Privacy &
Data Protection

This Privacy Policy ("Policy") describes how Kubuca ("Kubuca," "we," "our," or "us") collects, uses, stores, and protects your personal information when you use the Kubuca mobile application ("App"). By using the App, you agree to the practices described in this Policy.

1. Information We Collect

We collect only the information necessary to provide the App's features:

• Account Information: Name, email address, and phone number used for authentication.
• Profile & Health Goals: Height, weight, age, biological sex, activity level, and dietary preferences — used to calculate personalised calorie and macro targets.
• Food & Nutrition Logs: Meals you log manually, food photos you submit for AI analysis, and barcode scans.
• Health Data (Optional): Step count, active calories burned, and body weight — synced from Apple HealthKit or Google Health Connect only if you grant permission.
• Device & Usage Data: App version, device type, OS version, and crash logs used to improve stability. We do not collect precise location data.

2. How We Use Your Information

• To provide and personalise the App's core features — calorie tracking, AI coaching, meal planning, and analytics.
• To process food photos and text descriptions through AI models to return nutritional estimates.
• To authenticate your account and manage your subscription.
• To send optional reminders and notifications (only if you enable them).
• To improve the accuracy and performance of the App using aggregated, anonymised data.

We do not use your data for advertising, profiling for third-party marketing, or any purpose not listed above.

3. Apple HealthKit & Google Health Connect

• We request access to step count, active calories burned, and body weight only.
• This data is used solely to display your daily activity on the home screen and improve calorie goal accuracy.
• We write body weight entries back to Apple Health only when you log weight in the App and only with your permission.
• Health data obtained from HealthKit or Health Connect is never shared with third parties, used for advertising, or sold.
• You can revoke health data access at any time from your device's Settings.

4. Camera & Microphone

• Camera: Used to photograph meals for AI nutritional analysis and to scan food barcodes. Photos are sent to Anthropic's API for analysis and are not stored on our servers beyond the duration of the API call.
• Microphone: Used only in the AI Coach screen to convert voice input to text. Audio is processed locally by your device's speech recognition — raw audio is not transmitted to or stored by Kubuca.

5. Data Retention

• Your account data is retained as long as your account is active.
• If you delete your account, all personal data is permanently deleted from our active databases within 30 days and from encrypted backups within 90 days.
• Anonymised, aggregated analytics data that cannot identify you individually may be retained indefinitely.

6. Children's Privacy

Kubuca is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. The onboarding flow includes age verification and prevents users under 18 from completing registration. If we become aware that we have collected data from a person under 18 without parental consent, we will delete that data promptly. If you believe your child has provided us with personal data, please contact us at privacy@kubuca.com.

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request permanent deletion of your account and all associated data. You can do this directly in the App: Profile → Delete Account.
• Portability: Request an export of your personal data in a machine-readable format.
• Objection: Object to certain types of data processing, including any profiling.
• California Residents (CCPA): You have the right to know what personal data is collected, to opt out of any sale (we do not sell data), and to request deletion.

To exercise any of these rights, contact us at privacy@kubuca.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest, and role-based access controls limiting who within our team can access user data. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to enable biometric lock within the App for additional protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via a notice within the App or by email. Continued use of the App after changes are posted constitutes your acceptance of the updated Policy. The "Last Updated" date at the top of this page reflects the most recent revision.