Privacy policy

Last updated 12 October 2026

Kadam helps you track food, steps, weight and workouts. This policy explains what we collect, why, who processes it, and the choices you have. Kadam is for adults aged 18 and over.

What we collect

• Account: your email address, or your Google account name and email if you sign in with Google.
• Profile and goals: name, date of birth, sex used for calorie formulas, height, weight, target weight and date, activity level, workout setting and schedule, daily routine times, diet preference, allergies, injuries or limitations, and your answers to the health check questions.
• Logs: meals and their nutrition, weight entries, workouts and sets, daily step counts, streak and check-in history.
• Meal photos and descriptions you choose to analyse.
• Steps from Health Connect (Android), only if you allow it. Kadam requests read access to steps only.
• Subscription status if you buy Premium (handled by Google Play and RevenueCat; we never see your card details).
• Diagnostics: crash reports and basic usage events (for example "meal logged") to keep the app working. These never contain your health data such as weight, calories or health answers.

Why we use it

• To calculate your calorie, protein and step targets and a safe pace toward your goal.
• To show your progress, trends, streaks and reminders.
• To estimate the calories in meal photos and descriptions.
• To keep your account secure, fix bugs and improve the app.

We do not sell your data, and we do not use it for advertising.

Health Connect

Step data read from Health Connect is used only to show your daily steps, step goal and streak inside Kadam. It is not shared with third parties, not used for advertising, and not used to train AI models. You can revoke access at any time in Health Connect settings.

Who processes your data

• Supabase stores your account and data (servers in Mumbai, India).
• OpenAI analyses meal photos and descriptions you submit. Photos are sent only when you use Snap meal or Describe it, and are not used to train OpenAI models.
• Google provides Google sign-in.
• Resend delivers sign-in codes by email.
• RevenueCat and Google Play handle subscriptions.
• Sentry and PostHog receive crash reports and usage events, without health data.

How long we keep it

Your data is kept while your account exists. Meal photos are deleted automatically after 30 days. When you delete your account, your data and photos are removed immediately.

Your choices and rights

• Access and export: Profile, Export my data (CSV files).
• Correction: edit your profile, goals and logs in the app.
• Deletion: Profile, Delete account. See how account deletion works.
• Withdraw consent: turn off Health Connect access or notifications at any time.

Under India's Digital Personal Data Protection Act you can also contact us to exercise these rights or raise a grievance at support@kadam.srvjha.in. We respond within 30 days.

Security

Data is encrypted in transit. Each person's data is isolated so that only they can read it.

Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app.