Privacy and Security

Kaizora holds some of the most personal data there is. This page says plainly how it’s kept, and where the limits are.

Who Can Read Your Data

Only You: One account is one person, and data is never shared between accounts. Row-level security in the database limits every table to its owner, so a request for anyone else’s rows is refused, whatever the app asks for.
Not End-to-End Encrypted: Your data is encrypted on its way to and from the app and stored encrypted, but not end to end: the database computes your charts, scores, and ranges, so the people who run Kaizora could reach your data with administrative access. It’s looked at only to run the service, to fix a problem you’ve asked about, or when the law requires it.
Two-Factor Authentication: Turn on codes from an authenticator app in Settings. Once they’re on, every table of yours needs a session that entered a code, so a password alone reaches nothing. Add the app on several devices, each named: there are no recovery codes, so losing every one means contacting support.; See the guide: Turn On Two-Factor Authentication
Connection Tokens Out of Reach: When you connect a service (Withings, coming first), its access tokens are kept where the app can’t read them, used only by the functions that sync your data. Disconnecting deletes them.

Files Are Read on Your Device: An import is read in your browser, even a multi-gigabyte Apple Health export, and only the rows it holds are saved. The file and its name are never uploaded or kept.; See the guide: Import a File
Photos Never Leave It: Locations from Photos reads each photo’s details on your device and sends only its time, its position, and its camera’s make and model.; See the guide: Importing Locations From Photos
Location Only When You Choose: Tracking is off until you turn it on for a device, and records only while the app is open. A day’s stays and trips are worked out on your device, with no address lookup. Searching for a place sends only what you type, and your device’s rough position to rank nearby results, to Photon, an OpenStreetMap search.; See the guide: Track Your Location on This Device
The AI Overview Only With Your Consent: Nothing is sent to Anthropic until you agree. Then, at most once every 12 hours, Kaizora sends a numbers-only summary: never your name, email, notes, places, or locations, and never reproductive health metrics such as your cycle and period lengths. Anthropic doesn’t train its models on it, and you can withdraw consent in Settings.; See the guide: Get an AI Overview of Your Data

No Ads, No Analytics in the App: The app has no ads, trackers, or analytics, and your data is never sold, rented, or shared for advertising. Notifications shown outside the app say only what kind of thing happened, never which metric or value.
Cookieless Analytics on This Site: This website counts page views with Cloudflare Web Analytics, without cookies or tracking you across sites, so there’s no consent banner.
No Health Data to Payments: Once Plus is on sale, payments go through Stripe, which receives your email and your payment details, never anything you log or import.

Export Everything: Download everything you logged and imported from Settings, free, at any time: a ZIP with a CSV file per table. Any table also exports as CSV or JSON.; See the guide: Export Your Data
Delete Anything: Delete anything you logged yourself, everything one source brought in, or your whole account from Settings, which removes every row.; See the guide: Delete Your Account