Last updated: August 31, 2026
Privacy Policy
Ketonaut is a keto and low-carb tracking app. Using it means telling us things about your body — what you eat, what you take, and what your blood glucose and ketone readings are. This policy explains exactly what we collect, where it goes, who else touches it, and how to get rid of it.
Ketonaut is pre-launch. Some features described below — the Coach, biomarker logging, Keto-Mojo device import, and subscriptions — are not yet available. They are described here so you know what the app will collect when you use them. We update this policy as features ship.
1. Who we are
Ketonaut LLC, a New Jersey limited liability company ("Ketonaut," "we," "us"), operates the Ketonaut mobile and web app and the website at ketonaut.app. We are the controller of the personal data described here. You can reach us at support@ketonaut.app about anything in this policy, or by post at 1028 Sunside Avenue, Woodbury Heights, NJ 08097, United States.
2. What we collect
Account information
When you create an account we collect your email address and a password, or — if you use Google Sign-In — the name, email address, and Google account identifier that Google returns to us. Authentication is handled by Firebase Authentication; your password is stored and verified by Firebase, and we never see or store it ourselves. Each account is identified by a Firebase user ID, which is the key everything else below is stored under.
Profile information
Information you enter so the app can calculate targets and personalize guidance: display name, date of birth, height, weight, sex used for calculation, activity level, goal, the date you started keto, food allergies and dietary restrictions, and app preferences (unit system, when your tracked day starts, notification settings). We also keep a history of your recorded weights so progress can be shown over time.
Health information — the sensitive category
Some of what Ketonaut stores is health information about you. We treat it as the most sensitive data we hold. It includes:
- Blood glucose and ketone readings — entered by you, or, once that integration exists, imported from a connected Keto-Mojo meter.
- Meal and macro logs — what you ate, when, and the nutrition values attached to it.
- Supplement logs — the supplements in your stack and when you took them.
- Symptom logs — how you have been feeling on any given day, chosen from a fixed list (things like fatigue, headache, muscle cramps or brain fog) with an optional severity. You choose what to record and you can delete any entry. These are never included in analytics.
- Health and safety flags — a short set of questions the Coach needs in order to be safe rather than generic: pregnancy or breastfeeding, type 1 diabetes or use of insulin or sulfonylureas, kidney disease, liver disease, history of an eating disorder, and use of medications that interact with electrolyte supplementation. Every one of these is optional and each has an explicit "prefer not to say" answer that stays available after you answer, so you can always take an answer back.
- Symptoms and health topics you raise with the Coach — anything you type into a Coach conversation, which may include how you are feeling, medications, or conditions. Coach conversations are not stored on our servers. Your messages are sent to the Coach to be answered, and the conversation is kept on your device so you can scroll back through it. We do not keep a copy. See section 4 for what is sent, and section 5.
We do not sell this information, use it for advertising, or share it with affiliate partners. See section 5.
Food searches
When you search for a food, the text of your search (or a scanned barcode) is sent to our servers and on to the food databases described in section 4. Searches are cached to reduce repeat lookups. Your identity is not sent to those databases — only the search itself.
Waitlist email
If you enter your email address on the ketonaut.app waitlist form, we store that address and the date you submitted it, and use it only to email you about the launch. This is separate from an app account. Ask us at support@ketonaut.app and we will remove it.
Technical and log data
Our servers generate operational logs (timestamps, error messages, and the fact that a request was made) as a normal part of running and debugging the service, and Firebase Authentication records sign-in activity for account security. Google's infrastructure logs IP addresses in the course of serving requests.
Ketonaut contains no analytics, advertising, crash-reporting, or attribution SDKs. We do not build advertising profiles, and there are no third-party trackers embedded in the app.
3. Why we use it
- To run your account — sign-in, account security, password reset.
- To calculate your targets — profile and body metrics drive your macro and net-carb targets.
- To show your own data back to you — logs, history, and trends.
- To answer food searches — matching what you typed against food databases.
- To make the Coach useful and safe — your recent meals, macros against targets, supplement stack, biomarker readings, days on keto, and your health and safety flags are assembled into context so the Coach can answer about your situation and can be more careful with people for whom the general advice is wrong.
- To operate subscriptions, once they exist — verifying what you are entitled to.
- To keep the service working — debugging, abuse prevention, and security.
Where we rely on consent — particularly for health information — you can withdraw it by removing the data or deleting your account, as described in section 6.
4. Third parties your data passes through
We keep this list short on purpose. These are all of them.
| Who | What reaches them | Why |
|---|---|---|
| Google / Firebase | Everything described in section 2 — account, profile, health information, logs. | Firebase Authentication, Firestore, Cloud Functions, and Hosting are our backend. Your data is stored on Google Cloud infrastructure, in the United States. |
| USDA FoodData Central | The text of your food search. Nothing that identifies you. | Generic and whole-food nutrition data. USDA FoodData Central is a U.S. government public-domain database. |
| FatSecret Platform API | The text of your food search, or a scanned barcode. Nothing that identifies you. | Branded and packaged food data and barcode lookup. Under our agreement with FatSecret we do not retain their nutrition content on our servers; we store only the identifiers needed to look a food up again. |
| Anthropic | Your Coach messages, plus the context described below. | The Coach's responses are generated by a third-party AI model operated by Anthropic. See the detail immediately below. |
| RevenueCat, Apple, Google Play, Stripe | A subscription identifier tied to your account, and purchase status. | Subscription billing and entitlement, once subscriptions launch. Payment card details go to the app store or payment processor directly — we never receive or store them. |
What the Coach sends, specifically
The Coach is not a person and is not a doctor. When you send it a message, that message is transmitted to Anthropic's API together with a context block assembled from your account, which may include:
- your recent meals, and your macros against your targets
- your supplement stack and recent intake
- your recent blood glucose and ketone readings
- how long you have been on keto
- the optional health and safety flags described in section 2
- the earlier messages in the same conversation
Anthropic processes this to generate a reply and returns it to us. Anthropic's commercial API terms provide that inputs and outputs are not used to train their models.
Coach conversations are not reviewed by a medical professional. Nothing the Coach says is medical advice, a diagnosis, or a treatment recommendation, and no clinician reads your conversations. If something you discuss with the Coach matters to your health, take it to a qualified clinician.
5. What we don't do
- We do not sell your health data. We do not sell any of your personal information, to anyone, for any purpose. We do not "share" it for cross-context behavioral advertising as California law defines that term.
- We do not run ads or do ad targeting, and we do not build advertising profiles from what you log.
- We do not embed third-party trackers or analytics SDKs in the app.
- We do not give affiliate partners your data. Ketonaut includes affiliate links to retailers. If you tap one, the retailer sees the visit the same way it would see any click that arrived from a link — that is the retailer's own tracking on their own site, and it carries no information about your account, your logs, or your health data. Nothing you have logged in Ketonaut is passed to them. The Coach never links to anything we earn money on.
- We do not store your Coach conversations on our servers. What you type is sent to the Coach to be answered and the conversation stays on your device — we keep no copy of it, so there is nothing on our side to search, hand over, or lose. Uninstalling the app, or clearing its data, removes the conversation from your device.
- We do not use your data to train AI models, ours or anyone else's.
6. How long we keep it, and how to delete it
We keep your data for as long as your account exists, because the whole point of the app is your history over time. Cached food-search results expire automatically. Once you delete your account, we do not keep your data for a rainy day.
How to delete your account
In the app, go to Settings → Your data → Delete account. It's immediate, permanent, and requires a second confirmation before anything is removed.
If you can't access the app, email support@ketonaut.app from the address on your account and ask us to delete it. We will confirm and complete the deletion within 30 days.
Deleting your account removes:
- your Firebase Authentication record — the account itself, and your ability to sign in;
- your profile, body metrics, and weight history;
- your health and safety flags;
- your meal and macro logs, and any recipes you saved;
- your supplement stack and intake logs;
- your blood glucose and ketone readings;
- your symptom logs.
Coach conversations are not in that list because we never had them. They are kept on your device, not on our servers (section 5), so there is nothing on our side to delete. Uninstalling the app, or clearing its data, removes the conversation from your device.
Residual copies may persist in encrypted infrastructure backups for a short period after deletion and are overwritten on the normal backup cycle. We may retain a minimal record that an account was deleted, and anything we are legally required to keep.
Deleting your account does not cancel a paid subscription. If you subscribed in the iPhone or Android app, cancel through your Apple or Google account subscription settings — only the store can cancel it. If you subscribed on the web, cancel from your account settings at ketonaut.app. Do that first, then delete. See section 8 of our Terms for the detail.
Waitlist email addresses are held until launch or until you ask us to remove yours.
7. Your rights
Whatever jurisdiction you are in, you can ask us to:
- Access — get a copy of the data we hold about you.
- Correct — fix anything inaccurate. Most of it you can edit directly in the app's Settings.
- Delete — remove your account and its data, as described above.
- Withdraw consent — including for the optional health and safety flags, each of which can be set back to "prefer not to say" at any time.
- Object or restrict — ask us to stop or limit a particular use.
Email support@ketonaut.app and we will respond within 30 days. We will not discriminate against you for exercising any of these rights.
Ketonaut is offered in the United States only, as described in our Terms of Service, so the European and United Kingdom data-protection regimes do not apply to it. We have deliberately given the rights above to everyone who uses Ketonaut rather than to residents of particular states or countries — and the data export described below is available on every account, which is data portability offered to all users instead of a subset. If we ever expand to other countries, we will update this policy before we do.
If you are in California, you have the rights described under the CCPA/CPRA, including the right to know and the right to delete; as stated above, we do not sell or share your personal information.
Data export: in the app, go to Settings → Your data → Download my data for an immediate JSON copy of everything in your account. If you can't access the app, email us and we will send you a copy instead.
8. Minors' privacy
Ketonaut is not directed to children or to anyone else under 18. It is intended for adults aged 18 and over.
We do not knowingly collect personal information from anyone under 18. Before you can create an account, the app asks for your date of birth and will not continue if it is under 18. Like any self-declared age check, this cannot detect someone who enters a date that is not their own, so if you believe someone under 18 has created an account, email support@ketonaut.app and we will delete the account and its data promptly.
Separately: an app that sets calorie and carbohydrate targets is not appropriate for children or adolescents, and dietary changes for anyone under 18 should involve a parent or guardian and a pediatrician or registered dietitian.
9. How we protect it
- Data is encrypted in transit (TLS) and at rest by Google Cloud.
- Database security rules restrict every user record to its owner. Your data is not readable by other users.
- Health and safety flags and biomarker readings are never included in analytics of any kind.
- Third-party API keys live server-side in Cloud Functions, never in the app you install.
- Sign-in is handled by Firebase Authentication, with protection against account enumeration enabled.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your data, we will notify you as required by law.
10. Where your data is stored
Ketonaut runs on Google Cloud infrastructure in the United States, and Ketonaut is offered in the United States only. Your data is stored and processed in the United States. If you travel and use Ketonaut from elsewhere, your data is still held in the United States, under the safeguards our providers maintain.
11. Changes to this policy
As Ketonaut's features ship, this policy will change with them — particularly around biomarker import, the Coach, and subscriptions. We will update the date at the top, and for any material change affecting health data we will notify you in the app or by email before it takes effect.
12. Contact us
Questions, requests, or concerns about your data: support@ketonaut.app. We read every one.