Keto Lab Legal

Privacy Policy

Effective date: April 2026  ·  Last updated: April 2026

Keto Lab ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our App.

1. Information We Collect

Information you provide directly

Camera and food photos (AI analysis)

When you use the food photo analysis feature, the App requests access to your camera. We access the camera only when you actively use the AI scanner — we do not access your camera in the background. Images are transmitted to Google's Gemini API for processing and are not permanently stored on our servers after analysis is complete. We do not collect location metadata (EXIF data) from photos. Google processes these images per its API Terms of Service and does not use API-submitted data to train AI models without consent.

Information collected automatically

Subscription information

Subscription purchases are processed by Apple or Google. We receive subscription status confirmation through RevenueCat. We do not store your payment card information.

2. How We Use Your Information

Health data — including weight, food logs, ketosis levels, and fasting data — is used solely to provide the App's core features. This data is never used for advertising, marketing, data mining, or sold to any third party.

3. Health Data and Explicit Consent

Weight, ketosis levels, food intake, and fasting history constitute health-related data. Under applicable laws including GDPR (for EU users) and CCPA/CPRA (for California users), this data receives heightened protection as sensitive personal information.

During account registration, you will be asked to provide explicit, separate consent for the processing of your health data. This consent is required for the App to function. You may withdraw consent at any time by deleting your account. Withdrawal does not affect the lawfulness of prior processing based on consent.

4. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers, solely to operate the App:

We may disclose information if required by applicable law, court order, or to protect the rights, property, or safety of our users or the public.

5. Community Content

Recipes and other content you post in the community are visible to other users. Do not include sensitive personal information in community posts.

6. Data Storage and Security

Your data is stored on Supabase cloud infrastructure in the United States, with encryption in transit (TLS/HTTPS) and encryption at rest. We implement industry-standard security measures. No system is 100% secure; in the event of a breach we will notify you as required by applicable law.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may delete your account at any time from Settings then Account Settings then Delete Account. Upon deletion, your personal data is removed within 30 days, except where retention is required by law such as billing records for tax compliance.

8. Your Rights and Choices

All users

California residents (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion, correct inaccurate data, and opt out of the sale of personal information. We do not sell your personal information. Health data is Sensitive Personal Information under CPRA and is never sold or used for behavioral advertising. To exercise your rights, contact privacy@ketolab.app.

EU/EEA residents (GDPR)

You have the right to access, rectify, erase, and port your personal data. Diet, weight, and nutrition data is treated as health data (special category data under Article 9 GDPR) and processed only with your explicit consent. To exercise your rights or withdraw consent, contact privacy@ketolab.app. You may also lodge a complaint with your local supervisory authority.

9. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it immediately. Contact privacy@ketolab.app if you believe a child under 13 has registered.

10. International Data Transfers

Your data is processed in the United States. If you are located outside the US, your data is transferred to and processed in the US. By using the App, you consent to this transfer. We implement appropriate safeguards as required by applicable law.

11. Third-Party Links

Community content may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notice or email. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact

Email: privacy@ketolab.app
Address: Keto Lab, Los Angeles, CA, United States