Privacy Policy
Last updated: 11 November 2026
Welcome to Kaddi ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account
- Create and manage your profile
- Build and track plans, goals, and habits
- Log health, nutrition, finance, and other life data
- Chat with Kaddi or contact us for support
- Provide feedback or reviews
- Join our waitlist
This information may include:
- Name and email address
- Profile details you choose to add
- Goals, plans, habits, and the logs you record
- Health, nutrition, sleep, recovery, and activity data you enter or connect
1.1.1 Apple Health (HealthKit)
With your explicit permission, Kaddi reads data from Apple Health (such as sleep, heart rate, workouts, steps, and nutrition) and may write workout and mindfulness sessions you log in Kaddi back to Apple Health. Health data is used solely to provide the app's features: personalized insights, recovery and strain views, and coaching. We never use Apple Health data for advertising, marketing, or data mining, and we never sell it or share it with third parties for their own purposes. You can review or revoke Health access at any time in iOS Settings → Privacy & Security → Health.
1.1.2 Oura and Strava
If you choose to connect Oura or Strava, Kaddi reads your data from them (from Oura, sleep, readiness, heart rate and activity; from Strava, your activities with their heart rate, distance and elevation) so it can give you your own recovery, strain and training views. As with Apple Health, it is used only to provide the app's features, never for advertising, and never sold. You can disconnect either at any time in the app.
1.1.3 Money
Kaddi does not connect to your bank. Financial information reaches it only when you add it yourself, or through an Apple Shortcut you choose to set up, which passes Kaddi the details of a payment (for example, from Apple Wallet or a message from your bank) so you do not have to type it in. You can delete the Shortcut at any time.
- Financial information you add yourself or through a Shortcut you set up
- Messages and content you share with Kaddi
1.1.4 Calendars (Google Calendar and Microsoft Outlook)
If you choose to connect Google Calendar or Microsoft Outlook, Kaddi reads the events on the calendars you select so it can plan your day around them, and makes changes to those events only when you ask it to. You can disconnect at any time in the app. How we handle data from Google is set out in full in section 4, Google User Data.
1.2 Camera and Photo Library Access
With your permission, we request access to your camera and photo library to:
- Let you set a profile photo
- Attach or capture photos to support logging (for example, meals)
1.3 Notifications
With your consent, we send push notifications to remind you about your plans, sessions, habits, and events. You can disable notifications at any time through your device settings.
1.4 Usage Data
We automatically collect certain information about your use of the app, including:
- App usage patterns and features accessed
- Device information (model, operating system, unique device identifiers)
- Log data (IP address, app version, pages and screens visited)
- Performance and crash data
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create and manage your account and profile
- Build your plans, surface your next move, and find patterns across your life
- Generate personalized insights and recommendations
- Send you notifications about your plans, sessions, and habits
- Provide customer support and respond to your inquiries
- Contact you about your account or your place on the waitlist
- Analyze usage patterns to improve app performance
- Ensure app security and prevent fraud
3. Information Sharing and Disclosure
3.1 With Service Providers
We may share information with third-party service providers who assist us in:
- Data storage and hosting (Supabase)
- Hosting our website (Vercel)
- AI-powered insights and recommendations (OpenAI, Anthropic)
- Sending email, such as waitlist and account messages (Resend)
- Analytics and performance monitoring
- Push notifications
- Customer support
These providers only receive the information needed to perform their services and are bound to protect it.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
3.3 What We Never Do
- We never sell your data.
- We never share it with advertisers or use it to target you with ads.
- We never use your private logs to train models for anyone but you.
4. Google User Data
This section explains how Kaddi accesses, uses, stores, shares, and deletes data it receives from Google when you connect Google Calendar. Connecting is optional, you choose which calendars Kaddi can see, and you can disconnect at any time.
4.1 Data we access
- Your list of calendars (names and colours), so you can choose which calendars Kaddi reads.
- Events on the calendars you select, from 14 days ago to 30 days ahead: title, start and end time, location, notes, whether it repeats, whether it is an online meeting, whether you organised it, and your response to the invitation.
- Changes you ask for. When you move, rename, or delete one of your Google Calendar events in Kaddi, or decline an event you were invited to, Kaddi makes that change in Google Calendar. Kaddi never changes an event you did not ask it to change.
- A calendar for Kaddi's own events. If you turn on "Add Kaddi events here", Kaddi creates a calendar named "Kaddi" in your Google account and keeps the events you create in Kaddi there. This permission only lets Kaddi manage calendars it created.
- Your Google email address, to show you which account is connected.
4.2 How we use it
We use Google user data only to provide and improve the features you use in Kaddi: showing your events on your day, planning sessions and reminders around the time you are busy, describing your meeting load in your daily and weekly reads, answering your questions about your schedule in chat, and making the calendar changes you ask for.
4.3 How we share it
We do not sell Google user data, and we do not use it for advertising. We share it only:
- with Supabase, which hosts our database and stores it on our behalf;
- with our AI providers (Anthropic and OpenAI), only when it is needed to produce a feature you are using, such as answering a question about your day, and under terms that do not allow them to train their models on it;
- when required by law, or to protect the security of Kaddi and its users.
4.4 How we store and protect it
Data is encrypted in transit and at rest. The access tokens Google gives us are kept in an encrypted vault and are used only by our servers to sync your calendar and make the changes you ask for. Access to production data is limited to the people who run Kaddi.
4.5 Retention and deletion
Kaddi keeps a copy of events inside the window described above and refreshes it on each sync; events that leave the window, or that you delete in Google Calendar, are removed from Kaddi on the next sync. When you disconnect Google Calendar in Kaddi, we revoke Kaddi's access at Google, delete the stored tokens and every Google Calendar event we hold for you, and remove the "Kaddi" calendar from your Google account. Daily totals derived from your calendar (for example, minutes spent in meetings on a given day) stay with your account until you delete it. Deleting your Kaddi account deletes all of it. You can also remove Kaddi's access at any time from your Google Account permissions, or ask us to delete your data at hello@heykaddi.com.
4.6 Limited Use
Kaddi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Use of Google user data with AI. Kaddi uses AI models to provide some of its features, such as answering your questions about your schedule and writing your daily and weekly reads. The use of raw or derived user data received from Google Workspace APIs, including the Google Calendar API, will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. Kaddi does not use Google Workspace API user data, raw or derived, to develop, improve, or train generalised or non-personalised AI or machine-learning models, and does not allow the AI providers it works with to do so.
In particular:
- we use Google user data only to provide or improve the user-facing features described above;
- we do not transfer it to others except as described in section 4.3, as needed to provide those features, to comply with the law, or as part of a merger or acquisition;
- we do not use it for advertising, including personalised or interest-based ads;
- we do not allow people to read it unless you give us permission (for example, when you ask for support), it is needed for security purposes, or the law requires it;
- we do not use it to develop, improve, or train generalised AI or machine-learning models.
5. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Your data is stored on secure servers and encrypted in transit and at rest. We use industry-standard security practices and regularly review our security measures.
6. Your Rights and Choices
You have the right to:
- Access and update your personal information
- Delete your account and associated data
- Opt out of certain communications
- Request a copy of your data
- Withdraw consent for camera or notification access
- Object to certain processing of your information
You can export or permanently delete everything, at any time. To exercise these rights, email hello@heykaddi.com.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.
8. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us so we can delete such information.
9. Third-Party Services
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
We use the following third-party services:
- Supabase: Database, authentication, and storage services
- OpenAI & Anthropic: AI-powered recommendations and insights
- Expo: Mobile app delivery and push notifications
- Oura and Strava: Sleep, recovery and activity data (only if you connect one)
- Vercel: Hosting our website
- Resend: Sending email
- Google Calendar and Microsoft Outlook: Calendar connections (only if you connect one; see section 4 for Google)
- RevenueCat: Subscription and purchase management
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically for any changes.
12. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: hello@heykaddi.com
This privacy policy is effective as of 11 November 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.