Privacy Policy

Effective Date: 11/04/26

Last Updated: 06/10/26

1. Introduction

DV ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application Kenco Life ("the App"), available on iOS and Android. By using the App, you consent to the practices described in this policy.

This policy is designed to comply with applicable data protection regulations, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Apple App Store Guidelines, and the Google Play Developer Program Policies.

2. Information We Collect

We collect the following categories of information when you use the App:

2.1 Account & Profile Information

When you create an account via Google Sign-In or Apple Sign-In, we collect:

• Name (first name, last name) as provided by your sign-in provider.
• Email address as provided by your sign-in provider.
• Profile photo URL from your sign-in provider.
• Phone number (if you choose to provide it voluntarily).

2.2 Health & Body Data

To provide personalized nutrition and meal-planning services, we collect the following health-related information that you voluntarily enter:

• Body measurements: height, weight, and associated units of measurement.
• Date of birth.
• Biological sex.
• Pregnancy and breastfeeding status (including week of pregnancy, if applicable).
• Activity level.
• Medical conditions / illnesses (free-text description of any diseases or conditions you wish to disclose).
• Allergies (free-text description of food or other allergies).
• Medications (free-text description of any medicaments you are currently taking).
• Food preferences (dietary restrictions and preferences).

Purpose of health data collection: This health data is collected solely to enable you to connect with a coach inside the App. Your assigned coach views this information to make informed decisions about your nutrition plan. The App acts purely as a bridge between you (the student) and your coach, providing transparency. We do not use this health data for advertising, profiling, analytics, or any purpose other than facilitating the coach–student relationship within the App.

2.3 Nutrition & Meal Data

• Daily meal plans and meals created by you or your coach.
• Ingredient information (including photos of ingredients you upload).
• Daily, weekly, and monthly nutrition statistics (macronutrient intake, calorie tracking).
• Daily nutrition goals set by your coach.

2.4 Device & Technical Data

• Device token (Firebase Cloud Messaging token for push notifications).
• Device information: device model, operating system version, and app version (collected via Firebase Analytics and Crashlytics).
• Crash reports and error logs (collected via Firebase Crashlytics to improve app stability).
• App usage analytics: screen views, button interactions, and navigation events (collected via Firebase Analytics). Usage analytics is linked to your account identifier, which is a number and not your name or email. The App also sends the identifiers of the analytics session and of the app installation to our server, where they appear in technical logs next to that number. We use them together only to investigate problems you may run into.

2.5 Photos & Images

• Ingredient photos that you upload or capture using your device camera. These images are processed and stored to enable ingredient recognition and meal tracking.
• Profile avatar from your Google or Apple account.

2.6 Subscription & Payment Data

• Subscription status (active, expired, etc.) and product identifiers from Apple App Store or Google Play Store.
• We do not collect or store credit card numbers or payment details. All payment processing is handled entirely by Apple or Google.

2.7 Video search & YouTube content

Certain features let you search for public YouTube videos using free text. In that case:

• Search queries: The text you enter in the App is sent to our backend (hosted on Google Cloud) and used solely to request search results from YouTube API Services (for example, the YouTube Data API). We use these requests to obtain video identifiers, titles, and related metadata needed to show you results.
• What we display: The App may show video titles and standard thumbnail images derived from YouTube’s public thumbnail URLs, and may open the corresponding video page when you choose to watch a video.
• Leaving the App: When you tap a video result, you are taken outside the App to view the content. If the YouTube application is installed on your device, your system may open the link in YouTube; otherwise, your default mobile browser (or another handler you choose) may open the video URL. That experience is provided by Google/YouTube and is governed by their terms and privacy notices, not only by this Privacy Policy.
• Account linkage: Using video search does not require you to sign in to YouTube through our App. If you later sign in to Google or YouTube on your device or in another app, your use of those services continues to be governed by Google’s policies.

2.8 Cookies on Our Website

Our website (kenco.life) uses cookies for one purpose only: to measure how the site is used, with Google Analytics. This happens only if you choose “Accept” in the cookie banner. If you choose “Reject”, or make no choice, no analytics cookie is set and nothing is sent to Google Analytics, and the site works the same.

• What is collected after you accept: the pages you view, clicks on the App Store and Google Play links, whether a form was sent successfully (never what you typed into it), and how you reached the site. These are tied to a random visitor number stored in a cookie, not to your name or email. The website is not connected to your Kenco Life account.
• Cookies: _ga and _ga_<ID>, set by Google Analytics to tell one browser from another. They last up to 13 months, and we ask for your choice again after 6 months.
• Your choice is remembered in your browser’s local storage under the name kenco-cookie-choice. It holds your answer and its date and no identifier, and it never leaves your browser.
• Who receives the data: Google LLC, which processes it on our behalf. Your IP address reaches Google when the analytics script loads; Google Analytics does not store it. See How Google uses information from sites or apps that use our services.
• Changing your mind: the “Cookie settings” link at the bottom of every page reopens the banner at any time. If you switch to “Reject”, collection stops and the analytics cookies are deleted from your browser.

3. How We Use Your Information

We use the collected data for the following purposes:

• Provide the core service: enable meal planning, nutrition tracking, and the coach–student interaction within the App.
• Coach–student bridge: share your profile and health data (allergies, illnesses, medications, body measurements) with your assigned coach so they can create personalized nutrition plans.
• Push notifications: send you relevant notifications about your meals, coach updates, and inbox messages.
• App improvement: analyze aggregated, non-identifying usage patterns to improve app features and stability.
• Crash reporting: diagnose and fix technical issues to maintain a reliable experience.
• Authentication: verify your identity and maintain session security.
• Legal compliance: comply with applicable laws and regulations.
• YouTube video search: send your search text to our servers and to YouTube API Services so we can return matching public video results (identifiers, titles, and metadata used for thumbnails and links), as described in Section 2.7.

4. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

4.1 Your Assigned Coach

When you connect with a coach through the App, the following information is shared with your coach:

• Name, email, phone (if provided), and profile photo.
• Body measurements (height, weight, date of birth, biological sex).
• Health data: allergies, medical conditions/illnesses, medications, pregnancy/breastfeeding status, and activity level.
• Food preferences.
• Daily meal plans, meals, ingredients, and nutrition statistics.

This sharing is essential for the coach to provide you with personalized nutrition guidance.

4.2 Third-Party Service Providers

We use the following third-party services to operate and improve the App. These providers process data on our behalf under their own privacy policies:

Service	Provider	Data processed	Purpose
Firebase Authentication	Google LLC	Email, sign-in tokens	User authentication
Firebase Analytics	Google LLC	App events, screen views, device info	Usage analytics (ad tracking disabled)
Google Analytics (website)	Google LLC	Page views, store-link clicks, a random visitor number	Website usage statistics, only with your consent
Firebase Crashlytics	Google LLC	Crash logs, device info, session IDs	Crash reporting & stability
Firebase Cloud Messaging	Google LLC	Device tokens	Push notifications
Google Cloud Storage	Google LLC	Ingredient photos	Image storage
Google Cloud Vision API	Google LLC	Uploaded images	Image recognition for ingredients
Google Generative AI	Google LLC	Ingredient images	Nutrition analysis from food images
YouTube API Services	Google LLC	Video search queries you submit; API responses (e.g. video IDs, titles, public thumbnail references)	Free-text search of public YouTube videos; display titles and thumbnails; open videos outside the App
Dynatrace	Dynatrace LLC	Performance metrics, interactions	App performance monitoring
Apple App Store / Google Play Store	Apple Inc. / Google LLC	Subscription & payment data	In-app purchases & subscription management

4.3 YouTube API Services

Our application uses YouTube API Services to enable users to search for and discover video content.

When you use the video search feature, your search query is sent to our backend server, which securely communicates with YouTube API Services using an API key restricted to this purpose (Google Cloud Project Number: 1242731967). All requests are performed server-to-server and are not associated with a specific YouTube account.

We do not store or manage any user-specific YouTube authorization tokens.

To improve performance and reduce API usage, our server may temporarily cache search results (including video IDs and titles) for up to 7 days. This cached data is not linked to individual users and is used only to serve repeated search queries more efficiently. We do not combine YouTube data with personally identifiable user data.

Video thumbnails are displayed using official YouTube thumbnail URLs generated from the video IDs returned by the YouTube API, in the following format: https://img.youtube.com/vi/{videoId}/hqdefault.jpg. We do not proxy, store, or cache thumbnail images on our servers; thumbnails are loaded directly from YouTube at the time of display.

The application displays video titles and thumbnails in a list format. When a user selects a video, they are redirected to YouTube using the standard watch URL format ( https://www.youtube.com/watch?v={videoId}), which opens either the YouTube application or the user’s default web browser. We do not host, stream, or modify YouTube videos within our application.

All use of YouTube API Services is based on user-initiated actions (e.g., entering a search query), and we do not access or process YouTube data beyond what is necessary to provide this functionality.

The application may store or access limited information on a user’s device (such as temporary data or identifiers) as necessary to provide functionality, including YouTube-related features.

We do not access or use YouTube API Services in the background without user interaction.

By using this feature, you agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms.

Google’s handling of data is described in the Google Privacy Policy: https://policies.google.com/privacy.

4.4 Analytics Consent Settings

We configure Firebase Analytics with the following consent settings:

• Analytics storage: Enabled.
• Ad storage: Disabled.
• Ad user data: Disabled.
• Ad personalization: Disabled.

4.5 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or to protect our rights, safety, or property.

5. Data Retention

We retain your data as follows:

• Account & profile data (including health data): retained for as long as your account is active. Deleted when you delete your account (see Section 7).
• Nutrition statistics (daily, weekly, monthly): retained for as long as your account is active. Deleted when you delete your account.
• Uploaded images (ingredient photos): retained for as long as your account is active. Deleted when you delete your account.
• Authentication tokens: automatically expire after 30 days of inactivity and are invalidated on logout.
• Crash reports & analytics data: retained by Firebase according to Google’s Firebase data retention policies. Usage analytics events, from the App and from the website, are kept by Google Analytics for 14 months; crash reports for up to 90 days.
• Technical server logs: contain identifiers only (no name, email, or health data) and are deleted automatically after 14 days.
• Account deletion requests submitted via the web form: retained only until the deletion is processed, then permanently removed.

6. Data Security

We implement technical and organizational measures to protect your data:

• Encryption in transit: all data transmitted between the App and our servers is encrypted using HTTPS/TLS.
• Authentication: we use a custom token-based authentication system with automatic expiration. Tokens are securely generated and cached with time-limited validity.
• Access controls: strict ownership and role-based checks ensure that users can only access their own data. Coaches can only view data for students who have been assigned to them.
• Input validation: all data inputs are validated and sanitized on both the client and server to prevent injection attacks.
• Infrastructure: our servers and databases are hosted on trusted cloud providers with industry-standard security certifications.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Account Deletion & Data Erasure

You can delete your account and all associated data in two ways:

• In-app: go to Profile → Delete Account → Delete. This immediately and permanently deletes your account data listed below.
• Web form: visit kenco.life/user/delete and submit a deletion request with your email address.

When you delete your account, the following data is permanently erased:

• Your profile and all personal information (name, email, phone, date of birth).
• All health data (allergies, medical conditions/illnesses, medications, pregnancy/breastfeeding status, body measurements).
• All meal plans, meals, and ingredient data.
• All uploaded images and photos (removed from cloud storage).
• All nutrition statistics (daily, weekly, and monthly records).
• All inbox messages.
• Coach–student associations and subscription records.
• Authentication tokens and cached session data.

Some data is held by Google on our behalf and is removed on Google’s schedule rather than instantly. When your account is deleted we ask Google Analytics to delete the usage analytics collected for you: it stops appearing in our reports within 24 hours and is permanently removed within 63 days. Crash reports are kept by Google for up to 90 days. Technical server logs contain no personal details and are deleted automatically after 14 days.

This action is irreversible. Once your account is deleted, we cannot recover any of your data.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: update or correct inaccurate data via your profile settings in the App.
• Right to erasure: delete your account and all associated data (see Section 7).
• Right to data portability: request your data in a structured, machine-readable format.
• Right to restrict processing: request that we limit the processing of your data in certain circumstances.
• Right to object: object to processing of your data for specific purposes.
• Right to withdraw consent: you may withdraw your consent at any time by deleting your account or contacting us.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children’s Privacy

The App is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can promptly delete it.

10. International Data Transfers

Your data may be processed and stored on servers located in the European Union and other regions where our cloud service providers operate. By using the App, you consent to the transfer of your data to these locations. We ensure that any such transfers comply with applicable data protection laws. Analytics data is processed by Google LLC in the United States, which is certified under the EU–U.S. Data Privacy Framework.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, providing notice within the App. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Email: [email protected]