Privacy Policy

Last updated: August 24, 2026

1. Introduction

Welcome to KYMBA ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address)
• Health and fitness data (meals, nutrition information, activity, sleep, heart rate, and recovery metrics)
• Device information and usage data
• Photos you choose to upload for meal analysis
• Voice recordings for voice-based meal logging, and audio and video when you use the live video coach

3. Apple Health and Connected Devices

With your permission, we access and sync data from Apple Health, including activity, nutrition, sleep, and other health metrics. You can also connect a wearable account - Oura, WHOOP, or Garmin - in which case we receive the data that provider shares, such as sleep stages, heart rate, heart-rate variability, and readiness or recovery scores. This data is used solely to personalize your plans, readiness, and recommendations. We never write to Apple Health without your explicit action, we never use this data for advertising, and you can disconnect any provider at any time in Settings, which stops further syncing and revokes our access token.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Analyze your meals and provide nutritional insights
• Generate personalized recommendations and meal plans
• Send you updates and notifications about your progress
• Respond to your comments, questions, and support requests

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is encrypted in transit and at rest using industry-standard encryption protocols.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us at privacy@heirclark.com.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Opt-out of certain data processing

8. Third-Party Services

To power the app we share the minimum necessary information with third-party processors, each under contract and none of whom may sell your data or use it to train models for advertising:

AI and content generation - OpenAI, Anthropic, and Perplexity receive meal descriptions and photos, goals, and activity context to generate your plans, analysis, and coaching. Replicate generates imagery used in the app.

Live video coach - LiveAvatar (HeyGen) and ElevenLabs receive the text of your coaching session and return synthesized speech and video. Session audio and video are streamed, not retained by us.

Grocery ordering - Instacart receives your shopping list, and only when you choose to place an order.

Infrastructure and operations - Amazon Web Services (storage), Sentry (crash diagnostics), PostHog (product analytics), and RevenueCat (subscription status). Sign in with Apple handles authentication; Apple does not share your real email address unless you choose to.

Reference data - USDA, ExerciseDB, OpenWeatherMap, and Google Places supply nutrition, exercise, weather, and location reference information.

Each service has its own privacy policy, which we encourage you to review.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Subscription status and purchase history (we never receive or store your card details)