Privacy Policy
The short version: Katuka stores what you log so it can analyze it. It sends your meals and health data to Anthropic for AI analysis, and it does not do that until you explicitly allow it. We don't sell anything, and the app doesn't show ads. On Android we measure our own ad campaigns with Google Analytics — see below. You can delete your entire account from inside the app.
Who is responsible for your data
Katuka is an app published by CruVal LLC. If you have any question about this policy or want to exercise your rights, write to support@katuka.app.
What we collect
What you give us
| Data | What for |
|---|---|
| Email and password | Creating your account and signing you in. |
| Name and profile photo | Personalizing the app. Both optional. |
| Age, height, weight and goal weight | Calculating your calorie target and your plan. |
| Health conditions and dietary restrictions | Warning you when a meal conflicts with your health or your diet. This is health data and we treat it as such. |
| Body measurements and the sport you play | Tuning the plan. Optional. |
| Photos and descriptions of your meals | Analyzing them and estimating calories, macros and ingredients. |
| Completed exercises and weight logs | Measuring your progress and adherence. |
| The water you log | Showing your total for the day and your history. |
| Your own macros, your pace, your flex days and your vacation dates | Adjusting your daily targets to what you chose. All optional. |
| Whether you signed up on iPhone or Android | Knowing how many people use Katuka on each platform, and helping you when you write to us. |
| Your subscription status | Which store you subscribed through, whether you are in the free trial and until when you have access. It comes from RevenueCat — see below. |
| An installation code | A random code the app creates when it is installed — it is not your phone's identifier or an advertising ID. With it we record the platform, the app version, when the app was first and last opened and, once you sign in, which account it belongs to. It tells us how many installs actually open Katuka. When you delete your account, the code stops being linked to it. |
| Your reminder settings | Remembering which reminders you turned on and at what time, so they survive changing phones. The reminders themselves are scheduled on your device — see below. |
| A fingerprint of each meal you log | An irreversible code (a hash) calculated from the photo or description. It lets Katuka recognise that you are logging the exact same thing again and reuse the previous result, instead of asking the AI a second time and giving you a different number. The photo itself is not derivable from it. |
What you can connect (always optional)
Apple Health / Health Connect. If you connect it, Katuka reads the workouts and active calories that other apps write there — Peloton, Strava, Garmin, Apple Watch and the rest — to show you your activity and to count your workouts towards your Katuka Score. By default this does not change your daily calorie target; crediting part of what you burn is a separate switch you turn on yourself in Profile. What Katuka reads is saved in your account, so that your activity history and your Score keep working. Katuka never writes anything into Health. You can disconnect it whenever you want from Profile, and from your phone's settings.
Reminders (they don't leave your phone)
If you turn on any reminder, your phone schedules it locally. Katuka has no notification server and never sends you a push message: there is no list anywhere of what you were reminded of or when. The only thing stored in your account is which reminders you switched on and at what time, so you don't have to set them up again on a new phone. You can turn them off one by one inside the app, or all at once from your phone's settings.
On your phone only: the widget and the share card
The home screen widget shows a snapshot of your day — Score, calories, water and workout — that the app saves on your phone; the widget itself doesn't connect to anything. The share card is an image created on your phone, and it only leaves it if you choose to share it.
What we do NOT collect
- Your precise location. (On Android, Google Analytics works out an approximate location from your IP address — see below.)
- Your contacts.
- Advertising identifiers on iPhone. On Android, the advertising ID is used only to measure our own ads, with ad personalization turned off. We don't build advertising profiles about you.
- Anything on your phone you didn't deliberately log.
Who it's shared with — and this is the important part
Anthropic (AI analysis). To analyze a meal or build your plan, Katuka sends Anthropic the photo or description of the meal, your age, height, weight and goal weight, your health conditions and dietary restrictions, and — if you connected it — your workouts and calories from Health.
Your name, your email and your password are not sent. Anthropic processes that data to return the analysis, does not use it to train its models, and deletes it after processing, under the commercial terms of its API.
None of this happens without your explicit permission. The first time you open the app we show you exactly what gets sent and to whom, and you have to actively accept it. If you don't, the server rejects every analysis request: the block isn't in the screen, it's in our backend. You can withdraw permission whenever you want from Profile → Account → Withdraw AI consent, and from that moment not one more piece of data leaves.
Supabase (storage). Your data is stored in a database managed by Supabase, hosted on servers in the United States (us-east-1 region). Each user can only reach their own data; that is enforced at the database level, not just in the app.
Apple, Google and RevenueCat (subscriptions). Katuka Pro is billed by Apple through your Apple ID on iPhone, or by Google through your Google Play account on Android. RevenueCat validates the purchase and tells Katuka whether your subscription is active. We never see your card details — neither Apple nor Google gives them to us.
Google (Firebase / Google Analytics) — Android only. To measure which of our ads bring people who sign up or subscribe, the Android app uses Google Analytics for Firebase. It sends Google your device's advertising ID, an app-instance identifier, the app version, events such as installing, opening, signing up and subscribing, and an approximate location that Google works out from your IP address. It never sends your health data, your meals, your weight or your email. Ad personalization is turned off. You can reset or delete your advertising ID in your phone's settings. The iPhone app does not include it.
Nobody else. We don't sell your data, and we don't hand it to advertisers, insurers or data brokers.
How long we keep it
As long as your account is open. When you delete it, your photos are removed from storage, along with every row of your data and your authentication user. We keep no copies, except that encrypted database backups can hold one for up to 30 days, after which it is overwritten. If you no longer have the app, see how to delete your account by email.
Your rights
- See and export — Profile → Account → Export my data downloads everything in one file.
- Correct — you can edit your profile and correct any meal that was analyzed wrong.
- Delete — Profile → Account → Delete my account. Immediate, permanent, and it doesn't require writing to us.
- Withdraw AI consent — Profile → Account → Withdraw AI consent, without losing your account.
- Complain — if you live in the EU or the UK, you can lodge a complaint with your data protection authority.
Children
Katuka is not directed at children under 13 and we do not knowingly collect their data. If we find an account belonging to a child under 13, we will delete it. If you are a parent or guardian and believe this has happened, write to us.
Security
Everything travels encrypted over HTTPS. Photos are kept in a private bucket that only you can reach, through signed, temporary links. Passwords are stored hashed and nobody — us included — can read them. Access to data is restricted per user at the database level.
Even so, no system is infallible. If a breach affecting your data occurred, we would tell you.
Changes to this policy
If we change anything substantial — above all if it affects what is shared with the AI — we will ask you again inside the app. Your previous consent stops being valid automatically and nothing is sent until you accept the new version.
Important health notice
Katuka is not a medical device and is not a substitute for a health professional. Meal analyses are AI-generated estimates and can be wrong. Plans are guidance. Talk to your doctor before starting any diet or exercise regimen, especially if you have a health condition, take medication or are pregnant.