |
| Portability | Receive your data in a common, machine-readable format | Email us |
| Correction | Fix inaccurate data | Edit it in the app, or email us |
| Deletion | Erase your data | Settings → Delete account, or email us |
| Withdraw consent | Stop processing based on consent, without affecting what came before | Turn off the permission, delete the data, or email us |
| Object or restrict | Object to processing based on legitimate interest, or pause it | Email us |
Saudi Arabia
In addition to the rights above, you can complain to the Saudi Data & AI Authority (SDAIA) through its official channels, and seek compensation for harm caused by a violation of the PDPL.
European Union and United Kingdom
You can complain to your local data protection authority. Our legal bases are listed in section 2.
California
You have the right to know, delete and correct personal information, and to limit the use of sensitive personal information; we only use it to provide the service. We do not sell or share personal information, and we will not discriminate against you for using your rights. An authorized agent may make a request for you with your signed permission.
12. Your controls
- Apple Health: Kae's Settings → Apple Health, or iPhone Settings → Privacy & Security → Health → Kae.
- Location, camera, photos, microphone: iPhone Settings → Privacy & Security.
- Notifications: Kae's Settings → Reminders.
- Community foods: share only when you choose; block contributors in Settings.
- Emails: use the unsubscribe link in any email.
- Delete all data: Settings → Delete all data removes your journal and keeps your account.
- Delete account: Settings → Delete account removes your account and everything in it. This does not cancel an App Store subscription; cancel that in your Apple account settings.
13. Children
Kae is for people aged 16 and over and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.
14. This website
kaeapp.com does not use cookies, analytics or advertising trackers. It saves your language and light/dark choice in your browser's local storage so the site remembers them; this never leaves your device. Our host, Cloudflare, processes standard request data such as IP address and browser type to deliver the site and protect it from attacks.
15. Changes
We may update this policy as Kae changes or the law requires. We will update the effective date at the top and let you know about significant changes in the app or by email. Where a change requires your consent, we will ask for it.
16. Contact
Khalid Hadadi
Email: khalid.support@gmail.com
Kingdom of Saudi Arabia
This policy is available in English and Arabic. If they differ, the Arabic version prevails for users in Saudi Arabia.
Version 1.1 · Effective October 14, 2026