1. Who is responsible for your data
The data controller is EXPENSEAR LLC, Saudi Arabia, publisher of Kieera. Contact for all privacy questions and requests: support@kieera.com.
2. The short version
- Your meals, water, weight, goals and profile are stored on your phone and, unless you turn iCloud backup off, in your own iCloud account, which we cannot read. You never have to give us your name or email: Kieera works with an anonymous account identified only by a random ID.
- If you allow it and then scan or describe a meal, the photo and/or text goes through our server to Google Gemini to be recognised. Our servers do not store the photo; a small copy stays on your phone with the meal.
- To know which adverts bring people to Kieera, we use an install-measurement service (AppsFlyer). It uses your device's advertising identifier only if you allow tracking in Apple's prompt. We also collect anonymous usage statistics (PostHog), which you can turn off in More, under Data. We never sell your data.
- Apple Health data is only read on your iPhone: it is never sent to our servers or to anyone else, and never used for advertising.
- You can delete your account and the data we hold about it from inside the app. If you used Miqyasi, email us to delete what it stored (see section 3).
3. What data we handle
On your device. Meals, water, weight, goals and profile are stored locally on your iPhone (in a SQLite database in an App Group container). On a phone that still holds Miqyasi's data, Kieera reads it once at its first launch and keeps what it can use, on the phone. We do not receive this data unless a feature you choose sends part of it, as described below.
iCloud backup. Unless you turn it off, a copy of your logs (meals, water, weigh-ins, fasts, goals, profile, awards and reminders) and your meal photos is kept in your own iCloud account, in Kieera's private database there, so a new phone or a reinstall can pick up where you left off. It is written whenever the app goes to the background with something new. Only you can read it: Kieera cannot, and Apple holds it under your iCloud terms. Turn it off in More, under iCloud; Delete everything and Delete account remove the copy too.
Your account. The first time Kieera can reach the internet, it creates an anonymous account on our server, identified only by a random user ID, and gives that ID to RevenueCat (see Purchase data). It holds no name or email. If you add your email address, we send a one-time code to confirm it and keep the address with the account so you can sign back in. Our backend runs on Supabase (authentication, database and edge functions).
If you used Miqyasi. If you signed in to Miqyasi with Apple or saved a backup there, that account, its backup and any meal photos you uploaded to Miqyasi are still held on our server. Kieera does not use them, and Delete account in Kieera does not reach them. To have them deleted, email support@kieera.com from the address you used with Miqyasi (if you used Hide My Email, tell us the relay address shown in iOS Settings under Sign in with Apple) and we will delete them within 30 days.
Recognition data. When you use AI recognition: the photo (downscaled on your phone) and/or the text you type or dictate, any eating preferences you have set (see section 4), the app's language, your time zone (so your daily scan resets at your midnight), and our record of how many recognitions you have used for daily limits. If you rate a meal with a thumbs up or down, we store the rating, the meal name, its calories, whether it was an estimate and any reason you give.
Barcode lookups. When you scan a barcode, your phone asks Open Food Facts, a public food database, for that product. The request contains the barcode number and standard technical data such as your IP address. It does not include your name, email or diary.
Voice dictation. If you use the microphone to describe a meal, Apple's speech recognition turns your words into text, on your iPhone where possible and otherwise on Apple's servers. Kieera does not record or keep the audio.
Purchase data. Each time Kieera opens, it asks our subscription provider RevenueCat which plans are on sale and whether you have Plus, sending your Kieera user ID and standard device information. Our server also asks RevenueCat whether you have Plus once you have used the free daily scan. If you buy Kieera Plus, Apple processes the payment and RevenueCat receives the purchase receipt. No payment card data reaches Kieera.
Technical data. Our servers and providers may process technical information such as IP address and request logs to deliver, secure and debug the service.
Install measurement. Kieera advertises on a few platforms, and to know which adverts bring people in we use AppsFlyer. When you first open Kieera, iOS asks whether to allow tracking. If you allow it, the install and the app's opens are reported with your device's advertising identifier, so the install can be matched to the advert that led to it; if you refuse, the service runs without that identifier and the app works exactly the same. Either way, AppsFlyer receives three events (finishing onboarding, starting a trial, and a purchase with its price) together with your Kieera user ID, so a purchase can be matched to its install, and standard technical data such as your IP address. It may confirm an install or purchase to the advertising platform that showed you the advert, so we can measure our campaigns. It never receives a meal, a calorie, a weight or anything else you log. Our subscription provider RevenueCat also receives AppsFlyer's install identifier.
Usage analytics. To see where onboarding loses people, how many reach the paywall and how the app is used, Kieera sends anonymous usage events to PostHog, hosted in the United States: the app being opened and which tabs are viewed; onboarding steps and an import from Miqyasi; your answers to the tracking, notification and AI prompts; an account being created, signed in or signed out (the method only); the paywall, a gift or an offer being shown; a purchase being started, completed, cancelled or failed (the plan only) and restores; a scan finishing (how, and whether it found a meal) or hitting the daily limit; meals logged, edited or deleted (the method only); water and weigh-ins being logged (never the amount); fasts started and ended; awards earned; changes of scene, fox colour or app icon; and a backup being restored or failing. Each event also carries the app's language and whether you have Plus. Events carry a random identifier that is not linked to your account, name or email, they never include a food, calorie, weight, water or body figure, and we do not record your screen. This is on by default; you can turn it off at any time in More, under Data, with "Share anonymous usage", and nothing more is sent.
4. AI photo and text recognition
Recognition only happens when you choose to scan a meal photo or describe a meal. Before anything is sent the first time, Kieera asks your permission and names Google's Gemini. You can withdraw it at any time in More, under Data, by turning off "Read meals with Google's AI": nothing more is sent, and Kieera asks again before the next scan or description. The (downscaled) photo and/or text is sent through Kieera's server to Google Gemini, which returns an estimate that we pass back to the app.
If you have set eating preferences in the app (for example vegetarian, vegan, halal or pork-free, foods you avoid, or a short note), they are sent with the request so the estimate fits how you eat. Some preferences may reveal religious beliefs (such as halal) or health information (such as avoiding gluten or peanuts). Setting them is optional, our server does not store them, and you can clear them at any time in More, then Eating preferences.
- Kieera's servers do not store your photos. A small copy stays on your phone with the logged meal and, if iCloud backup is on, in your own iCloud account.
- We use Google's paid Gemini API. Under Google's terms for paid services, Google does not use your photos, descriptions or results to improve its products, and keeps them only for a limited time to detect abuse and meet legal obligations.
- You can decline and log manually at any time; the rest of the app works without recognition.
- Avoid including personal or sensitive information in photos or descriptions.
5. Apple Health
Connecting Apple Health is optional and off until you turn it on in More, under Apple Health. With your permission, Kieera reads your weight, steps and active energy, and writes the weigh-ins you save (one a day). Steps and active energy are only shown; they never change your calorie budget. Health data is only read on your iPhone: it is never sent to Kieera's servers or to any third party, never used for advertising, marketing or data mining, and never sold. If you accept a weight from Health on the Weight screen, it becomes one of your Kieera weigh-ins and is kept with your logs, including in your iCloud backup if that is on. To stop, turn the switch off in More, or change permissions in the Health app.
6. Why we use data and our legal grounds
- To provide the app and the features you use, including recognition, accounts, daily limits and subscriptions (performance of our contract with you).
- To recognise your meals and to read or write Apple Health data (your consent, which you can withdraw).
- To improve how accurately Kieera estimates meals, using the ratings you choose to give (our legitimate interests).
- To measure which adverts bring people to Kieera and how the app is used (our legitimate interests; the advertising identifier is used only with your consent, given in Apple's tracking prompt and withdrawable in iOS Settings, under Privacy & Security, then Tracking).
- To keep the service secure, prevent abuse, fix bugs and meet legal obligations (our legitimate interests and legal obligations).
- To answer your requests (contract, legitimate interests or legal obligation).
8. International transfers
Our providers operate servers that may be outside Saudi Arabia, including the region where our Supabase project is hosted, Google's infrastructure, AppsFlyer's servers, PostHog's servers in the United States, and your iCloud account, wherever Apple keeps it. Where the law requires it, we transfer personal data outside the country only with appropriate safeguards, such as contractual protections, and in line with the Saudi Personal Data Protection Law (PDPL) and its regulations. For users in the EU or UK, transfers rely on the safeguards recognised under the GDPR or UK GDPR, such as standard contractual clauses.
9. How long we keep data
- Data on your device stays there until you delete it or remove the app. The copy in your iCloud account stays until Delete everything or Delete account removes it; turning the backup off stops new copies but keeps the last one. Your iPhone's own iCloud or computer backup may include the app's data as well.
- Account and server data are kept while your account exists and are removed when you delete your account. Deleting the app does not delete the account: if you remove Kieera without using Delete account, the anonymous account and your ratings stay on our server until you email us to delete them.
- RevenueCat keeps its subscription record after you delete your account. Email us if you want it deleted and we will ask RevenueCat to remove it.
- Photos sent for recognition are not stored on Kieera's servers. The small copy on your phone, and in your iCloud backup if that is on, stays until you delete your data or the app.
- We may keep limited records longer where the law requires it or to resolve disputes.
10. Your rights
Under the Saudi PDPL you have the right to be informed, to access your personal data, to request a copy, to request correction, to request deletion or destruction, and to withdraw your consent at any time where processing is based on consent. Under the GDPR and UK GDPR (for users in the EU and UK) you have similar rights, plus the rights to restrict or object to processing and to data portability. You can withdraw your consent to tracking in iOS Settings, under Privacy & Security, then Tracking, and turn off usage analytics in More, under Data.
To use any right, email support@kieera.com. We may need to verify that the request comes from you. We aim to reply within 30 days. If you are not satisfied, you may complain to the Saudi Data and AI Authority (SDAIA) or, if you are in the EU or UK, to your local data protection authority.
11. Deleting your data
In the app go to More, then Account & data, then Delete account. This deletes your account and everything we hold about it on our servers, then erases every meal, photo, weigh-in, goal and setting on this phone and the copy in your iCloud account. It cannot be undone, so export first (More, then Account & data, then Export) if you want a copy. To erase only your logs (on this phone and in iCloud) and keep your account, go to More, then Delete everything. Data left from the Miqyasi app is deleted by email, as described in section 3. If you need help, email us. Neither option cancels an App Store subscription; cancel that in iOS Settings.
12. Security
We use reasonable technical and organisational measures, including encrypted connections, to protect data. No system is completely secure, so we cannot guarantee absolute security.
13. Children
Kieera is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us data, contact support@kieera.com and we will delete it.
14. Notifications
Kieera uses local reminders on your device only, and you control them. We do not send push notifications from our servers. You can turn reminders off in the app or in iOS Settings.
15. This website
kieera.com is a static site. Its pages, including the calculators, run in your browser and send nothing you type to us. The only measurement is Google Analytics, and only if you accept it in the banner on your first visit: nothing is loaded or sent before that, and declining is remembered. If you accept, Google sets cookies (_ga, up to two years) and receives the pages you view, the site that sent you, your browser and device type, a random visitor ID and your IP address, which Google uses to estimate a city and does not store. We have advertising features and data sharing with Google turned off, and we never see who you are. You can change your choice at any time with the "Cookie settings" link in the footer. Google's own policy is at policies.google.com/privacy.
16. Changes to this policy
We may update this policy, for example when we add features or providers. We will change the date at the top and, for material changes, tell you in the app or by another suitable means.
17. Contact
EXPENSEAR LLC, Saudi Arabia. Data controller and privacy requests: support@kieera.com.