How KitchenOS protects your family's data.

Your data lives in Mumbai

Everything KitchenOS stores about your household — members, health profiles, medications, meal plans, pantry, shopping lists, photos, voice clips — lives in Google Cloud's Mumbai region (asia-south1). And it isn't just storage: our own application logic, the serverless functions behind meal planning and the safety checks, runs in the same region. So your personal data is both stored and processed inside India, and nothing is stored at rest outside the country.

There is one carefully-bounded exception, and it's the next section.

What AI providers see — and what they never see

Some features call third-party AI models to generate meal suggestions, and those providers' APIs are hosted outside India. So we minimise what crosses that line. The prompt we send is de-identified and contains only what's needed to plan a meal: household role, age band, dietary preferences, and pantry items.

What we never send to AI providers: your medication names and your free-text health notes. Those stay on our own infrastructure in Mumbai. The prompt data the providers do receive is transient — accessed through commercial API endpoints that don't store it for model training — and it is not stored at rest abroad.

One more default worth knowing: your data is not used to train AI models unless you explicitly opt in, and the setting for that lives in the app under Settings → Privacy → AI training. Default is opt-out.

The safety check that doesn't use AI at all

Drug-food interaction alerts — the warnings that, say, flag certain foods for someone on specific medication — are deliberately not generated by an AI model. AI models can make things up, and that's not acceptable in a safety path. Instead, these alerts come from a deterministic, curated interaction ruleset: the same food rule applied the same way every time. They are advisory, built to help you ask better questions, and they are not a substitute for your doctor or pharmacist.

What a helper sees — and what they can't

Many Indian households cook with help, so KitchenOS has a dedicated helper mode — and it's also a privacy boundary. A helper signs in with their own PIN to a separate, limited view: today's menu, the recipe, and the quantities. That's it. They don't see your family's health profiles, medications, personal details, or anything beyond today's cooking. Dignified access for the person helping you cook; privacy for everyone else in the house.

Deleting your data actually deletes it

You can delete your entire account from inside the app (Settings → Account → Delete account). Here's what happens next:

• A 30-day grace period. Deleting an account that holds a family's meal history is a big step, so there's a window to change your mind — sign back in during the 30 days and the deletion is cancelled.
• Then a permanent purge. After the grace period, everything is erased — database records and files alike, including photos, voice clips, and any data exports still on our storage. This is irreversible.
• Health data goes faster. If you remove a single member, their health profile and medications are purged within 7 days — you don't have to delete the whole account.

Media also cleans up after itself by default: food photos auto-delete after 90 days and voice clips after 30, and you can shorten or extend both in Settings → Privacy.

Your rights, exercisable from inside the app

Under India's Digital Personal Data Protection Act, 2023, you have rights over your data — and we've built them as buttons, not email threads:

• Export a machine-readable copy of everything we hold about you (Settings → Privacy → Export my data).
• Correct your profile, household, health information, and medications directly — no form, no review queue.
• Erase the whole account, as described above.
• Withdraw consent for a specific purpose — AI meal planning, drug-food safety, photo logging — without deleting your account. The dependent features simply turn off.

Who to write to

Three role-based mailboxes, each with a clear job:

• support@ganakys.com — product help and general questions.
• privacy@ganakys.com — anything about your data; if something in the policy is unclear, we'll explain it.
• grievance@ganakys.com — formal complaints. We acknowledge within 7 days and aim to resolve within 30, as the DPDP Act requires. Our Grievance Officer is Snehalatha Ganaky (snehalatha@ganakys.com).

And what we don't do

We don't sell personal data. We don't share it with advertisers, insurers, or employers. We don't run ads, and we don't use third-party advertising trackers. You're our customer, not the product.

The legally complete version of everything above — data classes, retention periods, processors, lawful bases — is in the Privacy Policy. If the two ever seem to disagree, the policy is the authoritative one; tell us at privacy@ganakys.com and we'll fix the explanation.