Privacy Policy
Last updated: 7 July 2026
Health and account data
Kidney Lens is local-first. Your food, fluid, medication, and target logs are stored on your device. Server-side records may include your Sign in with Apple account identifier, refresh tokens, subscription entitlement status, consent history, and small food-scan personalization records (below).
AI providers and consent
The photo food scan is optional and runs only after per-provider consent. Your meal photo is sent to OpenAI to recognize the food and estimate rough portions; only the resulting text description — never the photo — is sent to DeepSeek to refine the portion size. Nutrient values themselves come from public government nutrient data, not from either provider. Consent is per provider and per purpose; consenting to one does not authorize the other, and you can withdraw consent at any time, after which future requests to that provider are blocked.
Food scan personalization
Your meal photo is used only in memory for the scan and is never stored on our servers. To make future scans of the same food more accurate, we keep a small record — a normalized dish name and the portion size you confirm or correct — tied to your account. These records never contain the photo, your notes, or any nutrient value, and they are removed when you delete your account.
Payments
Subscriptions are processed by Apple StoreKit. The server verifies signed StoreKit transactions and App Store Server Notifications to keep entitlement status current. We do not receive payment card details.
Export and deletion
You can export your app data on-device. You can delete your account and server-held data from the app; deletion revokes refresh tokens and removes server-side account rows, consent records, entitlement rows, scan counters, scan stubs, and portion-correction records tied to your account.
Contact
Email nora@halehearth.com for privacy requests or support.