1. Introduction
caKao Inc. provides a wellness app and website that bring together daily check-ins, Meals, Moves and related health insights. This policy explains what personal information is collected, how it is used, who may process it on caKao’s behalf, and the choices available to you.
2. Information We Collect
Profile information
When you create an account, caKao may collect age, gender, preferred language, and an optional name or display name. caKao does not ask for government ID, a street address, or a full legal name as part of normal account creation.
GlowScore check-ins
Check-ins may include mood, stress, sleep hours, optional personal notes, and any optional fields you enable, such as cycle stage, skin, hair, or appearance.
Meals
Meal logging may include a meal photo or text description, manual edits, and AI-generated estimates such as calories, macronutrients, a HealthScore, and a meal description. Those generated values may be saved to your meal history.
Moves
Workout and movement entries may include activity type, duration, notes, and an estimated calorie burn. With your permission, caKao can also receive selected activity data from Apple Health or Android Connect.
Authentication, subscriptions and device data
Sign-in is handled through Apple or Google. Subscription billing is processed by Apple or Google, so caKao does not store your payment card details. Limited technical information may also be collected to operate and troubleshoot the app, such as app version, device/OS details, timestamps, and crash or error information.
3. How We Use Your Information
Information is used to provide caKao features, improve the product, maintain safety and reliability, and meet legal obligations. caKao states that it does not use your information to create advertising profiles or make credit or insurance decisions.
4. Apple Health and Android Connect
Health integrations require explicit permission on your device. When permission is granted, caKao states that it reads only active calorie burn, workout duration, and step count.
caKao states that it does not read heart rate, blood pressure, glucose, weight, body measurements, cycle data, sleep tracking, blood oxygen, ECG, temperature, respiratory rate, or other health metrics through these integrations.
You can revoke Health access in your device settings at any time. Previously synced information remains in caKao until you delete the relevant entries or delete your account.
5. Who Processes Information for caKao
caKao uses a limited group of technology providers to operate the service. These include AI providers for certain check-ins, meal analysis, and exercise estimates; cloud infrastructure for hosting and storage; and Apple and Google for authentication and subscription billing.
- OpenAI may process relevant text or meal images to generate certain AI-powered outputs.
- Anthropic may also process certain check-ins, meal scans, or exercise-related content.
- Amazon Web Services provides cloud infrastructure and storage.
- Apple and Google provide account sign-in, billing, and device health integrations where applicable.
caKao states that these providers process information under contractual privacy and security obligations and are not permitted to use it for their own advertising or marketing purposes.
6. What We Do Not Do
- caKao does not sell personal data.
- caKao does not display ads.
- caKao does not use tracking SDKs to follow you across other apps or websites.
- caKao does not share health or check-in data with advertisers, data brokers, employers, or insurers.
- caKao states that user check-ins, meal photos, meal logs, exercise logs, and synced Health data are not used to train public AI models.
- The Health integration is read-only.
7. How Long We Keep Information
Account profile information, check-in history, meal analysis values, exercise records, and synced Health data may be retained while your account remains active so that history and trends remain available.
Meal photos are retained for a limited period and then deleted, while the text-based analysis may remain with your meal history. When you delete your account, caKao states that personal information is removed from active systems and purged from backups within the stated deletion window, subject to any legal retention requirement.
8. Security
caKao describes using protections such as encryption in transit, encryption at rest, access controls, and routine security review. No system can guarantee absolute security. Security issues can be reported to team@cakao.ai.
9. Your Rights
Depending on where you live, you may have rights to access, correct, delete, object to certain processing, receive portable copies of information, withdraw Health permissions, or submit a privacy complaint. Most profile changes can be handled in the app; other requests can be sent to team@cakao.ai.
10. International Data Transfers
caKao is a Singapore company and uses infrastructure and AI-processing services that may operate in the United States. Where required, caKao states that cross-border transfer mechanisms such as standard contractual clauses or equivalent safeguards are used.
11. Children
caKao is not intended for children under 13. Users who are old enough to use the service but are still below the age of majority in their jurisdiction must have parent or guardian consent where required.
12. Changes to This Policy
caKao may update this policy from time to time. The policy date will be updated when changes are made, and material changes may be communicated through the app.
13. Contact
Privacy questions, data requests, or concerns can be sent to team@cakao.ai. Mail may be addressed to caKao Inc., One-North district, Singapore.
Region-Specific Rights
EEA, United Kingdom and Switzerland
Users in these regions may have rights under GDPR or similar laws, including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a local data-protection authority.
California
California residents may have rights to know, delete, correct, limit certain uses of sensitive personal information, and receive equal service when exercising privacy rights. caKao states that it does not sell or share personal information as those terms are defined by California privacy law.
Singapore
Under Singapore’s PDPA, users may have rights to withdraw consent, access or correct personal data, and request information about disclosures. Requests can be sent to team@cakao.ai.