Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how Magisk Digital ApS ("Kairi," "we," "us," or "our") collects, uses, shares, and protects information when you use the Kairi mobile app and this website (together, the "Service"). Kairi is provided by Magisk Digital ApS, a company registered in Denmark (CVR no. 46291611), Bjarkesvej 11, 1. th., 2000 Frederiksberg, Denmark, which acts as the data controller for the personal data described below. If anything here is unclear, reach us through the Support page or at [email protected].

Information we collect

Account information — email address, password (stored in hashed form; we never store or see it in plain text), display name, and, if you sign in with Google, your Google account email and display name.
Onboarding & health profile information you provide directly, such as date of birth, gender, smoking status, height and weight, the health focus you select (blood pressure, cholesterol, and/or blood sugar), current medications, and baseline or target values for blood pressure and cholesterol.
Vitals you log — blood pressure, cholesterol (LDL/HDL/triglycerides), blood glucose, and HbA1c readings, and any notes you attach to them.
Meal, recipe, and product data — food and product searches, barcode scans, meal photos you submit for AI analysis, saved recipes, and supplement entries.
Reminder settings, if you choose to enable them, used only to schedule local notifications on your device.
Purchase and subscription information — your subscription/entitlement status, managed through our subscription provider, RevenueCat, to determine access to paid features. We do not receive or store your payment card details; billing is handled entirely by the Apple App Store or Google Play.
Diagnostic information — crash reports and related technical data, collected automatically via Firebase Crashlytics if the app crashes, to help us find and fix bugs.
Usage analytics — which screens you open and which features you use, collected via Google Analytics for Firebase, so we can see which parts of the app are useful and which are not. This never includes the health information you enter: we send screen names and feature events only, never your vitals, medications, meals, or profile values. It is used for product measurement only — we have switched off advertising personalisation, advertising identifier collection, and ad-related signals for this data, so it is not used to target ads to you. You can turn usage analytics off at any time in the app under Profile › Privacy & Data, and it stays off on that device.
Device and advertising identifiers — the app displays ads using Google AdMob, which may collect your device's advertising identifier and related technical data to serve and measure ads, under Google's own privacy practices.
iOS launch waitlist — if you ask us on this website to let you know when Kairi reaches the App Store, we store the email address you enter and which language you were reading the site in, so that we send you the right version of that one message. We use it for that announcement and for nothing else, and we delete the list once the announcement has gone out.

Health information you enter into Kairi is treated as a special category of data under Article 9 of the GDPR. We only collect what the features you choose to use actually need, and features like vitals tracking, health goals, and medication reminders are optional.

Legal basis for processing (EU/EEA users)

We process health and vitals data based on your explicit consent (GDPR Art. 9(2)(a)), which you can withdraw at any time by deleting the related entries or your account.
We process account, subscription, and diagnostic data to perform our contract with you (Art. 6(1)(b)) — i.e., to provide the Service you signed up for.
We process limited technical data based on our legitimate interest in keeping the Service secure and working correctly (Art. 6(1)(f)).
We process the email address you give us for the iOS launch waitlist on the basis of your consent (Art. 6(1)(a)), which you give by submitting it and can withdraw at any time by emailing [email protected].

How we use information

We use the information above to operate the app, calculate your personalized fit scores and Smart Swap suggestions, generate AI recipes and food-photo analysis, schedule the reminders you set, process your subscription, respond to support requests, fix bugs, and keep the Service secure. We do not use your health information for advertising, and we do not sell personal information — including health information — to anyone.

How we share information

We share information only as follows:

With service providers who process data on our behalf, strictly to help us run the Service: our hosting infrastructure (located in the EU, in Germany), Cloudflare (which serves this website and stores the iOS launch waitlist), Google Firebase/Crashlytics (crash and diagnostic data), Google Analytics for Firebase (app usage analytics, unless you have turned it off), RevenueCat (subscription status), and Google AdMob (ad serving, on the free tier of the app).
With Open Food Facts and TheMealDB, third-party food and nutrition databases we query using your search terms to return product and recipe results — we do not send them your account, health, or profile information.
With Apple or Google, as needed to process subscription payments through their platforms.
Where required by law, to comply with legal process, or to protect the rights, safety, or property of Kairi, our users, or others.

We do not share your health information with advertisers, and we do not sell personal data.

International data transfers

Our own servers are located in the EU (Germany). Some of our service providers (Google/Firebase, RevenueCat, Google AdMob, Cloudflare) are based in the United States and may process data there. Where that happens, we rely on their compliance with the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses to keep your data protected to an equivalent standard.

Data retention

We retain your information for as long as your account is active. If you delete your account — in the app via Profile → Settings → Delete Account, or by emailing [email protected] — we delete your account and associated data as described on our Account Deletion page. We do not currently keep backup copies of deleted data, so deletion is immediate and cannot be undone. We may retain limited information where required by law, such as billing records our payment processors are legally obligated to keep.

The iOS launch waitlist is held separately from any account. We keep an address on it only until the launch announcement has been sent, or until you ask us to remove it — whichever comes first.

Your rights

If you're in the EU/EEA or UK, you have the right to access the personal data we hold about you, correct inaccurate data, request erasure, restrict or object to certain processing, receive your data in a portable format, and withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You can also lodge a complaint with your local data protection authority — in Denmark, the Danish Data Protection Agency (Datatilsynet). You can exercise most of these rights directly in the app (Profile → Settings) or by contacting [email protected].

Children's privacy

Kairi is not directed at, and may not be used by, anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, contact us so we can delete it.

Security

We use reasonable technical and organizational measures — including encrypting data in transit and hashing passwords — to protect your information. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do, and significant changes will be communicated within the app where appropriate.

Contact us

Magisk Digital ApS (CVR 46291611), Bjarkesvej 11, 1. th., 2000 Frederiksberg, Denmark
Email: [email protected] — see our Support page.