KarraPrivacy Policy
This Privacy Policy explains how Karra ("Karra", "we", "us", "our") collects, uses, and protects your information when you use the Karra website and application at karra.net and app.karra.net (the "Service"). Karra is currently offered as an invite-only private beta.
Karra is operated by an independent developer based in the United States. For any privacy question, or to request access to or deletion of your data, contact support@karra.net.
Information we collect
- Account information — such as your email address, used to sign in.
- Health & activity data you provide — such as sleep, workouts, nutrition, supplements, medical records, symptoms, and notes you enter or upload.
- Connected services — data you choose to sync from third parties you explicitly connect, such as an Oura ring (sleep, readiness, activity), a Withings smart scale (weight and body composition), and Google Health / Fitbit (hydration logged by a smart water bottle).
- Messages — the content of text messages you send to and receive from our optional SMS assistant.
How we use your information
We use your information solely to operate and provide the Service to you: to store your records, generate personalized insights, respond to your questions (including via our AI assistant), and send you information you request such as summaries or SMS replies.
AI processing
To generate insights and answer your questions, relevant portions of your data may be processed by a trusted AI model provider under agreements that restrict use of your data to providing the service. Your data is not used to train third-party models.
SMS / text messaging
If you opt in to the SMS assistant, we process the phone number you message from and the content of your messages in order to respond. Message and data rates may apply, and you can reply STOP at any time to opt out.
We do not sell your information, and we do not share mobile opt-in data or SMS message content with third parties or affiliates for marketing purposes. No mobile information is shared with third parties for their own marketing.
Connected services & Google user data
Karra only reads data from a connected service after you authorize it, and only the specific categories needed for the feature you asked for. You can disconnect a service at any time from the app, which stops all future syncing.
Google Health / Fitbit: if you connect your Google account, Karra reads your hydration (water intake) records so your smart water bottle's data appears in your daily tracker. Karra requests read-only access and does not write to, modify, or delete data in your Google account.
Limited use: Karra's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs is used only to provide and improve features you request, is never sold, is never transferred for advertising or other unrelated purposes, and is never used to train generalized AI or ML models. Humans do not read this data except with your explicit permission, for security purposes, or where required by law.
How we share information
We do not sell your personal information. We share it only with service providers (such as cloud hosting and the AI model provider) strictly as needed to operate the Service, and when required by law.
Data retention & security
We retain your information for as long as your account is active or as needed to provide the Service. We use reasonable administrative and technical safeguards, including encryption in transit and at rest, to protect your information. No method of transmission or storage is completely secure.
Your choices
- You can request access to or deletion of your data — including data synced from a connected service such as Google Health — by emailing support@karra.net. We action deletion requests within 30 days.
- You can disconnect any connected third-party service at any time from the app, which immediately stops further syncing. You can also revoke Karra's access to your Google account at myaccount.google.com/permissions.
- You can opt out of SMS messages by replying STOP.
Children
The Service is not directed to individuals under 18, and we do not knowingly collect information from children.
Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "last updated" date above when we do.
Contact
Questions about your privacy, or want your data deleted? Email support@karra.net and we'll respond within 30 days.