Last updated: October 6, 2026 · Kiki is made by Pause Botanica Inc.
Kiki helps you notice which foods line up with bloating, with a cartoon cat along for the ride. This page says plainly what data the app touches, where it goes, and what never leaves your phone.
Your food scans, scores, check-ins, streaks, notes, photos you attach, and everything your pet wears live in the app's local database on your device. Kiki does not require an account, and we do not run a server that stores your food or symptom history. Relevant information can be processed by the AI services below when you give consent; local storage does not mean it is never transmitted.
AI scans, chat, and explanations — only with your consent. Before an AI request, Kiki identifies the data and recipients in the app and asks for your permission. The in-app "share data with AI?" screen names the data and services. Sharing is off unless you explicitly agree and choose "allow AI data sharing"; continuing without AI does not grant permission. Requests pass through Kiki's server, hosted by Vercel, to OpenRouter, which routes them to Anthropic (Claude) or Google (Gemini), depending on the feature. Routing is restricted to those AI providers, without fallback to unnamed providers.
The request may include the food, menu, or fridge photos and descriptions you submit, chat messages and recent conversation, relevant meal names and scores, symptom check-in responses, food patterns, sensitivities, and food preferences. Chat may also include your chosen name, pet, and streak. Personal or health information you include in a photo or message is part of the request. We use this information to identify food, compare dishes, and generate personalized replies and meal explanations, not to diagnose a condition.
Kiki does not sell this information or use it to train models, and our AI proxy
does not log request bodies. We restrict routing to providers allowed by
OpenRouter's data_collection: deny policy. This is not a promise that
all service or security logs are deleted immediately. Providers' retention and
security practices are described in their policies:
Vercel,
OpenRouter,
Anthropic, and
Google.
We require every third party processing this personal information to provide
the same or equal protection as described in this policy, use it for the requested service, and apply
appropriate confidentiality and security safeguards.
Declining or withdrawing consent blocks new AI requests. You can withdraw it under Settings → data & ai → AI data sharing & consent → turn off AI sharing. Withdrawal does not recall requests already processed. The built-in food table, local history, and check-ins remain available. Photo recognition and menu comparison require AI; the offline food table cannot identify an arbitrary photo.
Service security. Our hosting and routing services receive network information such as your IP address. Kiki's proxy also uses a random installation identifier, app version, and request counts to limit abuse and operate the service. Rate-limit counters are processed by Upstash. These are separate from your meal database.
Barcodes. Scanning a barcode sends the product number (just the number) to Open Food Facts, a public food database, to look up ingredients.
Usage analytics. The app sends usage events (screens viewed, features used) and session replays to PostHog, our analytics provider, tied to a random per-install identifier — not your name, email, or contacts. Replays mask what you type and your photos. We use this to see which parts of the app work and which confuse people. No advertising identifiers, no cross-app tracking, and we never sell data.
Purchases. Subscriptions are processed entirely by Apple. Apple tells our server about subscription events (started, renewed, expired) tied to a random token — never your payment details, which we never see.
Kiki is a wellness app, not a medical device, and it does not diagnose, treat, or cure anything. What you log about how your body feels stays on your device unless you explicitly use an AI feature on it, as described above.
Settings → delete account removes your scans, check-ins, streaks, pet items, and profile from the device, and it cannot be undone. Deleting the app removes the local database. Analytics events already sent are retained by PostHog per its retention policy under our random install identifier.
Kiki is not directed at children under 13, and we do not knowingly collect their data.
If this policy changes, the date above changes with it. Questions: support@heykiki.app.