Privacy Policy

1. Who we are

Kimo is operated by Prodd Labs LLC, a company registered in Sharjah Media City (SHAMS) Free Zone, Sharjah, United Arab Emirates ("Kimo", "we", "us"). Kimo is available at joinkimo.com, app.joinkimo.com and through our chat accounts on Telegram and WhatsApp.

We decide how your personal data is used, so we are its "controller" under the laws that apply to you, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for people in the UK and the European Union, the UK GDPR and the EU GDPR. You can reach us at contact@joinkimo.com.

2. What we collect

When you create an account

• Your email address, and your name if you give it.
• If you sign in with Google: your name, email address and profile picture from your Google account. We use them only to sign you in and show your name. We don't access anything else in your Google account.
• If you use Kimo in a chat app: your Telegram user ID or WhatsApp phone number, so your chats and your account stay linked.

When you set up your coaching

• Your answers to the setup questions: name, age, sex, height, current and goal weight, activity level, goal and timeline.
• The targets we work out from them (calories, protein, carbs, fat).

When you use Kimo

• What you log: meals, workouts, weight, sleep, water and notes, with the date and time.
• Your messages to Kimo and Kimo's replies.
• Voice notes: we turn them into text. We keep the text, not the audio.
• Photos: we analyse them to estimate what's in them. In the web and app chat we keep a small copy of the photo so you can see it in the conversation. In Telegram and WhatsApp, the photo stays in that app and we keep a reference to it.
• Your reminder settings (for example, the time you like to be checked in on).

When you pay

• Your plan, payment status and subscription dates. Payments are handled by Stripe. We never see or store your full card number.

Automatically

• Sign-in events and the devices and browsers you use, to keep your account secure.
• How you use the product (for example, which features you open and whether a log succeeded), to fix problems and improve Kimo.
• Technical logs from our servers, kept for a short time to find and fix errors.

3. Health information

Some of what you share is health information: your body measurements, weight, what you eat, your workouts, your sleep and anything you tell Kimo about your health. The law treats this as a special category of data. We only process it because you choose to share it with Kimo to get coaching, and we rely on your explicit consent, which you give when you start using Kimo. You can withdraw it at any time by deleting your account. We don't use your health information for advertising, and we never sell it.

4. How we use your data, and why

We don't make decisions about you that have legal or similarly significant effects based only on automated processing. Kimo's AI suggestions are estimates you can always correct.

5. AI processing

To understand your messages, photos and voice notes and write replies, we send the relevant content to AI providers: Anthropic (Claude), OpenAI and Google (Gemini). We use their business APIs, under terms that don't let them use your content to train their models. They process it to answer our request and may keep it for a short period for safety and abuse monitoring, as their terms describe.

6. Who we share it with

We share data only with service providers who help us run Kimo, under contracts that require them to protect it and use it only for us:

We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of our business (in which case this policy keeps applying). Telegram and WhatsApp also have their own privacy policies for the messages you send through them.

7. International transfers

We are based in the United Arab Emirates, our database is in London, and some providers process data in other countries, such as the United States. When data moves between countries, we rely on safeguards the law recognises, such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, and on the transfer rules of the UAE Personal Data Protection Law.

8. How long we keep it

• Your account, logs and chat history: for as long as you have an account.
• When you delete your account, we delete your data from our database straight away. Copies in our backups are removed when those backups expire, within 30 days.
• Payment records: as long as tax and accounting law requires (usually 6 years).
• Server logs: a few weeks.

9. Your rights

You can ask us to:

• give you a copy of your data (access and portability);
• correct it;
• delete it;
• restrict or object to how we use it;
• stop processing your health information (withdraw consent).

Most of this you can do yourself: edit your profile in the app, ask Kimo to fix or delete a log, and delete your account in Settings. For anything else, email contact@joinkimo.com and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the UAE Data Office, to the Information Commissioner's Office (ico.org.uk) if you're in the UK, or to your local data protection authority if you're in the EU.

10. Security

Data is encrypted in transit and at rest with our providers. Access is limited to the people who need it to run Kimo, and sign-in uses one-time codes or Google. No system is perfectly secure, so if something goes wrong we'll tell you and the authorities as the law requires.

11. Age

Kimo is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has given us data, email us and we'll delete it.

12. Changes

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you in the app or by email before it applies.

13. Contact

Email contact@joinkimo.com with any question about your data or this policy.