Effective date: May 14, 2026 · Last updated: May 14, 2026
Hi — Kodoma here. 👋 You're trusting us with some of the most personal numbers you have: how much you slept, what you ate, how your heart's doing. So we want to be straight with you about what we collect, what we don't, and why.
The short version: we only collect what we need to make the app work for you and your crew. We never sell your data. We don't run ads. There's no third-party tracking quietly piggybacking in the background. The longer version is below, written as plainly as we could manage while still being a real privacy policy.
Questions, corrections, or want your data deleted? Email us anytime at support@kodoma.app.
Kodoma is a social health app — track your fitness, meals, and grocery runs, and share progress with the people you care about. This policy explains how Kodoma ("we," "us," "our") collects and uses information when you use our mobile app or visit kodoma.app.
The things you tell us during onboarding or edit later:
With your permission, Kodoma reads a small set of health metrics from your phone's native health platform:
The metrics we read:
You can revoke health access at any time — in iOS Settings → Health → Data Access & Devices, in Android's Health Connect app, or inside Kodoma at Profile → Privacy & Permissions.
When you choose to, you can use your camera inside Kodoma to:
Photos you capture in the app are uploaded to Kodoma's storage so you can see them on your timeline and share them with your crew if you choose. We don't access your camera roll except when you explicitly ask Kodoma to save a workout recap photo back to your photos.
If you start a run, Kodoma uses your phone's GPS to map your route and calculate distance and pace. This happens only while a run is active and the app is in the foreground. We never track your location in the background, and we never collect location data outside of an active run.
The things you do inside the app:
To send reminders, streak alerts, and crew notifications, we register a push token with Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. These tokens identify your device, not you personally.
Basic device info (OS version, app version) and crash logs, so we can fix bugs. No advertising IDs, no fingerprinting, no behavioral analytics.
A few features in Kodoma rely on AI services. When you use these features, the relevant input is sent to a processor and a result is sent back. Here's exactly who gets what:
Kodoma's backend runs on Supabase (PostgreSQL) hosted in the United States. Specifically:
Kodoma is a social app, so some of your info is visible to people in groups ("crews") you join. Here's the complete list of what other crew members can see:
Your full name, email, date of birth, weight, height, raw health metrics, and any activity you didn't choose to share are not visible to anyone else in Kodoma. Sharing a workout or meal with a crew is always an opt-in choice when you log it.
You have the right to:
delete_user() function that permanently removes your profile, meals, workouts, goals, group memberships, health summaries, and photos.For GDPR-specific requests (data portability, the right to object, lodging a complaint with a supervisory authority), email us — we'll respond within 30 days.
Kodoma is not directed to children under 13, and we don't knowingly collect information from anyone under 13. Depending on where you live, additional rules apply for users between 13 and 18 — for example, the EU's GDPR-K requires parental consent for users under 16 in some member states. If you're a parent or guardian and you believe your child has signed up without your consent, email us at support@kodoma.app and we'll delete the account.
Kodoma's servers are located in the United States. If you use the app from outside the U.S., your data will be transferred to and processed in the U.S.
If you're in the EU/UK (GDPR): our legal basis for processing your data is your consent (when you grant permissions) and the performance of our contract with you (when you create an account and use the app). You have the right to access, correct, delete, port, restrict, or object to processing of your data, and to lodge a complaint with your local data protection authority.
If you're in California (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of "sale" or "sharing" — though as noted, we don't sell or share personal information in the way those terms are defined. You also have the right not to be discriminated against for exercising any of these rights.
We keep your account data for as long as your account is active. When you delete your account, your data is removed from our primary database immediately and from backups within 30 days. Anonymous, aggregated metrics (e.g., total active users) may be retained longer for product analytics.
If we update this policy, we'll change the "Last updated" date at the top, and for any material changes we'll notify you in the app or by email before the change takes effect. The version at kodoma.app/privacy is always current.
Privacy questions, data requests, or just want to say hi: support@kodoma.app.
This Privacy Policy is provided for informational purposes and does not constitute legal advice. If you have specific legal concerns about your privacy rights or our obligations, please consult a qualified attorney in your jurisdiction.