Privacy Policy

The short version: Kaya makes free wellness tools. Your meal planning data stays on your device unless you turn on sync. We do not sell your data, we run no ads, and we do not track you across the web. You can export or delete your data at any time.

1. Who we are and what this covers

This policy is published by Kaya Wellness, LLC ("Kaya", "we"), a wellness education company in Central Texas. You can reach us at shankar@mykayawellness.com. It covers mykayawellness.com and the Meal Plan app at mykayawellness.com/mealplan. Kaya is not a medical provider. Medical care in the programs we write about is provided by separate, independent physician-owned practices, which keep their own medical records under their own privacy notices. This policy does not cover your clinic's medical records.

2. What we collect

On the main site: your name and email when you contact us, subscribe to Rooted, or send a partner inquiry. Cloudflare Turnstile runs on our forms to block bots. We use Plausible for analytics on the main site: it is cookieless, collects aggregate statistics only, and does not identify you or follow you across the web. Plausible does not run inside the Meal Plan app.

In the Meal Plan app: by default, everything is stored locally in your browser and never leaves your device. If you turn on sync, we store your email address, used to send you sign-in links, and your app state as a single record: the meal plans you chose, dishes you marked eaten, water glasses, grocery checklists, spice pantry levels, store preference, language, and program week. We do not ask for or store health conditions, diagnoses, weight, lab results, or medical history. Please do not enter medical information into the app; it is not built to hold it.

3. How we use it

To run and sync the tool, send sign-in links, respond to your messages, prevent spam and abuse, and understand aggregate site usage. We do not use your data for advertising, we do not profile you, and we do not sell it.

4. Service providers

A small set of providers process data only to run the service for us, not for their own purposes: Supabase (sign-in and encrypted storage, United States), Resend (delivers sign-in links and form emails), Cloudflare (hosting and bot protection), Plausible (aggregate analytics, main site only). We may also disclose information if the law requires it or to protect rights and safety.

5. A note about your health information

The Meal Plan app is a consumer wellness tool. It is not covered by HIPAA, and the information you enter is not protected health information. If you are in a supervised weight-loss program, your medical records are held by your clinic, not by Kaya, and are governed by your clinic's own privacy practices.

6. Your choices

You can use the app fully without an account; nothing syncs until you sign in. You can export your data as a JSON file at any time from Settings. You can erase your synced data at any time: erasure removes it from use immediately, and it is permanently deleted after a 30 day recovery window. You can unsubscribe from Rooted using the link in any issue. We offer these controls to everyone, wherever you live. Email us to exercise anything you cannot do in the app.

7. Retention

Synced data is kept while you use the app and until you erase it, then permanently deleted after the 30 day recovery window. Local data lives on your device until you or your browser clear it. Messages and form submissions are kept only as long as needed to respond and keep our records. Sign-in emails are transactional.

8. Security

Traffic is encrypted in transit. Synced data is encrypted at rest and access is keyed to your account. Sign-in is passwordless, so there is no password to steal. We collect as little as possible. No online service can be guaranteed perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities as required by applicable law.

9. Children

Our services are for adults. They are not directed to children under 13, and we do not knowingly collect data from children. If we learn that we have, we will delete it.

10. Changes

We will post updates here with a new date at the top. If a change is material and you have an account, we will let you know.

11. Contact

shankar@mykayawellness.com