Kilan privacy policy
Last updated: 3 November 2026
Kilan shows what your body burns next to what you eat. This page says which data the app uses, why, where it goes and how to exercise your rights.
Controller
NEXT BP, 127 rue de la Tour, 75016 Paris, France. Contact: karkegi@nextbp.com.
Data we use
Profile: first name, sex, age or birth date, height, weight, goal, target pace and onboarding answers. They compute your budget.
Meals: the text you write, photos of meals and labels, scanned barcodes, and what Kilan derives from them (foods, kcal, macros, activities). Photos are deleted as soon as they are read.
Apple Health, only if you allow it: Kilan reads your steps, active energy, sleep and weight. Steps and sleep stay on your iPhone; your daily weight and 7-day average active energy are stored to adjust your budget and your summary. If you turn it on in Settings, Kilan also writes each food you log to Health, with its calories and macros; nothing else is written there.
Account: an anonymous session at first, then your Apple identifier if you sign in with Apple.
Stomach, only if you turn it on in Settings: each discomfort you note (its time and strength). Kilan compares it on your iPhone with the foods noted in the 6 hours before; it never goes to an AI provider or to analytics. You can remove any of them in the app.
Subscription: a random billing identifier, the product, dates and status. Kilan never sees your payment details.
Analytics, only if you accept: actions taken in the app (for example "meal logged") with an opaque identifier. Never meal content, kcal, Health data, your name or email.
Notifications, only if you allow them: your iPhone's notification token, time zone and language, to send the Sunday recap at 6 pm. The recap says how many days you logged that week; never a meal, kcal or your weight.
Friends circle, only if you join it: the first name you choose, your friends and the encouragements exchanged (a preset message and its date). Your friends see that name, your days in a row and whether you logged a meal today; never a meal, kcal or weight. An encouragement or a new friend reaches you as a notification, with their first name. When you visit a friend's camp, Kilan keeps the visit (who, to whom, the day, the time and your midnight) until your day ends, so your friend sees your flame and first name; it is then erased within the hour, with no notification and no count of visits. Leaving the circle erases all of it.
Referral: your referral code, a friend's code if you joined Kilan with it (to give them their free month once your subscription is paid), and the free months your code earned, each with the App Store offer code given to you. Your friend only sees your code; you only see how many friends used it and your free months, never their names, subscriptions or data.
Service providers
Convex (database and server hosting, European Union region, Ireland).
AI models, through Convex's AI gateway (OpenAI, served by OpenAI, Microsoft Azure or Amazon Bedrock, including in the United States): receive the meal text or photo and the profile the estimate needs (sex, age, height, weight, goal), never your name or email. Request content is not kept in our logs.
Exa and Open Food Facts: receive the name or barcode of a product being looked up, never your identity.
Apple: Sign in with Apple, Apple Health, in-app purchases and notifications.
Superwall: subscription management, with the random billing identifier.
Expo (United States): passes the Sunday recap, friends circle and referral notifications on to Apple, with your iPhone's notification token.
Amplitude (European Union region): analytics, only with your consent.
Your data is never sold or used for advertising.
Legal bases
Performance of the service you ask for (profile, meals, budget, subscription, referral), your explicit consent for health data and Apple Health, your consent for analytics, and your consent for the friends circle, given by joining it.
Retention
Account data is kept as long as your account exists. An anonymous session expires after 90 days without use. Photos are deleted as soon as they are read. The friends circle is erased when you leave it.
Your rights
You can access, correct, delete or export your data, or object to its processing, by writing to karkegi@nextbp.com. You can delete your account and everything in it from the app (Settings > Delete my account), or by writing to the same address. You can withdraw analytics consent at any time in the app's Settings, and Health access in your iPhone's settings.
You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.