For California Residents

Last Updated: April 2026

This page supplements our Privacy Policy and provides additional disclosures required under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

1. Categories of Personal Information Collected

During the preceding twelve (12) months, we have collected the following categories of personal information from consumers:

Category	Examples	Business Purpose
Identifiers	Name, email address, user ID, IP address	Account creation, authentication, security
Personal Information (Cal. Civ. Code §1798.80)	Name, email address	Account management, communications
Internet or Network Activity	Pages visited, features accessed, device and browser type	Service improvement, diagnostics
Sensitive Personal Information	Health data including vitals, medications, nutrition, sleep, menstrual health, and dental records	Core service delivery: displaying and managing your personal health dashboard

2. Business Purposes for Collection

We collect and use personal information solely for the following business purposes:

Providing the Kenki health tracking service and its core functionality.
Maintaining, improving, and securing the Service.
Processing subscription payments and managing billing.
Sending service-related communications, including reminders and account updates.
Detecting and preventing fraud, abuse, and security incidents.
Responding to customer support inquiries.
Complying with applicable legal obligations.

3. Sale and Sharing of Personal Information

We do not sell your personal information. We have not sold personal information at any time during the preceding twelve (12) months, and we have no intention of doing so in the future.

We do not share your personal information for cross-context behavioral advertising. We do not participate in targeted advertising networks and do not share your data with advertising platforms or ad technology providers.

Because we do not sell or share personal information for advertising purposes, there is no action required on your part to opt out of such practices. Nevertheless, you retain the right to direct us not to sell your personal information, and we will honor any such request.

4. Your California Privacy Rights

Right to Know

You have the right to request that we disclose the following information to you:

The specific categories and pieces of personal information we have collected about you.
The categories of sources from which your personal information was collected.
The business or commercial purposes for which your personal information was collected.
The categories of third parties with whom we have shared your personal information.

Right to Delete

You have the right to request that we delete the personal information we have collected about you. Upon receipt of a verified and valid deletion request, we will delete your personal information from our active records and will direct our service providers to do the same, except where retention is permitted or required by law (for example, to complete a pending transaction, to comply with a legal obligation, or to detect and prevent security incidents).

Right to Correct

You have the right to request that we correct any inaccurate personal information that we maintain about you. In most cases, you may also directly edit your information through the Kenki application.

Right to Opt Out of the Sale of Personal Information

Although we do not sell personal information, you may still submit a formal opt-out request and we will acknowledge and honor it. We also recognize and respect the Global Privacy Control (GPC) browser signal as a valid expression of your opt-out preference.

Right to Limit the Use of Sensitive Personal Information

You have the right to request that we limit the use and disclosure of your sensitive personal information (including health data) to purposes that are necessary to provide the Service. Because we already restrict our use of your sensitive information to this scope, this right is inherently satisfied by our existing practices.

Right to Non-Discrimination

We will not discriminate against you in any way for exercising your rights under the CCPA or CPRA. You will receive the same quality of service, the same pricing, and the same access to features regardless of whether you choose to exercise any of your privacy rights.

5. How to Exercise Your Rights

You may submit a privacy rights request through any of the following channels:

By email at [email protected], with the subject line "California Privacy Request."
Through the Kenki application by navigating to Settings, then Privacy, then Data Request.

Identity Verification

In order to protect your privacy and the security of your account, we are required to verify your identity before processing any rights request. Our verification process includes the following steps:

We will ask you to confirm the email address associated with your Kenki account.
For requests involving sensitive information (such as data deletion or access to specific personal data), we may require additional verification measures.
We will compare the information you provide with the records we maintain to confirm your identity.

Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. To do so, you must:

Provide the agent with a signed, written authorization granting them permission to act on your behalf.
The agent must include proof of this authorization when submitting the request.
We may still require you to verify your identity directly, even when a request is submitted through an authorized agent.

6. Response Timeframe

We will acknowledge receipt of your request within ten (10) business days.
We will provide a substantive response to verified requests within forty-five (45) calendar days.
If additional time is reasonably necessary, we will notify you and may extend the response period by an additional forty-five (45) days, for a maximum total of ninety (90) calendar days.
We will provide the requested information free of charge. You may submit up to two (2) requests per twelve-month period.

7. California "Shine the Light" Law

Under California Civil Code Section 1798.83, California residents may request certain information regarding the disclosure of personal data to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

8. Do Not Track and Global Privacy Control

We recognize and honor the Global Privacy Control (GPC) signal. When we detect a GPC signal transmitted by your browser, we treat it as a valid opt-out of sale request, although we do not sell personal information regardless of this signal.

At this time, we do not respond to other "Do Not Track" browser signals, as no universally accepted standard for interpreting such signals currently exists.

9. Financial Incentives

We do not offer financial incentives, discounts, price differentials, or other benefits in exchange for the collection, retention, or sale of personal information. Our service tiers are differentiated by features, not by the amount or type of data collected.

10. Contact for California Privacy Matters

For questions specific to your California privacy rights, please contact us at:

Email: [email protected]
Please include the word "California" in the subject line of your message to help us route your inquiry appropriately.