Full Privacy Notice

[Company name] (“Kineat”), located at [address], is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and other applicable rules.

Contact for privacy matters: contacto@kineat.com.

Depending on whether you use the app (patient) or the portal (specialist), we may process:

• Identification and contact: name, email address and, if you sign in with Apple or Google, that account's identifier.
• Usage and session data: device, operating system, language and technical security logs.
• Health and food data (sensitive personal data): the meal plan assigned by your specialist, preferences, exclusions or allergies, the plates you build and the meals you mark as eaten.
• Connection data: which specialist you connect with, and the date and status of your consent.
• If you are a specialist: professional name, email, dish catalog and the plans you prescribe.

We do not ask for financial data or precise location for the basic operation of the service.

Health and food data are sensitive. We only process them with your express consent, which you give when you enter your plan or connect with a specialist, through an affirmative action in the app. You can withdraw it at any time (see “ARCO rights and withdrawal”).

We do not use this data for advertising and we do not sell it. We do not make automated decisions that produce legal effects on you.

Purposes necessary for the service:

• Create and maintain your account and authenticate you (for example, with one-time codes by email).
• Show you your plan, let you build your plates and record what you eat.
• Connect you with your specialist and, if you decide so, share your plan and follow-up with them.
• Provide support, keep the service secure and prevent abuse.
• Comply with legal obligations.

Additional purposes (you can object by writing to contacto@kineat.com):

• Improve the product with aggregated statistics that do not identify you.
• Send you notices about service news.

Your specialist only accesses your information when you agree to connect (by code, link or QR code). Once connected, they can see the plan they assigned you and your follow-up (which plates you built and what you marked as eaten).

You can revoke this access at any time from Profile in the app. When you revoke it, your specialist stops seeing your new information and your history in Kineat.

Any processing your specialist does outside Kineat (for example, in their office) is their responsibility, under their own privacy notice.

To run the service we use providers that process data on our behalf, as processors, under contract and with security measures: Supabase (database, authentication and storage) and email delivery services. These providers may store data on servers outside Mexico.

Apart from the above and your specialist (if you connect), we do not transfer your data to third parties, unless a competent authority requires it under the law.

You have the right to Access your data, Rectify it, Cancel it and Object to its processing (ARCO rights), as well as to withdraw your consent and limit the use or disclosure of your data.

To exercise them, write to contacto@kineat.com from your account's email stating your name, the right you are exercising and a clear description of your request. We will reply within 20 business days at most and, where appropriate, carry out the request within the following 15 business days.

If you believe your right was not honored, you can go to the competent data protection authority in Mexico.

We keep your data while your account is active. If you cancel it, we delete or anonymize your data within a reasonable period (up to 90 days), except for data we must keep by legal obligation or to handle claims, for as long as the law requires.

We apply reasonable administrative, technical and physical measures: encryption in transit, per-user access control at the database level, passwordless authentication and security logs. No system is infallible; if a breach occurs that affects your rights, we will tell you.

Kineat is intended for people over 18 years old. We do not knowingly collect data from minors; if we detect a minor's account, we will cancel it. If you think this happened, let us know at contacto@kineat.com.

Kineat organizes the plan your specialist gave you; it does not diagnose, does not prescribe and does not replace a consultation with a health professional.

The site only uses technical cookies: the ones needed to sign in to the portal and one that remembers your language (kineat_locale). We do not use advertising cookies or cross-site tracking.

If we change this notice, we will publish the new version on this page and, when the change is significant, let you know in the app or by email.