Privacy Policy

Kotchi (the "App") is a nutrition and weight-management app with a personal plan, a food diary with AI food recognition, and chat with a real coach. The App and the kotchi.app website (together, the "Service") are operated by DNK PROJECT LLC, 2495 S Mason Rd, 1228, Katy, TX 77450, United States ("DNK PROJECT", "we", "us", "our"). We decide why and how your personal data is processed, and we are the seller of Kotchi subscriptions in the App Store and Google Play.

This Privacy Policy explains what data we collect, why we use it, who helps us process it, how long we keep it and what rights you have. Health-related data is also covered by our Consumer Health Data Privacy Policy (kotchi.app/en/legal/health-data/), which is part of this policy.

Privacy questions and requests: [email protected]. Everything else: [email protected].

Account data

• •Your name and email address.
• •Sign-in data from Sign in with Apple or Google sign-in, or the one-time codes we email you when you sign in with email. If you use Apple's "Hide My Email", we receive a relay address instead of your real one.

Profile and questionnaire

• •Sex, date of birth, height, current and target weight, activity level, meal preferences and favorite foods.
• •If you choose to tell us: food allergies and intolerances, chronic conditions, medications and supplements, and the wellbeing topics you select in the questionnaire (for example, energy, sleep, body confidence or sex life).

Diary and progress

• •Meals and drinks you log, including barcodes you scan and the meal photos, voice notes and text you submit for food recognition.
• •Weight and body measurements (such as waist and hips), daily check-ins and workout progress.
• •Menstrual cycle marks (period and PMS days) and, if you choose to tell us, menopause or pregnancy — only if you use the Cycle section, which you can hide at any time.
• •Body photos you upload for the goal photo and progress timeline features.
• •Your daily step count, if you connect Apple Health or Health Connect (see below).

Chat with your coach

• •Text and voice messages, photos, videos and files you exchange with your coach, transcripts of voice messages, and messages you report.

Subscription

• •Your plan, its status, trial and renewal dates, and store transaction identifiers. Payments are processed by Apple or Google; we never receive your card details.

Device and technical data

• •Push notification token (if you allow notifications), device type, operating system, app version, time zone, IP address, and server and error logs.

Apple Health and Health Connect

If you grant access, the App reads only your daily step count and the name of the source app or device (for example, Apple Watch) from Apple Health (iOS) or Health Connect (Android), including in the background while the App is closed, so that your daily report and your coach see your steps. We do not read any other data from them and do not write anything to them. Data from Apple Health and Health Connect is not used for advertising or marketing, is not sold, and is not shared with third parties for those purposes. Use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You can revoke access at any time in Apple Health or Health Connect settings.

We do not collect your precise location, your contacts or data from other apps.

• •To create your account, sign you in and keep it secure.
• •To calculate your calorie and nutrition targets and to build and adjust your personal plan.
• •To recognize food from photos, voice and barcodes and log it in your diary.
• •To let your coach see your profile, diary, measurements, steps, cycle marks and photos, and talk with you in the chat.
• •To help coaches respond faster and in your language: our tools summarize your chat history, translate messages and draft reply suggestions, which a coach reviews before sending.
• •To create your goal photo — an AI-generated illustration of how you might look at your target weight — from a body photo you upload.
• •To manage your subscription and free trial and give you access to paid features.
• •To send the push notifications and emails you need: sign-in codes, coach messages and reminders related to your plan.
• •To provide support, investigate errors, prevent abuse and keep the Service secure.
• •To comply with the law and enforce our Terms of Use.

We do not sell your personal data, we do not use it for targeted advertising, and we do not use it to train AI models.

If the law of your country requires a legal basis for processing, we rely on:

• •Performance of our contract with you — to provide the Service you signed up for.
• •Your consent — for health data, Apple Health and Health Connect access, notifications, and camera, microphone and photo access.
• •Our legitimate interests — keeping the Service secure, preventing abuse and fixing errors.
• •Legal obligations — when the law requires us to keep or disclose data.

You can withdraw your consent at any time; this does not affect processing that happened before. Because the App cannot work without health data, withdrawing consent to its processing means deleting your account (see section 10).

Some features use AI models run by our service providers:

• •Food recognition: the meal photo, voice note or text you submit is sent to an AI model to identify foods and estimate portions.
• •Voice messages in the chat are transcribed into text.
• •Goal photo: the body photo you upload is checked by an AI model (whether it shows a person, and whether the pose and lighting are suitable) and then used to generate your goal photo.
• •Coach tools: chat summaries, translations and draft replies for your coach are generated from your messages and profile. Your messages are also converted into numerical representations ("embeddings") to find relevant articles in our knowledge base.

AI output can be wrong. Calorie and nutrition estimates are approximate — check them and correct your diary when needed.

We do not sell your data. We share it with service providers that process it on our behalf to run the Service, and only as much as each of them needs:

• •Vultr (United States, New Jersey) — the servers and database that run the Service.
• •Cloudflare — DNS, content delivery and protection for our domains, and file storage (Cloudflare R2) for photos and voice recordings.
• •Amazon Web Services (Amazon SES) — sending emails, such as sign-in codes.
• •OpenRouter and the AI model providers it routes requests to — food recognition from photos and voice, voice transcription, goal photo checks and generation, chat translation, and chat summaries and draft replies for coaches.
• •OpenAI — embeddings used to search our knowledge base when preparing reply suggestions for coaches.
• •Google Firebase Cloud Messaging — delivering push notifications; it receives your device token and the notification text.
• •Apple and Google — Sign in with Apple and Google sign-in, in-app purchases and subscriptions, and Apple Health and Health Connect on your device.

We may also disclose data when the law requires it (for example, a valid court order), to protect the rights and safety of our users, us or others, or to a buyer or successor if our business is sold or reorganized, in which case this policy will continue to apply to your data.

Your coach is a real person on our team. Coaches and support staff see the data they need to work with you: your profile and questionnaire answers, diary, measurements, steps, cycle marks, photos and chat.

Some of our coaches and support staff work outside the United States. They access your data remotely through our admin tools over encrypted connections, each with a personal account; your data remains stored on our servers in the United States. Access is limited to people who need it for their work, and they are required to keep your data confidential.

Our servers are located in the United States (Vultr, New Jersey). Some service providers, such as Cloudflare and AI model providers, may process data in other countries, and our team may access it from abroad as described in section 7. Wherever your data is processed, we protect it as described in this policy.

We protect your data with encrypted connections (HTTPS), access controls and personal accounts for staff, and by limiting what each service provider receives. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you as required by law.

We keep your data while your account exists. You can delete your account at any time in the App (Settings → Delete account) or by emailing [email protected] from your account's email address — see kotchi.app/en/legal/delete-account/.

When your account is deleted, we permanently erase your profile, questionnaire answers, diary, measurements, steps, cycle marks, photos, voice recordings, chat history, subscription records and push tokens from our systems. We keep only a record that an account with a given internal ID was deleted, when and by whom — without your name, email or any other content. Copies in our backups are removed as backups are rotated. Purchase records are kept by Apple or Google under their own policies. Server and error logs are kept for a limited time for security and troubleshooting.

You can also delete individual diary entries, photos and chat messages in the App at any time.

• •Correct your profile, goals and diary directly in the App.
• •Manage camera, microphone, photo, notification and Apple Health or Health Connect permissions in your device settings.
• •Hide the Cycle section in the App at any time.
• •Ask for a copy of your data, a correction or deletion by emailing [email protected].

This section applies to residents of California and of other US states with consumer privacy laws, such as Texas, Virginia, Colorado, Connecticut and Oregon.

Categories of personal information we collected in the last 12 months

• •Identifiers: name, email, account and device identifiers, IP address.
• •Customer records: name and email address.
• •Characteristics of protected classifications: sex, age (date of birth), and pregnancy or menopause if you choose to tell us.
• •Commercial information: your subscription plan, trial and purchase history.
• •Internet or other electronic network activity: use of the App, server and error logs.
• •Audio and visual information: voice notes and messages, meal and body photos, photos and videos in the chat.
• •Sensitive personal information: health data (weight, measurements, conditions, medications, cycle, steps), information about your sex life if you select it in the questionnaire, and account sign-in data.
• •Inferences: your calorie targets, personal plan and progress.

Sources: you, your device, Apple and Google (sign-in, purchases, Apple Health and Health Connect) and your coach. Purposes: see section 3. We disclose these categories for business purposes to the service providers listed in section 6, and keep them as described in section 10.

Sale and sharing

We do not sell your personal information and do not share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information only to provide the Service you request and for other purposes permitted by law, so a right to limit its use does not apply. Because we do not sell or share personal information, there is nothing to opt out of; we still treat a Global Privacy Control signal as a valid opt-out request.

Your rights

• •Know and access: what personal information we have collected about you, its sources, purposes and recipients, and a copy of it.
• •Delete: the personal information we have collected from you.
• •Correct: inaccurate personal information.
• •Opt out of the sale or sharing of personal information, targeted advertising and profiling — we do none of these.
• •Non-discrimination: we will not deny you the Service, charge you a different price or provide a different quality of service because you exercised your rights.

How to make a request

Email [email protected] from your account's email address (you can also delete your account in the App). We verify a request by matching it to your account email and may ask for more information if needed. You may use an authorized agent; we will ask for your signed permission and may verify your identity directly with you. We confirm receipt within 10 business days and respond within 45 days; if we need more time, we will tell you and may extend this by another 45 days. Requests are free of charge.

Appeals

If we decline your request, you can appeal by replying to our decision or by emailing [email protected] with the subject "Appeal". We will respond within the period required by your state's law. If you disagree with the outcome of the appeal, you can contact your state's Attorney General.

The Service is intended for people aged 16 and older. It is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has given us personal data, contact [email protected] and we will delete it.

The kotchi.app website does not use analytics or advertising cookies and does not track you. Your browser only stores your theme choice (light or dark) and that you have closed the cookie notice. Like any website, our hosting and Cloudflare process your IP address and standard request data to deliver the site and protect it from attacks.

We may update this Privacy Policy. We will change the "Last updated" date, and if the changes are material we will tell you in the App or by email before they take effect. If we want to use your health data for a new purpose, we will ask for your consent first.

DNK PROJECT LLC, 2495 S Mason Rd, 1228, Katy, TX 77450, United States.

Privacy questions and requests: [email protected]. Support: [email protected].