Privacy Policy

Last updated: March 19, 2026

Welcome to Kerah (“we”, “our”, “us”). Kerah is a household food safety and wellness app that helps families manage nutrition, meal planning, fitness, habits, caregiving, and more. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Kerah mobile application and related services.

1. Information We Collect

a) Account & Profile Information

• Name or nickname
• Email address (for authentication & OTP verification)
• Profile details such as date of birth, gender, height, weight, and activity level
• Household information (region, language, currency, timezone)
• Profile type (adult, child, elder, pet)

b) Health & Lifestyle Data

• Meal logs, nutrition intake, and food preferences
• Dietary constraints (allergens, Halal requirements, ingredient avoidance lists)
• Fitness activity logs and workout history
• Fasting sessions and habit tracking data
• Caregiving notes, check-ins, and escalation records
• Pet health logs and feeding schedules (if applicable)
• Female health data such as pregnancy status or postpartum information (if voluntarily provided)

c) Food Safety & Scanning Data

• Barcode and QR code scan results
• Nutrition label photos (processed for ingredient extraction, not stored permanently)
• Ingredient text input for safety evaluation
• Product submissions for missing items

d) Device & Usage Data

• Device type, operating system, and app version
• Push notification tokens (for delivering reminders and alerts)
• App interaction analytics and feature usage patterns
• Crash logs and performance diagnostics

e) Health Device Data (Optional)

• Steps, active calories, and heart rate from connected health devices (Apple Health, Google Fit)
• Sleep duration and HRV data (if device integration is enabled)

2. How We Use Your Information

We use your data to:

• Provide, personalize, and improve Kerah’s features
• Generate AI-powered meal plans, swap suggestions, and lunchbox recommendations
• Evaluate food safety — detect allergens, Halal compliance issues, and harmful additives
• Build your taste profile and personalize meal scoring
• Track fitness, fasting, and habit progress
• Manage grocery lists and pantry inventory
• Support caregiving workflows — check-ins, escalation chains, and care documents
• Send push notifications (meal reminders, care alerts, habit nudges)
• Generate weekly insights and behavioral intelligence reports
• Maintain audit trails for safety-critical actions (e.g., allergy overrides)
• Improve overall app performance, stability, and user experience

3. Data Sharing

We do not sell your personal data. Ever.

We may share data only in these limited circumstances:

• Service providers — Cloud hosting (AWS), email delivery, push notifications (Firebase Cloud Messaging), error tracking (Sentry), and payment processing (Stripe) — all bound by data processing agreements
• Within your household — Household members and caregivers you invite can see shared profiles and data according to the role-based permissions you configure
• Legal obligations — If required by law, court order, or to protect user safety

4. Data Storage & Security

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Update or correct inaccurate information
• Deletion — Request deletion of your account and associated data
• Withdraw consent — Opt out of optional data collection (e.g., health device integration) at any time

To exercise any of these rights, contact us at support@kerah-os.com. We will respond within 30 days.

6. Children’s Privacy

Kerah supports family use, including child profiles (KID type) that are created and managed exclusively by a parent or legal guardian (the household owner). Children do not have independent accounts.

• Child profiles are used for features like lunchbox planning and school food rules
• We do not knowingly collect personal data directly from children under 13 (or the applicable age in your jurisdiction)
• All child data is controlled by the parent/guardian and can be deleted at any time through the app
• No targeted advertising is served to child profiles

7. Third-Party Services

Kerah integrates with the following third-party services, each governed by their own privacy policies:

• Amazon Web Services (AWS) — Cloud infrastructure, database hosting, and file storage
• Firebase Cloud Messaging (Google) — Push notification delivery
• Sentry — Error monitoring and crash reporting
• Stripe — Payment processing for subscriptions
• Cloudflare — DNS, CDN, and web security
• Apple Health / Google Fit — Optional health device data sync (user-initiated)

8. AI-Powered Features

Kerah uses AI to enhance your experience. Our AI features include:

• Meal planning engine — Generates personalized weekly plans based on your dietary constraints, taste profile, and nutritional goals
• Food safety scanner — Evaluates ingredients for allergens, Halal compliance, and harmful additives
• Nutrition label scanning — Extracts ingredient and nutrition data from product photos using AI vision
• AI Coach — Provides personalized guidance on nutrition, fitness, and wellness topics
• Weekly insights — Generates behavioral intelligence reports about your nutrition and activity patterns
• Care suggestions — Provides care recommendations based on check-in patterns for elder profiles

9. Health & Device Integration

If you choose to connect a health device or platform (Apple Health, Google Fit), Kerah will read the following data types to enhance your fitness and wellness tracking:

• Steps and active calories
• Heart rate and resting heart rate
• Heart rate variability (HRV)
• Sleep duration and sleep quality scores

This integration is entirely optional and requires your explicit permission. You can disconnect at any time through the app settings. We do not write data back to your health platform, and we do not share this data with third parties.

10. Cookies & Tracking

The Kerah mobile application does not use cookies. We use minimal, privacy-respectful analytics to understand feature usage and improve the app experience. We do not engage in cross-app tracking or serve targeted advertisements.

11. Data Retention

• Active accounts — Your data is retained for as long as your account is active
• Deleted accounts — Upon account deletion, personal data is removed within 30 days. Anonymized, aggregated data may be retained for analytics
• Audit logs — Safety-critical audit records (allergy overrides, escalation events) are retained for 12 months for compliance purposes
• Backups — Encrypted backups may retain data for up to 90 days after deletion

12. International Data Transfers

Your data is primarily stored in the European Union (AWS eu-central-1, Frankfurt). Some third-party services (e.g. Firebase) may process data in other regions. When data is transferred outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or via email. The “Last updated” date at the top of this page reflects the most recent revision.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

By using Kerah, you agree to this Privacy Policy. If you do not agree, please discontinue use of the app.