Privacy Policy

The short version: Kaya makes free wellness tools. Your meal planning data stays on your device unless you turn on sync. We do not sell your data, we run no ads, and we do not track you across the web. You can export or delete your data at any time. We never share your mobile number for marketing.

1. Who we are and what this covers

This policy is published by Kaya Wellness, LLC ("Kaya", "we"), a wellness education company in Central Texas. You can reach us at shankar@mykayawellness.com. It covers mykayawellness.com and the Meal Plan app at mykayawellness.com/mealplan. Kaya is not a medical provider. Medical care in the programs we write about is provided by separate, independent physician-owned practices, which keep their own medical records under their own privacy notices. This policy does not cover your clinic's medical records.

2. What we collect

On the main site: your name and email when you contact us, subscribe to Rooted, or send a partner inquiry. Cloudflare Turnstile runs on our forms to block bots. We use Plausible for analytics on the main site: it is cookieless, collects aggregate statistics only, and does not identify you or follow you across the web. Plausible does not run inside the Meal Plan app.

In the Meal Plan app: by default, everything is stored locally in your browser. Two optional AI tools send what you give them to our AI provider, Anthropic, so it can be processed: a recipe you paste or link, and a meal photo you ask us to estimate (with the dish name and portion you type, and a menu photo if you add one). These tools do not save what you send on our servers. Nothing else leaves your device unless you turn on sync. If you turn on sync, we store your email address, used to send you sign-in links, and your app state as a single record: the meal plans you chose, dishes you marked eaten, water glasses, grocery checklists, spice pantry levels, store preference, language, and program week. We do not ask for or store health conditions, diagnoses, weight, lab results, or medical history. Please do not enter medical information into the app; it is not built to hold it.

Text messages: if you agree to receive texts from us, we collect your mobile phone number, the messages we exchange, and a record of when and how you agreed.

3. How we use it

To run and sync the tool, send sign-in links, respond to your messages, prevent spam and abuse, and understand aggregate site usage. We do not use your data for advertising, we do not profile you, and we do not sell it.

4. Service providers

A small set of providers process data only to run the service for us, not for their own purposes: Supabase (sign-in and encrypted storage, United States), Resend (delivers sign-in links and form emails), Cloudflare (hosting and bot protection), Anthropic (AI processing for the recipe reader and meal photo estimates, United States), Plausible (aggregate analytics, main site only), Dialpad (sends and receives our text messages and calls). We may also disclose information if the law requires it or to protect rights and safety. All of the above excludes text messaging originator opt-in data and consent: this information will not be shared with any third parties.

5. A note about your health information

The Meal Plan app is a consumer wellness tool. It is not covered by HIPAA, and the information you enter is not protected health information. If you are in a supervised weight-loss program, your medical records are held by your clinic, not by Kaya, and are governed by your clinic's own privacy practices.

6. Your choices

You can use the app fully without an account; nothing syncs until you sign in. You can export your data as a JSON file at any time from Settings. You can erase your synced data at any time: erasure removes it from use immediately, and it is permanently deleted after a 30 day recovery window. You can unsubscribe from Rooted using the link in any issue. We offer these controls to everyone, wherever you live. Email us to exercise anything you cannot do in the app.

7. Retention

Synced data is kept while you use the app and until you erase it, then permanently deleted after the 30 day recovery window. Local data lives on your device until you or your browser clear it. Messages and form submissions are kept only as long as needed to respond and keep our records. Sign-in emails are transactional.

8. Security

Traffic is encrypted in transit. Synced data is encrypted at rest and access is keyed to your account. Sign-in is passwordless, so there is no password to steal. We collect as little as possible. No online service can be guaranteed perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities as required by applicable law.

9. Children

Our services are for adults. They are not directed to children under 13, and we do not knowingly collect data from children. If we learn that we have, we will delete it.

10. Changes

We will post updates here with a new date at the top. If a change is material and you have an account, we will let you know.

11. Text messages and your mobile number

We use your mobile number only to send the text messages you agreed to receive and to reply to you. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell your mobile number or your text consent. Our messaging provider processes your number only to deliver messages for us. You can opt out at any time by replying STOP; reply HELP for help. Message and data rates may apply. If you opt out, we keep a record of that so we do not text you again. Full program details are in our Terms of Service, section 12.

12. Contact

shankar@mykayawellness.com