Privacy Policy

Effective Date: September 6, 2026

This Privacy Policy explains how Kaun, operated by Hans Wilhelm Beramo Salangsang, doing business as Kaun, collects, uses, stores, shares, and otherwise processes personal information when you use the Kaun mobile application, website, and related services (collectively, the "Service").

Kaun's privacy contact is support@getkaun.com.

For legal notices, Kaun may be contacted by mail at San Jose del Monte City, Bulacan 3023, Philippines.

Kaun is committed to collecting only information reasonably needed to operate, secure, improve, and support the Service. Use of Kaun is also subject to our Terms of Use.

1. Privacy at a Glance

Depending on how you use Kaun, we may process:

• account information such as your email address and authentication information;
• an anonymous or pseudonymous device identifier;
• subscription and Kaun Plus entitlement information;
• information you voluntarily create or upload in Kaun;
• dietary preferences and allergen selections you choose;
• recipe cover images you choose to upload;
• information included in content you choose to share;
• technical, diagnostic, and application information;
• support requests and attachments;
• information needed to process recipe URL imports; and
• information provided by Apple, Google, RevenueCat, or other service providers in connection with authentication or subscriptions.

Much of your private recipe, meal-plan, and grocery-list data is stored locally on your device rather than in Kaun's cloud.

Kaun does not sell your personal information.

2. Information You Provide

2.1 Account Information

If you create or use a Kaun account, we may process information such as:

• email address;
• account identifier;
• authentication-provider identifier;
• display name or name information provided by an authentication provider;
• account status; and
• information necessary to maintain your account and authentication session.

2.2 Email OTP Authentication

If you sign in using email verification codes, Kaun sends the necessary authentication email through Resend.

Kaun does not retain the plaintext verification code after the relevant authentication process. The Kaun API stores a hashed authentication challenge for verification and security purposes.

Resend processes OTP emails and related delivery metadata according to its own policies and retention practices. Resend currently advertises approximately 30 days of email/log retention on its normal plans, but this is controlled by Resend and may change.

2.3 Google and Apple Sign-In

If you choose Google or Apple sign-in, the relevant provider may provide Kaun with information necessary to authenticate your account.

Depending on the provider and information available, this may include:

• provider-specific user identifier;
• email address;
• email verification status;
• name or name components where provided; and
• other information necessary to complete authentication.

Apple may provide a private relay email address instead of your ordinary email address.

Kaun uses this information to authenticate and maintain your Kaun account.

3. Device Information and Identifiers

Kaun may use a pseudonymous device identifier, including an identifier in the form of fp_*, to recognize an installation or device when interacting with Kaun's backend services.

This identifier may be used for purposes such as:

• allowing guest use of the Service;
• associating device activity with server-side functionality;
• preventing abuse;
• maintaining device links;
• supporting authentication transitions; and
• operating and securing the Service.

A device identifier is not intended to be your real-world identity by itself.

4. Information Stored Locally on Your Device

Kaun is designed to be offline-first.

Depending on the features you use, information such as the following may be stored locally on your device:

• recipes;
• meal plans;
• grocery lists;
• meal-plan templates;
• created or remixed recipes;
• saved application preferences;
• dietary preferences and allergen selections;
• profile information such as a display name or bio; and
• locally selected or stored recipe images.

Local data generally remains on your device unless a feature specifically sends information to Kaun or another service.

Signing into Kaun does not automatically mean that your entire local recipe library is uploaded to the cloud or synchronized across devices.

You are responsible for backing up your device and local data where appropriate.

4.1 Dietary and allergen preferences

If you choose dietary preferences or allergens to avoid, Kaun stores those selections on your device to personalize meal suggestions and filters. These selections can be health-related. They are used only to operate those features, not for advertising. They are not a medical record and do not guarantee that a recipe is free of any allergen. Always read the ingredient list.

If you use account or server-side features that sync preferences, those selections may also be stored with your account.

5. App Permissions

Kaun may request device permissions only for features you use. Camera and photo library access are used so you can take or choose a recipe image. Notifications are used for optional meal reminders and cook-timer alerts. Kaun does not use these permissions for advertising. You can deny or later revoke them in your device settings; related features may not work.

6. Recipe Cover Images

If you choose to add a recipe cover image to a recipe through a feature that uploads the image to Kaun's backend, the image may be uploaded to Supabase Storage.

These images may be stored using paths associated with your account, such as covers/{userId}/.../hero.jpg.

Kaun uses these images to provide the applicable recipe functionality. You control whether to provide an image through the relevant feature.

7. Shared Content

If you create a shareable recipe, grocery list, meal-plan template, or other supported share link, the content required to provide that link may be stored on Kaun's infrastructure and/or Supabase.

A share link may allow anyone who obtains the link to view the shared content.

Do not include sensitive personal information in content that you intentionally make shareable.

Kaun may expire or delete shared content or links as part of normal operation. Deleting your Kaun account does not automatically take down an existing share link.

8. Recipe URL Imports

If you use a recipe URL import feature, the URL and information needed to retrieve and process the recipe may be sent to the Kaun API over the internet.

The imported information may originate from a third-party website. Kaun may process the returned content to create the recipe information presented to you.

Third-party websites may separately collect information according to their own privacy policies.

9. Kaun Plus and Subscription Information

Kaun Plus subscriptions are processed through Apple App Store or Google Play, as applicable.

Kaun does not collect or store your payment-card number, CVV, or direct payment-card credentials for Kaun Plus purchases.

Kaun uses RevenueCat to help manage subscription entitlements and subscription-related information.

Depending on the applicable store and subscription activity, RevenueCat and Kaun may process information such as:

• Kaun account identifier;
• subscription product identifier;
• subscription status;
• purchase and renewal information;
• expiration information;
• cancellation or renewal status;
• billing issue information;
• applicable store;
• subscriber or store identifiers; and
• information contained in subscription events.

RevenueCat retains subscriber and entitlement information according to RevenueCat's own policies and for periods necessary to provide its services.

Kaun's backend maintains subscription-status information associated with your Kaun account as needed to honor and manage Kaun Plus, until the account is deleted or the information is otherwise updated, expired, or no longer required.

Apple and Google separately process payment and purchase information according to their own policies.

10. Analytics

Kaun uses PostHog for product analytics.

Analytics help Kaun understand how the application is used, identify problems, measure feature usage, and improve the product.

Depending on the configuration and event, analytics information may include:

• pseudonymous device identifiers;
• application version;
• operating system information;
• device or technical information;
• feature and interaction events; and
• other information reasonably necessary for product analytics.

Kaun configures its analytics to avoid sending recipe titles, free-text search queries, or share URLs as content where reasonably practical.

PostHog is used for product analytics, not to operate an advertising network for Kaun.

11. Crash Reporting

Kaun uses Sentry for crash reporting and technical diagnostics.

Sentry may receive information such as:

• application errors;
• stack traces;
• application version;
• operating system and device information;
• diagnostic information; and
• identifiers necessary to associate related error events.

Kaun's crash-reporting configuration is designed with default PII collection restrictions.

Crash information is used to diagnose errors, improve reliability, and maintain the security and stability of Kaun.

12. Website Information

When you visit Kaun's website, technical information may be processed by hosting and infrastructure providers as necessary to deliver the website.

Kaun's main website uses Next.js and Vercel infrastructure.

The main website self-hosts the Poppins font through Next.js next/font, meaning normal visits to those pages should not require a browser request to Google's font servers.

Some share-link preview pages may load Poppins from Google's font servers at fonts.googleapis.com and/or fonts.gstatic.com. Visiting those pages may therefore cause your browser to communicate with Google.

Kaun does not use Google Analytics, PostHog, or Plausible Analytics on the normal marketing website.

13. Support Requests

If you contact Kaun through its support functionality, we may collect information such as:

• name;
• email address;
• optional phone number;
• support topic;
• message;
• information you voluntarily include in your request; and
• optional attachments.

Support emails are handled using Resend.

Support attachments may be stored using Vercel Blob and are deleted after approximately 30 days under Kaun's current configuration.

Do not send passwords, payment-card numbers, authentication codes, government identification numbers, or other unnecessary sensitive information through support.

14. Service Providers

Kaun uses third-party providers to operate parts of the Service. These may include:

Third-party providers may process information in countries other than the Philippines and according to their own privacy policies and contractual obligations.

15. How We Use Information

Kaun may process information to:

• create and authenticate accounts;
• provide the Service;
• provide Kaun Plus;
• maintain subscription entitlements;
• personalize filters and suggestions from preferences you choose;
• provide requested sharing functionality;
• store recipe cover images that you choose to upload;
• process recipe URL imports;
• send authentication and support emails;
• provide customer support;
• diagnose crashes and technical problems;
• understand product usage;
• prevent fraud, abuse, and unauthorized access;
• maintain security;
• comply with legal obligations;
• enforce our Terms; and
• protect the rights, property, and safety of Kaun, users, and others.

16. Legal Bases

Where a data-protection law requiring a legal basis applies to our processing, Kaun may rely on one or more of the following bases depending on the circumstances:

• Performance of a contract: to provide requested account, subscription, and Service functionality.
• Legitimate interests: to secure, maintain, troubleshoot, analyze, and improve the Service, prevent abuse, and protect our systems and users.
• Consent: where consent is required for a particular processing activity.
• Legal obligation: where processing is necessary to comply with applicable law or lawful requests.

Where consent is the applicable legal basis, you may withdraw consent where legally available. Withdrawal of consent does not necessarily affect processing already carried out lawfully before withdrawal.

17. When We Share Information

Kaun may share information:

• with service providers that process information on Kaun's behalf;
• with Apple or Google when necessary for authentication, purchases, subscriptions, or platform functionality;
• with RevenueCat for subscription management;
• with Supabase for requested share links and uploaded recipe cover images;
• with Resend for email delivery;
• with analytics and crash-reporting providers;
• when you intentionally make information available through a share link;
• when required by law, court order, or valid legal process;
• when reasonably necessary to prevent fraud, abuse, security incidents, or harm; or
• in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law.

Kaun does not sell personal information.

Kaun does not provide your personal information to advertisers for their own independent advertising purposes.

18. International Processing

Kaun and its service providers may process information outside the Philippines. For example, infrastructure and service providers may operate servers or facilities in other countries.

Where applicable law requires safeguards for international transfers, Kaun will use appropriate measures required by that law.

Third-party providers may also apply their own international-transfer mechanisms and policies.

19. Retention

Kaun keeps information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods depend on the type of information and why it is processed. Examples include:

• account information: generally while your account remains active and for a reasonable period afterward where needed for legal, security, fraud-prevention, or operational purposes;
• subscription status: while needed to manage and honor Plus and for applicable legal or operational purposes;
• hashed authentication challenges: for the period necessary to authenticate and secure the account;
• support attachments: approximately 30 days under Kaun's current Vercel Blob configuration;
• Resend email and delivery information: according to Resend's retention practices, currently advertised at approximately 30 days on normal plans;
• RevenueCat subscriber and entitlement information: according to RevenueCat's policies and as necessary to provide its services; and
• crash and analytics information: according to the applicable provider's retention practices and Kaun's operational needs.

Kaun does not promise a fixed retention period for third-party services where that retention is controlled by the third party.

20. Account Deletion

You may request deletion of your Kaun account.

When an account is deleted, Kaun's backend may delete or disable account-associated server-side information according to its deletion procedures.

Account deletion may include deletion of server-side account records, authentication tokens, and device links, subject to information that must or may legally be retained.

Certain server-side records may be retained where reasonably necessary for legal compliance, security, fraud prevention, accounting, dispute resolution, or other legitimate purposes.

Deleting your account does not remotely erase data stored locally on your device. It also does not automatically cancel Kaun Plus or delete existing share links.

Information held independently by Apple, Google, RevenueCat, Resend, Supabase, Sentry, PostHog, Vercel, or other third parties may be subject to their own retention and deletion policies.

21. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have rights concerning your personal information, including rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information;
• request information about how your personal information is processed;
• object to or restrict certain processing;
• withdraw consent where consent is the applicable legal basis;
• request portability of certain information; and
• lodge a complaint with an applicable privacy or data-protection authority.

These rights are subject to applicable legal limitations and exceptions.

To exercise a privacy right, contact support@getkaun.com.

We may need to verify your identity or account before completing certain requests. We will not request unnecessary passwords, payment-card information, or authentication codes for this purpose.

22. Philippine Privacy Rights

Kaun operates in the Philippines and processes personal information in connection with the Service.

Where the Philippine Data Privacy Act of 2012 and its implementing rules apply, Kaun will process personal information in accordance with applicable requirements.

You may contact Kaun at support@getkaun.com regarding privacy concerns, requests, or complaints.

Kaun does not state in this Privacy Policy that it has a particular registration, accreditation, or certification with the National Privacy Commission unless such status is actually applicable and confirmed.

23. California and Other U.S. State Privacy Rights

If you are located in a U.S. state that provides specific privacy rights applicable to Kaun's processing, you may have additional rights under that state's law.

Depending on the applicable law, these may include rights concerning access, correction, deletion, portability, objection, or information about categories of personal information processed.

Kaun does not sell personal information or share personal information for cross-context behavioral advertising as those terms may be defined under applicable U.S. privacy laws.

To make a privacy request, contact support@getkaun.com.

24. EEA, UK, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland and applicable data-protection law applies to Kaun's processing, you may have additional rights under applicable law.

These may include rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent where applicable.

You may also have the right to complain to your local data-protection authority.

Contact support@getkaun.com for privacy requests.

25. Children's Privacy

Kaun is not directed to children under 13.

Kaun does not knowingly seek to collect personal information from children under 13.

If you believe a child under 13 has provided personal information to Kaun, contact support@getkaun.com so that we can review the situation and take appropriate action.

Where applicable law establishes a different age threshold or additional requirements, those requirements apply.

26. Security

Kaun uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, device, server, or storage system can be guaranteed to be completely secure.

You are responsible for protecting your own devices and authentication methods.

27. Third-Party Websites and Services

Kaun may contain links to or interact with third-party websites and services.

Those third parties operate independently from Kaun and may have their own privacy policies, terms, and data practices.

Kaun is not responsible for the privacy practices of third parties that operate independently from Kaun.

28. Cookies and Similar Technologies

Kaun's normal marketing website does not use Google Analytics, PostHog, or Plausible Analytics.

The website and its infrastructure may nevertheless use technically necessary cookies, browser storage, logs, or similar technologies required to operate, secure, and deliver the website.

Some share-preview pages may request fonts from Google Fonts servers as described above.

Third-party services may use their own cookies or similar technologies when their services are loaded or used.

29. Do Not Track and Browser Signals

Kaun does not currently promise that it will respond to every browser-based "Do Not Track" or similar signal.

Where a privacy law requires recognition of a particular browser or device signal, Kaun will comply to the extent applicable.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, technology, legal requirements, or our data practices.

If a change is material, we may provide notice through the Service, website, or another reasonable method.

The updated Privacy Policy will state its new effective date.

31. Contact

For privacy questions, requests, complaints, or concerns, contact:

Hans Wilhelm Beramo Salangsang, doing business as Kaun
Privacy contact: support@getkaun.com
Postal address: San Jose del Monte City, Bulacan 3023, Philippines

We encourage you to contact us first so that we can try to address your concern.

Last updated: September 6, 2026.