Privacy policy

Last updated: 13 November 2026

The short version
  • Kevyt has no user accounts and no Kevyt server. Your data is stored on your phone.
  • We (the makers of Kevyt) do not receive, collect or sell your personal data.
  • Data leaves your phone only when you use a feature that needs it: AI features send data to the AI provider you chose, online product search sends your search term or barcode to Open Food Facts, and backup and sync send your data to the cloud folder you chose.
  • You can export or erase your data at any time from the app.

1. Who we are

Kevyt is developed and run by Jukka Lehtinen, Am Kirchberg 4, 89287 Bellenberg, Germany, who is responsible for the data handling described here (see also the Impressum). For any privacy question, contact [email protected].

This policy covers the Kevyt app for Android and iPhone and the website kevyt.ai.

2. Data stored on your phone

The app stores the following on your device only:

Some of this is health data. Because it never leaves your device through us, we cannot see it, access it or hand it to anyone.

3. When data leaves your phone

AI features (optional)

Kevyt does not provide AI itself. If you turn on AI features, you choose a provider (for example OpenAI, Anthropic, Google, Mistral or OpenRouter) or a model you run yourself, and you enter your own key. Requests go directly from your phone to that provider. We are not involved and do not receive a copy.

FeatureWhat is sent to your provider
Logging from a photo or descriptionThe photo (resized, with location and other metadata removed) and/or the text you typed.
ReviewsOnly the summary numbers Kevyt computed for the period, such as weight against plan, calories against target and nutrient totals. You can see exactly what is sent before sending.
Meal plans and meal suggestionsYour food preferences (diet type, allergies, likes, dislikes, cooking time, household size, budget) and your calorie and protein targets.
Choosing a modelA request for the provider's list of models, using your key.

The app asks for your consent before the first request to each provider. What the provider does with the data is governed by your agreement with them and their privacy policy, so please read it. If you use a model running on your own computer or server, the data goes only there.

Online food search and barcodes (optional)

When you search for a product online or scan a barcode, the search term or barcode is sent to Open Food Facts, an open food database. No personal details are sent with it. Their handling of requests is covered by their own privacy policy. The built-in food list works fully offline.

Backup and sync (optional)

If you connect a cloud folder of your own (a WebDAV folder, for example on Nextcloud, a NAS or a storage provider), Kevyt uploads your data there: a record of each change, so your other devices can stay in step, and a daily backup. The upload goes directly from your phone to that folder. We are not involved and do not receive a copy. Your storage provider handles the files under your agreement with them.

When you set up the folder, you can choose an encryption passphrase. Kevyt then encrypts every file on your phone before it is uploaded, so the storage provider cannot read it. We cannot recover a forgotten passphrase. Without a passphrase, the files are stored unencrypted, and anyone with access to the folder can read them.

Export and sharing

When you export your data or share a shopping list, it goes wherever you choose to send it. Exports never include your API key or your cloud password.

4. What we do not do

5. Your control

Since we hold no personal data about you, we cannot export or delete anything on your behalf. Everything is on your device and in your control. Data you sent to an AI provider is handled under that provider's terms. Contact them to exercise your rights there.

If you live in the EU or EEA, you have rights under the GDPR, including the right to lodge a complaint with the data protection authority in the country where you live or work.

6. Other cloud storage

Backup and sync currently work with WebDAV folders. If iCloud Drive, Google Drive or other storage is added later, the data will still go to your own account, not to us, and this policy will be updated before that feature is released.

7. Children

Kevyt is meant for adults. It is not directed at children under 16.

8. This website

kevyt.ai is a simple static website without cookies, analytics or third-party scripts. It is served through Cloudflare, which processes technical data such as your IP address to deliver the site and protect it from abuse, and our web server keeps short-term technical access logs for the same reasons. If you email us, we use your message and address only to reply.

9. Changes

If this policy changes, we will update the date at the top of this page. Significant changes will also be mentioned in the app's release notes.

10. Contact

[email protected]