Privacy Policy
Last updated: July 14, 2026
At Ketorai we want you to know exactly what data we process, why, and what rights you have over it. This policy covers the ketorai.com website (all of its language versions) and the Ketorai mobile app for Android and iOS.
1. Data controller
The controller of your personal data is Ketorai, operator of ketorai.com and of the Ketorai app. For anything related to your data you can reach us at [email protected].
2. Data we process on the website
- Waitlist email. If you join the waitlist or request a guide, we store your email address, the site language and the page you subscribed from.
- Optional account. If you create an account with Google (OAuth), we receive your name, email address and profile picture from Google. We never see or store your Google password.
- Menu scanner photos. If you upload a photo of a menu, the image is processed by artificial intelligence to identify the dishes and is stored together with the analysis result.
- Cookies. We use strictly necessary technical cookies (session, form protection) and Google Analytics analytics cookies (see section 6). We use no advertising pixels.
3. Data we process in the app
- Account. Your email and a password (stored encrypted), or sign-in with Google or Apple: in that case we receive your name, email address and profile picture.
- Profile and health data. To compute your plan and support you, we process the data you log: sex, age, height, weight and target weight, activity level, goal and chosen diet; your meals and their macros; water; weight history; fasts; ketone readings; the medications and supplements you declare with their schedules; and, if you use the Custom plan, your nutritionist's plan (as text or as a file you upload). This is sensitive data: we process it only with your explicit consent and only to provide the service.
- Photos. If you scan a dish, a product or a menu with the camera (or upload an image), the photo is processed by AI to give you the verdict and is stored together with the result. Nutritionist-plan files (Excel, PDF, photo) are processed to extract the text and the file itself is not kept: only the text you review and save.
- Voice. If you dictate a meal, the audio is processed by your own device's speech-recognition service; only the transcribed text reaches our servers.
- Notifications. If you enable reminders, we store your device's push token (Firebase Cloud Messaging), the platform and your reminder preferences.
- Subscription. If you subscribe to Ketorai Pro, the payment is handled by Google Play or the App Store: we never see your card. We use RevenueCat to validate the subscription via a purchase identifier.
4. Artificial intelligence
Photos, plan files and coach questions are processed with Google AI models (Gemini), which acts as a data processor and processes them solely to generate the result we show you. Ketorai's AI provides keto/low-carb nutrition guidance and does not replace the advice of a healthcare professional.
5. Why we use your data and on what legal basis
- To provide the service you request (Art. 6(1)(b) GDPR): your account, meal logging, verdicts, reminders.
- Your consent (Art. 6(1)(a) GDPR; for health data, explicit consent under Art. 9(2)(a)): the waitlist, the health data you log, photos and your nutritionist's plan.
- Legitimate interest (Art. 6(1)(f) GDPR): security, abuse prevention and service stability.
We do not sell your data and we do not use it for advertising. You can withdraw your consent at any time.
6. Analytics and stability
On the website we use Google Analytics 4 (via Google Tag Manager) to measure visits in aggregate. In the app we use Amplitude (usage events tied to a pseudonymous identifier, to understand what works) and Sentry (crash reports: device model, OS and app version, and the error trace). We use none of these tools for advertising.
7. Who we share your data with
Never for commercial purposes. To operate the service we rely on providers that process data only on our instructions: hosting and storage (OVH), email delivery, AI (Google), push notifications (Firebase), analytics (Google Analytics, Amplitude), stability (Sentry) and subscriptions (RevenueCat). Transfers outside the EEA are covered by GDPR safeguards (standard contractual clauses).
8. Retention and deleting your account
We keep your waitlist email until you unsubscribe (every email includes a one-click unsubscribe link) and your account data for as long as the account exists. You can delete your account from inside the app (Account → Delete account): your profile, meals, weight, medications, fasts, ketones, plans and photos are erased from our servers, with no way back. You can also request it by writing to [email protected].
9. Your rights
Under the GDPR you have the right to access your data, to rectify it, to have it erased, to port it to another provider, to restrict or object to its processing, and to withdraw your consent at any time. To exercise them, write to [email protected] and we will respond as soon as possible. You also have the right to lodge a complaint with your local data protection authority.
10. Changes to this policy
If we change this policy, we will publish the new version on this page and update the date above. If a change materially affects data you have already given us, we will let you know by email or in the app.
11. Contact
Questions about this policy or about your data? Write to us at [email protected].