Privacy
Your food, your weight, your body. We hold it to run the app for you, and for nothing else.
What we hold
Your email address. What you log - food, weight, sessions, photos you choose to add. Anything you turn on in Health Connect or Apple Health: steps, workouts, weight, body composition, sleep, heart rate. Basic diagnostics about crashes and performance.
Health data is read, never written
Kenja reads the categories you switch on and writes nothing back to Health Connect or Apple Health. Turning a category off stops the reading immediately, and what was already imported can be deleted from Settings. The app works without any of it.
Photos: you choose where
Progress photos stay on your device by default and are never uploaded. If you choose to keep a set in your account instead, it is encrypted in transit and in storage, and reachable only when you are signed in, and it is never used to train anything. You can move a set either way, or delete it from everywhere at once. Food photos are a separate thing: sent to a model to be identified, used for that one purpose, and not kept afterwards.
We do not sell it, and there are no ads
Not to advertisers, not to insurers, not to employers, not to data brokers, not in aggregate, not de-identified. There is no version of this where your weight becomes someone else's product. Kenja is paid for by subscriptions.
Who else sees it
Only the services needed to run the app: hosting, crash reporting, payments, and the model that reads food photos. Each gets the minimum it needs to do its job and none may use it for anything else. Nobody else, ever, unless a court compels it - and we will tell you if that happens, where the law allows.
This website
No advertising trackers, no third-party analytics, no cookies beyond the one that keeps you signed in. We count page views without identifying anybody, and nothing you do here follows you elsewhere.
You can take it or delete it
Export everything as a file whenever you like, from Settings. Deleting your account removes your logs, photos and imported health data within thirty days, including from backups. There is no soft-delete and no waiting period we hope you forget about.
How long we keep things
Your logs, for as long as your account exists - the point of a trend is its length. Diagnostics for ninety days. Food photos are not kept at all.
Where it lives
On servers in Australia. If that changes we will say so before it does.
Your rights
Under the Australian Privacy Act you can ask what we hold, correct it, or complain to the OAIC if we handle it badly. Ask us first - hello@kenja.app - and we will answer within thirty days.
Write to hello@kenja.app. A policy nobody can follow is a policy that isn't doing its job.