Privacy Policy for KaLens
Last updated: June 26, 2026
This Privacy Policy explains how KaLens, operated by Hatice Aysun Kahraman Dayan ("KaLens," "we," "us," or "our"), collects, uses, shares, and protects personal information when you use the KaLens iOS app and related services.
1. Who Controls Your Data
Data controller: KaLens, operated by Hatice Aysun Kahraman Dayan.
Contact email: support@kalens.app
2. Scope
This policy applies to personal information processed through the KaLens iOS app, related backend systems, support communications, and subscription/paywall infrastructure.
3. Information We Collect
3.1 Information you provide directly
- Account details from sign-in providers (Apple or Google), such as user identifier and email (if provided by the provider).
- Onboarding and profile information you enter, including wellness goals, dietary preferences, allergens, symptom flags, and baseline information (for example, age range, height/weight inputs, and related settings).
- Support requests and feedback you submit, including text content and contact email.
- Deletion or privacy requests you send to support@kalens.app.
3.2 Information collected through app usage
- Barcode scans, search terms, favorites, and scan/history interactions.
- Product and analysis data used to generate KaLens safety/nutrition insights.
- App interactions such as screen views, feature usage, and navigation events, used to improve the app.
- Subscription and entitlement status (for example, trial or paid status).
3.3 Scanner and AI-related data
- KaLens processes label photos on-device for OCR (text extraction).
- When AI processing is enabled, KaLens may send OCR text and related scan context to AI processing infrastructure/providers to generate ingredients/nutrition parsing outputs.
- KaLens asks for explicit in-app consent before third-party AI processing where required by the app flow.
3.4 Device and technical information
- App version and technical diagnostics needed for reliability and support.
- For support/feedback submissions, KaLens may include device info such as network type, screen size, display scale, low power mode, and a bucketed free-storage label.
- Permission states (for example, camera and notifications) and other operational metadata.
3.5 Information we do not collect for tracking ads
- KaLens currently does not use Apple ATT permission prompts.
- KaLens does not currently use cross-app or cross-website advertising tracking through ATT-based flows.
4. How We Use Information
- Provide core app features (product lookup, scoring, personalized insights, and scanner analysis).
- Authenticate users and secure accounts.
- Operate subscriptions, entitlements, and paywalls.
- Respond to support requests and user feedback.
- Analyze usage and improve performance, accuracy, and reliability.
- Maintain security, prevent abuse, and comply with legal obligations.
5. Legal Bases (EEA/UK)
Where GDPR/UK GDPR applies, we rely on one or more of these legal bases:
- Contract: to provide KaLens services you request.
- Legitimate interests: to improve, secure, and operate the app responsibly.
- Consent: where required (for example, certain permissions or optional processing).
- Legal obligation: where processing is required by law.
6. Sharing and Processors
We use service providers (processors/sub-processors) to run KaLens:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and backend data storage/services. |
| Hetzner (hosting) | Infrastructure hosting for KaLens backend/API services. |
| OpenRouter and underlying model providers | AI processing for scanner-related parsing when enabled. |
| Apple (App Store, Sign in with Apple, In-App Purchases) | Distribution, Apple login, subscription billing, and purchase platform operations. |
| Google (Sign-In/OAuth) | Google account authentication. |
| RevenueCat | Subscription infrastructure and entitlement management. |
| PostHog | Product analytics and app improvement insights. |
We may disclose information if required by law, court order, or to protect rights, safety, and security.
7. International Data Transfers
Because KaLens uses global service providers, information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers.
8. Data Retention
- We generally retain personal data while your account is active.
- If you request deletion, we will remove personal data from our databases manually within up to 60 days, unless law allows an extension.
- To complete deletion, we may require request confirmation via support@kalens.app.
- We may keep data that is no longer personal (for example, anonymized analytics) and certain non-personal product-level information.
- We may retain limited data when legally required.
9. Your Privacy Choices and Rights
9.1 In-app and device controls
- You can manage camera and notification permissions in iOS Settings.
- You can manage AI processing permission through the app flow/settings behavior.
- You can manage subscriptions through Apple subscription settings.
9.2 Rights by region
Depending on your location, you may have rights such as access, correction, deletion, portability, objection, restriction, or appeal.
- EEA/UK: GDPR/UK GDPR rights, including complaint rights with a supervisory authority.
- US state laws (where applicable): rights to know, access, delete, and correct, and to non-discrimination for exercising rights.
- Other regions: rights provided by local law.
To exercise rights, email support@kalens.app. We complete requests within 60 days, unless law allows an extension.
10. Do Not Sell or Share
KaLens does not sell personal information for money. KaLens also does not share personal information for cross-context behavioral advertising as described by applicable US privacy laws, based on current app practices.
11. Children
KaLens is intended for a general audience and is not directed to children under 13. If you believe a child has provided personal data, contact support@kalens.app.
12. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No method of storage or transmission is fully secure, so absolute security cannot be guaranteed.
13. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.
14. Contact
For privacy questions, rights requests, or deletion requests:
support@kalens.app