Privacy Policy

1. Who we are

Fied Labs Inc. operates the Kidney Daily Android app and its supporting website at kidneydaily.com. This policy covers the app, optional connected services, support, and visits to this app website. It does not describe a public web-based health-record system.

Contact support@kidneydaily.com for privacy questions or requests. Our published mailing address is Fied Labs Inc., Unit 311, 5363 201 St, Langley, BC V3A 0J6, Canada.

Features vary by app version, region, and availability. Descriptions of optional accounts, Plus, AI analysis, scanning, or backup apply when those features are offered in the version you use. An iOS version is in development.

2. Your records on your device

Food and fluid logs, nutrient targets, blood pressure, pulse, weight, lab reports and checked lab results, medication records, symptoms, reminders, appointments, care contacts, notes, questions, record PDFs, recipes, and preferences are stored locally on your device. Core local tracking works without signing in.

Signing in does not upload your health diary, synchronize it between devices, or create a cloud backup. Information leaves your device through the particular connected features, file destinations, or sharing actions described in this policy.

The Android app is configured to exclude its private data from Android cloud backup and device transfer. Do not rely on an account or operating-system backup to recover your records. Where local backup and restore are available, you choose a .kdbak file and its destination. Restoring a backup replaces the portable diary, targets, and preferences after validation and confirmation; it does not restore account sessions, purchases, device permissions, or AI consent.

Delete individual records in the app, clear its storage in Android settings, or uninstall it to remove local app data. Exported files and copies held by other apps must be deleted separately.

3. Optional accounts

If you choose email or Google sign-in, Supabase processes account and authentication information, including your user identifier, email address, sign-in provider, session information, and timestamps. Google also processes information for Google sign-in. Network requests include technical information such as IP address, device or browser information, time, and status.

We maintain an account profile and records needed to authorize connected features. After sign-in, session restoration, token refresh, and access checks may contact these services automatically. Signing out ends local account access; it does not delete your account or your diary.

4. Membership and billing

Where Kidney Daily Plus is available, Google Play processes purchases and subscriptions. RevenueCat processes app-user identifiers, purchase tokens and history, products, entitlement and subscription status, and associated device and service metadata to offer, verify, restore, and support membership. Its SDK can initialize and check access with an anonymous identifier before sign-in or purchase. Membership may be associated with your account after sign-in.

Our Supabase service receives membership information used to authorize connected features. Kidney Daily does not receive your payment-card number. The store displays prices, billing periods, offers, and trial eligibility before purchase.

Deleting an account or uninstalling the app does not cancel a subscription. Manage or cancel subscriptions separately in Google Play.

5. Optional AI food analysis

Text and photo analysis are separate choices. The app shows a disclosure and asks for consent for each mode before analysis. You can turn either mode off in Settings, under AI features, and continue to add food manually. Access and membership checks may contact our service before the AI disclosure; those checks do not submit your meal content.

When you submit text, the app sends your typed or dictated description, meal category, food region, language and related context, follow-up answers, request identifiers, and requested nutrient fields to our Supabase service with account authorization. When you submit a photo, it also sends a resized photo and any description you add. Embedded photo metadata is removed, but details visible in the picture remain visible. The app does not attach the rest of your diary or photo library.

Supabase checks account access and usage limits, then sends food details directly to Google Gemini in our current Android service. Our software supports OpenRouter, but the current production configuration does not use it. Gemini processes the submitted content to generate foods, portions, nutrient estimates, and clarification questions. We will update the disclosure and obtain appropriate renewed consent before a material change in data sharing.

AI results are estimates and can be wrong or incomplete. Review foods, portions, and nutrients before saving. Missing nutrient values do not mean zero. Editing a draft locally does not, by itself, upload a saved food correction.

We keep account, consent, access, usage, and operational records such as request identifiers, timings, counts, status, and error codes. Raw inputs and unsaved AI responses are not saved in an app-owned draft database. Our Gemini API project has paid billing, and optional GenerateContent request storage is turned off. Under Google's paid-service terms, prompts and responses are not used to improve its products. This does not mean Google keeps no data: its current Gemini API abuse-monitoring policy specifies 55 days of retention for prompts, context and responses, and permits authorized review of flagged content. This is separate from optional request storage. Discarding a draft or withdrawing consent does not erase processing that has already happened. Other account, billing or legally required records can have different retention periods.

6. Scanning, speech, and permissions

Where barcode scanning is available, Google’s bundled ML Kit recognizes barcodes on your device. The SDK may send diagnostic and usage information to Google, such as app and device information, per-install identifiers, performance, configuration, events, and error codes. Barcode lookup and connected food analysis are separate actions.

Where supported, speech entry uses on-device recognition. You can review the resulting text before choosing to send it for AI analysis. Camera, photo, microphone, and notification permissions are controlled by Android and are separate from consent to AI processing. You can manage these permissions in Android settings.

Temporary images or PDFs can remain on the device while work is active or recoverable. Cleanup depends on the app running successfully. Original photos in your gallery are unchanged.

6a. Lab reports and optional Gemini reading

Where Lab results is available, Kidney Daily reads reports on your phone by default and stores the reports and checked results locally. You can type values or import a PDF, scan or photo. On supported phones, you can separately allow read-only access to laboratory records already stored in Health Connect by another app. You review those results before saving them locally. This import does not change or delete Health Connect records and does not send them to Gemini. You can revoke the permission in Android settings.

Gemini reading for lab reports is planned and is not currently enabled. When it becomes available, it will be a separate, optional choice from food analysis. Only after your agreement and a send action for that report will Kidney Daily send up to ten page pictures through Supabase to Google Gemini. It will not send the original PDF file. Everything visible on those pages, including a name, date of birth or other personal details, can reach Google. You will check the returned values before saving them.

The planned lab reader does not save report pages or extracted results on Kidney Daily's server or include their contents in application logs. It keeps a consent record and an account-linked monthly usage count. Google's paid-service and abuse-monitoring practices described above also apply to Gemini lab reading, including temporary retention of submitted content and responses. We do not promise that nothing is kept by Google. Before enabling this feature, we will update its availability notice and show the applicable disclosure in the app.

You can decline Gemini and continue using on-phone reading or manual entry. When available, the separate Read lab reports with Gemini setting will stop future use when turned off; it will not undo earlier transfers. Reports and results you choose to export, back up or share may also be kept by your chosen destination or recipient.

7. Files and information you share

The app can create a Doctor Export PDF, hold record PDFs, and export local backup files. Creating a file does not send it. If you open or share it in another app, or save it to a document provider, that recipient can access the file. Your chosen destination may be a cloud service.

Exported PDFs and .kdbak backup files are not encrypted by Kidney Daily. Protect them and share only what you intend. Account deletion, uninstalling, or deleting an original record does not remove files you exported or copies another person or service holds.

8. This website and support

Our website host, Railway, and infrastructure providers process technical information needed to deliver and secure this website. This can include network address, requested page, browser or device information, time, response status, and errors. Fonts and website images are served with the site. This landing page does not offer health-data forms, public accounts, newsletter signup, advertising pixels, or behavioral analytics.

If you follow a Google Play link or another external link, the destination handles your information under its own policies. If you email support, we and our email provider process your address, message, attachments, and correspondence to respond and resolve your request.

The app’s feedback action may prepare an editable email with app version, device, Android version, and theme details. Copying diagnostics places technical information on your clipboard. These actions do not automatically attach your diary. Do not include health records, passwords, sign-in codes, or payment-card details in ordinary support email.

9. Retention and deletion

Local records remain until you remove them, replace them during a confirmed restore, clear app storage, or uninstall the app. Account and access records are kept while needed to provide the account and connected services. Consent, usage, security, billing, and support records may be retained for service operation, fraud prevention, legal obligations, or resolving disputes. Retention depends on the category and provider; this policy does not promise that all records share a fixed deadline.

Request account deletion at kidneydaily.com/account-deletion or email support@kidneydaily.com from the address associated with your account. We verify ownership before processing the request. Our published target is to process verified requests within 30 days and explain any necessary extension or limited retention.

Deletion covers the Supabase authentication account and user-linked profile, membership mirror, AI consent, usage or quota, grant or device, and reviewed correction records controlled by Kidney Daily. A shared nutrition cache, where used, contains normalized food and nutrient information without an account identifier and is not deleted with an individual account. A separate correction capability can retain a reviewed correction explicitly submitted to the service; ordinary local draft editing is not such a submission.

Account deletion does not remove your local diary, cancel Google Play billing, or delete exported files. Google Play, RevenueCat, Supabase, AI providers, hosting, and email providers may retain some records for their legal, billing, security, or service purposes. Contact us for requests involving provider-held data; deleting the Supabase account alone does not erase every provider’s records.

10. Providers, security, and international processing

We use providers for hosting, authentication, AI analysis, billing, membership, and support. Connected requests use encrypted network connections. This is not end-to-end encryption against a service that needs to process your request. Access controls help protect server records, but no storage or network service can guarantee absolute security.

Information may be processed outside your country, where privacy laws may differ. We may disclose information as required by law, to protect rights and safety, investigate abuse or security incidents, or complete a corporate transaction with applicable safeguards. We do not sell personal or health information.

11. Your choices and rights

You can track locally without signing in, decline or turn off each available AI mode, manage Android permissions, select what you share, delete local records, and request account deletion. Turning off a connected feature stops future use of that mode through the app; it does not undo earlier transfers.

Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of personal information, withdraw consent, object to or restrict certain processing, and raise a complaint with a privacy authority. Contact support@kidneydaily.com to make a request. We may need limited information to verify your identity.

12. Age, health, and policy changes

Kidney Daily is intended for adults aged 18 or older and adult caregivers. It is not directed to children or teens. Only enter another person’s information when you are authorized to do so.

Kidney Daily supports personal tracking and organization. It does not provide medical advice, diagnosis, treatment, or emergency care. Contact your care team for health decisions and local emergency services for an emergency.

We will update this page and its date when practices change and provide additional notice or consent where required. Privacy questions can be sent to support@kidneydaily.com.