Privacy Policy

Keza collects the following information when you use the app.

• Email address used for account creation and login.
• First name used to personalize your experience.
• Age range used to tailor health content.
• Health conditions you select including HS, PCOS, perimenopause, endometriosis, fibroids, autoimmune conditions, and others.
• Symptoms you log including pain scores, fatigue, mood, and other health indicators.
• Cycle data including period start dates, period end dates, and cycle length.
• Medications and supplements you add to your profile.
• Food triggers you select in your daily log.
• Daily log entries including stress scores, sleep quality, energy levels, and personal notes.
• Usage patterns within the app used to improve Keza over time.
• Fitness and activity data: if you choose to import fitness data into Keza by uploading a CSV file or by connecting Apple Health or Google Fit, Keza stores the imported step counts, workout sessions, activity durations, and related metrics in your Keza account to populate your movement history and health intelligence. You can delete this imported data at any time through your account deletion request at hello@oneinevery10.org.

Keza uses your data exclusively to provide and improve the app experience. Specifically we use your data to generate personalized health intelligence using AI technology. To calculate cycle predictions based on your history. To identify patterns in your logged symptoms and triggers. To personalize app content to your specific conditions. To send gentle check-in reminders using only generic language that never references your health data. To improve Keza's features over time. Your data is never used for advertising purposes of any kind.

Keza shares anonymized health data with Anthropic's Claude API to generate AI-powered health intelligence content. No direct identifiers such as your email address are included in these transmissions. You can disable AI features at any time in Settings under Privacy. Keza uses Supabase for secure encrypted data storage. No data is shared with advertisers, data brokers, employers, insurers, or any other third party for commercial purposes. Keza does not sell your data under any circumstances. Not now. Not ever.

Keza treats your reproductive and menstrual health data with the highest level of protection available. We will never sell, share, license, or transfer your cycle data, period data, fertility data, pregnancy-related data, or any reproductive health information to any third party including data brokers, advertisers, employers, insurers, law enforcement, or any government entity without a valid court order specifically requiring disclosure. In states where additional protections apply including Washington, California, Nevada, and Connecticut, Keza complies with all applicable reproductive health data privacy laws including the Washington My Health My Data Act.

Keza uses Claude AI by Anthropic to generate personalized health intelligence content. When AI features are enabled, anonymized health data is transmitted to Anthropic's API to generate this content. No direct identifiers such as your email address are included in these transmissions. Anthropic's privacy policy governs how data is handled on their end. You can disable AI-powered features at any time in Settings under Privacy. When disabled all health intelligence content is replaced with static evidence-based information.

Your data is retained for as long as your account remains active. You may request deletion of your account and all associated data at any time through Settings under Privacy or by emailing hello@oneinevery10.org. All data is permanently deleted within 30 days of a deletion request.

You have the right to access your health data stored in Keza. You have the right to correct inaccurate information. You have the right to export your data. You have the right to permanently delete your account and all associated data at any time. To exercise any of these rights go to Settings under Privacy or email hello@oneinevery10.org. We respond to all privacy requests within 30 days.

All data stored in Keza is encrypted at rest and in transit using industry-standard TLS encryption. Keza uses Supabase's enterprise-grade security infrastructure. We conduct regular security reviews to ensure your data remains protected.

Keza is intended for users 18 years of age and older. Keza does not knowingly collect data from anyone under the age of 13. If we learn that a user under 13 has created an account we will immediately delete that account and all associated data and notify the user.

For privacy questions, data access requests, correction requests, export requests, or deletion requests contact us at hello@oneinevery10.org. We respond to all privacy inquiries within 30 days. OneInEvery10 Organization. keza.oneinevery10.org.