KAI App - Privacy Policy
Effective Date: January 2026
KEEP Labs Inc. (“KEEP,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your information. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use Kai, our AI-powered conversational health coach, and related services (collectively, the “Services”).
By using Kai, you agree to the practices described here. If you do not agree, please do not use the Services.
1. Information We Collect
We collect the following categories of information when you use Kai:
| Category | Examples | Source |
| Account Information | Name, email, phone number, passwordless login token | Provided by you |
| Medication Data | Medication names, dosage, schedule, refills, dose logs, health condition references, therapy experience, and treatment-related topics disclosed through conversation | Derived from your conversations with Kai |
| Symptom & Wellness Data | Emotional tone, behavioral signals, engagement frequency, and patterns detected from your interactions over time | Collected and inferred automatically by Kai |
| Device & Usage Data | Device type, OS version, crash logs, interaction events, IP address | Collected automatically |
Some of this information may qualify as “Protected Health Information” (PHI) under U.S. HIPAA or “consumer health data” under applicable state health data privacy laws, including the Washington My Health My Data Act. KEEP handles such information in compliance with applicable privacy and health-data laws.
2. How We Use Your Information
We use your information to:
- Operate and personalize Kai (create reminders, insights, and routines).
- Improve our Services through analytics and product research.
- Communicate with you (notifications, customer support, feature updates).
- Ensure security and legal compliance.
- Conduct research and development using aggregated, de-identified data to enhance wellness features and population insights.
KEEP Labs sells de-identified, aggregated insights derived from user conversations to pharmaceutical companies, research organizations, and similar entities. KEEP does not sell or disclose individually identifiable health information. Identifiable health information is never used for advertising or marketing purposes.
3. AI and Automated Processing
Kai uses conversational AI to engage users in longitudinal, multi-turn conversations about their lived experience with a health condition or therapy.
● These interactions are automatically processed by our AI systems.
● Your identifiable data is not used to train or personalize the AI model.
● Only de-identified, aggregated insights may be used to improve algorithms or support research.
All automated processing is designed to support patient engagement, behavioral pattern detection, and the generation of de-identified, aggregate population-level insights—not to make medical decisions or diagnoses.
5. How We Share Information
| Recipient | Purpose | Safeguards |
| Service Providers | Cloud hosting, analytics, and technical support | Data Processing Agreements, SOC 2 / ISO 27001 compliance |
| Research Partners (Pharma, Academia) | Commercial sale of de-identified, aggregated insights derived from user conversations for use in research, product development, and commercial analysis | Data is de-identified and aggregated prior to transfer; no direct or indirect identifiers are shared; contractual restrictions on re-identification |
| Healthcare Partners (optional) | If you choose to share adherence data with your care team | HIPAA Business Associate Agreements where required |
| Legal Authorities | When required by law or to protect rights and safety | Verified legal requests only |
KEEP sells de-identified, aggregated insights commercially as described in this Policy. KEEP does not sell or rent individually identifiable personal information under any circumstance.
6. Data Security
We apply industry-standard protections:
● Encryption in transit and at rest (AES-256).
● Role-based access controls and audit logging.
● Annual penetration testing and independent SOC 2 review.
● Incident-response plan with a 72-hour notification target for material breaches.
7. Data Retention
We retain your data only as long as needed to:
● Deliver the Services you use;
● Comply with legal and regulatory requirements; or
● Resolve disputes and enforce agreements.
You may request deletion or account closure at any time (see Section 9).
8. International Data Transfers
Your information may be processed in Canada, the United States, or other countries where KEEP or its service providers operate.
When we transfer data across borders, we use Standard Contractual Clauses or equivalent legal safeguards to protect your information.
9. Your Rights and Choices
Depending on your location, you may have the right to:
● Access or obtain a copy of your data.
● Correct inaccurate or incomplete information.
● Request deletion (“right to be forgotten”).
● Restrict or object to certain processing.
● Withdraw consent at any time.
● Request portability of your data to another service.
To exercise these rights, contact privacy@discoverkeep.com. We respond within 30 days.
KEEP requires your explicit consent before collecting, sharing, or selling consumer health data. You have the right to: (a) confirm whether KEEP is collecting, sharing, or selling your consumer health data and to access such data; (b) withdraw consent to the collection, sharing, or sale of your consumer health data at any time; (c) request deletion of your consumer health data; and (d) opt out of the sale of consumer health data or targeted advertising. KEEP shall not restrict, discriminate against, or retaliate against any user for exercising these rights. Residents of Washington State have additional enforcement rights under the Washington My Health My Data Act (“WMHMD”), including a private right of action.
10. Paid Participation Programs
KEEP may offer optional paid participation programs where you receive compensation for sharing your data and insights. Participation in these programs is entirely voluntary. By participating, you consent to the collection, use, and de-identification of your data and conversation insights for research, product development, and commercial purposes as described in this Policy. You may withdraw from any paid program at any time by notifying privacy@discoverkeep.com.
11. Children’s Privacy
Kai is intended for users 18 years or older.
We do not knowingly collect personal data from children under 13.
If you believe we have collected information from a minor, please contact us to delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically.
If we make material changes, we will notify you by email or in-app notice. Continued use after such notice means you accept the updated policy.
13. Contact Us
KEEP Labs Inc.
Email: privacy@discoverkeep.com
© 2026 KEEP Labs Inc. All rights reserved