Privacy Policy

Kibo: Meal Planner (“Kibo”, the “app”) is a household meal-planning and nutrition app for iOS. Kibo is provided by Lume Agency, the data controller responsible for the personal information described in this policy.

You can reach us about privacy at [email protected]. This policy covers the Kibo iOS app and the backend service it connects to (kibo-api.lumeagency.io).

Kibo is organised around a household (a “family”) made up of members. Most information you provide is data you enter to plan meals and set nutrition targets for the people in your household. We collect the following:

You control how much you enter. Health and profile fields are optional — you can use Kibo with minimal information, though some recommendations depend on the data you provide.

Connecting Apple Health is optional and always under your control through the iOS permission prompts. When you grant access, Kibo may:

• Read your date of birth, biological sex, height, body weight, and energy burned (active and basal) to fill in your profile and tailor your calorie and macro targets, so you don't have to enter them by hand.
• Write the meals you log (dietary energy, protein, carbohydrates and fat) and your in-app weigh-ins back to Apple Health, so your nutrition and body-weight history stay in one place.

We use data obtained through Apple HealthKit only to provide these health and fitness features to you. We do not use HealthKit data for advertising, marketing, or data-mining, and we never sell it or share it with third parties for those purposes, consistent with Apple's HealthKit requirements. Weight readings you sync are stored on our servers as part of your member's weight history; other Health values are used to populate your profile. Values read from Apple Health are never sent to an AI provider — see section 05. You can revoke Kibo's Health access at any time in the iOS Health app.

We use the information above to:

• provide the core app — planning meals, sizing recipes per person, computing nutrition, and generating shopping lists;
• calculate calorie and macro targets from the profile and health data you provide;
• parse recipes you paste or import into structured ingredients and nutrition (see AI import below);
• create and secure your account, authenticate you, and manage household invitations and roles;
• process and validate your Kibo Plus subscription and entitlements;
• send transactional messages such as email verification and household invitations;
• operate, secure, debug, and improve the service, and comply with legal obligations.

Kibo can turn a recipe you paste, a photo you take, a link you share, or an Instagram reel into a structured recipe, and fit it to the people who will eat it. Some of that work happens on your device and some of it happens at an AI provider.

On your device. If you choose Apple Intelligence in Settings → AI models, pasted recipes and ingredient lookups are worked out on your iPhone. Nothing about them reaches our servers or any third party.

At an AI provider. Every other model runs in the cloud. When you use one, our servers send that provider the text, photo, link content or spoken narration you asked Kibo to read, and a short summary of your household so the recipe can be sized and adapted to it. That summary contains, for each person, their daily calorie and macronutrient targets, their goals, and any diet or allergy recorded for them. It does not contain names — each person is described as “Person 1”, “Person 2”, and Kibo restores the real names before showing you the result. It does not contain dates of birth, biological sex, height or weight; those are used only on our own servers to calculate the targets. When an import only needs to respect an allergy, no calorie or macronutrient figures are sent at all.

We ask first. Kibo will not use a cloud AI model for your household until someone with admin rights in that household agrees, having been shown what is sent and who receives it. You can review that disclosure, and withdraw permission, at any time under Settings → AI and your data. Withdrawing stops the cloud features; on-device AI, the recipe catalog, your own recipes, planning, the shopping list and Apple Health continue to work. If we add a provider or change what is sent, Kibo asks again rather than relying on your earlier answer.

Which provider depends on the model you select: Anthropic PBC (Claude, United States), OpenAI, L.L.C. (ChatGPT, United States), or DeepSeek (People's Republic of China). Each processes the request to produce that one answer and returns it to us. Each provider's own terms govern what it does with data sent to its API; we do not control, and therefore do not promise, whether a given provider trains on API traffic. Please avoid pasting sensitive personal information into the recipe importer.

Instagram reels. If you import a reel, you provide a public reel link and our service reads that public post's caption. Where the caption does not contain the recipe, we also retrieve the post's media so its audio can be transcribed; the media is deleted as soon as the transcription finishes and we do not keep the video or any frame of it. The resulting text is then sent to the AI provider as described above. We only access content you explicitly ask us to import.

We keep a usage record of each AI call (the model used, token counts, an estimated cost, and success/failure) to meter quotas and operate the feature; this record does not store the recipe content itself.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share information only with service providers that help us run Kibo, and only as needed:

We may also disclose information if required by law, to enforce our terms, to protect the rights, safety, and security of our users or the public, or in connection with a merger, acquisition, or sale of assets (you would be notified of any such change).

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Contract — to provide the app and the features you request, including your account and subscription.
• Consent — for optional integrations such as Apple Health and camera access; you can withdraw consent at any time in iOS settings.
• Legitimate interests — to secure, maintain, and improve the service and prevent abuse, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with the law.

Health and dietary information may constitute special-category data; where required, we process it based on your explicit consent given through the app.

We keep your information for as long as your account and household are active, and for as long as needed to provide the service. You can also delete individual members, recipes, and meal plans in the app, and revoke active sessions at any time.

You can permanently delete your entire account at any time in the app, under Settings → Delete account. Before you confirm, Kibo shows exactly what will happen to each of your households. For accounts with a password, we ask you to re-enter it to confirm; for Apple, Google, or passkey sign-ins, your authenticated session is the confirmation. Deletion runs immediately and cannot be undone:

• A household only you can access is deleted along with all of its data — members, recipes, meal plans, pantry inventory, shopping lists, invitations, and its subscription record.
• A household you share with other account holders is kept for them — ownership is handed to another member — but your own member profile, including your health data, targets, weight history, and meal attendance, is removed.
• Your sign-in credentials (password, connected Apple/Google logins, and passkeys) and all of your device sessions are erased. Content that stays with a shared household (for example, a recipe you created that others keep using) is disassociated from you.

After deletion, limited records may remain: aggregate AI-usage metering that no longer identifies you, and any records we must keep for legal or accounting reasons.

Deleting your account does not cancel a Kibo Plus subscription — Apple bills that separately. Cancel it in your App Store subscription settings, or it will keep renewing. You can also ask us to delete your account by emailing [email protected].

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the app by editing or deleting your data, including permanently deleting your entire account under Settings → Delete account. For anything else — such as access or data portability — email us at [email protected], and we will respond within the time required by applicable law.

Permissions: Apple Health access, camera access (for scanning recipes), and notifications are all optional and can be changed at any time in iOS Settings. Your household's consent to third-party AI processing can be reviewed and withdrawn under Settings → AI and your data. Manage or cancel your subscription in the App Store.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not discriminate against you for exercising your privacy rights.

If you are in the EEA or UK and have an unresolved concern, you have the right to lodge a complaint with your local data protection authority.

We use technical and organisational safeguards appropriate to the sensitivity of the data. Passwords are stored only as strong one-way hashes (argon2id) — never in plain text — and refresh tokens are stored hashed. Traffic between the app and our servers is encrypted with HTTPS/TLS in production, and access to your household's data is restricted to authenticated members with the appropriate role. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to it.

Kibo is intended for adults who manage a household. Accounts are not directed to children, and children should not create their own Kibo account. A parent or guardian may add a child as a household member (without a login) and enter that child's profile and health information to plan family meals. If you add another person's information — including a child's — you are responsible for having the authority to do so. If you believe a child has provided us information directly without appropriate consent, contact us and we will delete it.

We operate internationally, and your information may be processed in countries other than where you live, including by the service providers listed above. In particular, if you use a cloud AI model, the data described in section 05 is processed in the United States (Anthropic, OpenAI) or the People's Republic of China (DeepSeek), depending on the model your household selects — which is why Kibo asks for consent before using one, and why you can choose the on-device model instead. Where personal data is transferred across borders, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) where required by law.

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of Kibo after an update means you accept the revised policy.

If you have questions about this policy or how we handle your information, contact: