Kivaia

AI Data Processing

Kivaia – an app by ClayFactor GmbH

Last updated: June 2026

Kivaia uses optional AI features only if you consent to AI data processing. Manual tracking and non-AI features remain available without consent.

1. Provider and recipient

The recipient is Google Gemini via Firebase AI Logic (Google/Firebase). Requests are routed through Firebase AI Logic and Firebase App Check so app requests are protected and no Gemini key is stored in the app.

2. Purposes of processing

The main purpose is to provide personalised recommendations and AI assistance within the app. This includes:

3. Data minimisation and possible data categories

Kivaia does not send every category with every request. Depending on the feature, only the data required for the specific purpose and available in the app is transmitted.

4. What we do not send to Gemini

Kivaia does not send direct personal identifiers such as name, email address, Apple ID, trial identifier, or AppTransaction ID to Gemini. Profile pictures are not sent to Gemini either.

Depending on the feature, requests may contain app context from the locally stored user profile, such as goals, dietary profile, meal, activity, sleep, recovery, or body values. Text you enter, goal names, photos, or other content may also contain personal information.

5. Storage and protection

Kivaia does not store Gemini request and response contents on its own servers and does not keep a Gemini history on its own servers that is assigned to a locally stored user profile. AI results may be stored locally in the app when a feature creates them, for example analysed meals, AI recipes, or briefings.

Google may log API requests and responses for a limited time under the Gemini logging rules. According to official Gemini documentation, these logs expire after 55 days by default. Prompts and responses are not used for product improvement by default unless the project owner actively shares them.

6. Optionality and withdrawal

AI data processing is optional. Manual tracking and non-AI features remain available without consent; AI features such as photo analysis, companion, and AI planning stay disabled.

You can revoke consent at any time in the app under Settings → AI Data Processing. After withdrawal, AI features are disabled and the app deletes the AI-generated local content named in the withdrawal dialog.

7. Legal basis

The legal basis is your consent under Art. 6(1)(a) GDPR. Where health data is affected, Art. 9(2)(a) GDPR also applies. Further information about Google, third-country transfers, and processing roles is available in the Privacy Policy.

8. Authoritative Version

This is an English translation of the German original. In case of any discrepancies between the German and English versions, the German version shall prevail.

← Back to Privacy Policy