Privacy Policy – Danay

Last Updated: 26 August 2026 Effective Date: 26 August 2026 Welcome to Danay. We respect your privacy and your child’s privacy. We understand that children’s information, nutrition data, health-related information, photos, and AI conversations require a high level of protection and responsibility. This Privacy Policy explains how Danay collects, uses, processes, stores, protects, shares, and retains information when you use the Danay mobile application, website, related services, and AI-powered features. By using Danay, creating an account, or adding a child profile, you confirm that you have read and understood this Privacy Policy and that you are legally authorized to provide and manage information relating to the child profile you create. 1. Who We Are Danay is a children’s nutrition application designed to help parents and guardians support their child’s nutrition through features that may include: Age-appropriate nutrition plans Meals and recipes Nutrition goals Nutrient analysis Allergy, intolerance, medical-condition, and dietary restriction management Grocery lists Meal tracking Meal acceptance and rejection logging Meal photos and notes AI-powered nutrition planning Danay AI Coach Plan review and adjustment Paid subscription features The entity responsible for processing your data is: Legal Entity Name: Kuwait tech for AI services Co. Trading Name: Danay Country: State of Kuwait Registered Address: State of Kuwait Privacy Email: team@trydanay.com Support Email: team@trydanay.com Website: https://trydanay.com 2. Who Danay Is Designed For Danay is primarily designed for use by an adult parent, legal guardian, or authorized caregiver who manages nutrition information for a child. Danay is not intended for children to independently create accounts or manage their own profiles. When you add a child profile, you confirm that: You are the child’s parent, legal guardian, or otherwise legally authorized to manage the child’s information. You are permitted to provide information relating to that child. You consent to the processing necessary to provide Danay’s services. Because some information relates to children, we apply additional safeguards and aim to collect only information that is necessary for the service. 3. Information We May Collect The information we collect depends on the features you use. 3.1 Parent or Guardian Account Information We may collect: Name Email address Mobile number Country and country code Preferred language Parent role, such as mother or father Preferred name or form of address, if provided Profile photo, if provided Firebase account identifier Account creation date Authentication providers associated with your account If you sign in with Google, Apple, or Facebook, we may receive information that you have authorized that provider to share with us, such as your name, email address, or profile photo. We do not receive your Google, Apple, or Facebook password. 4. Child Profile Information Danay may ask a parent or guardian to provide information used to personalize the child’s experience, including: Child’s name or preferred in-app name Date of birth and age Sex Child photo, if voluntarily uploaded Height and weight, where applicable Age or developmental stage Nutrition-related information Food preferences Accepted and rejected foods Food exposure history Meal information Nutrition goals Parent or guardian notes We collect this information only to the extent necessary to provide relevant, personalized, and safe nutrition-related features. 5. Allergy, Intolerance, and Health-Related Information A child profile may contain information such as: Food allergies Food intolerances Dietary restrictions Medical, metabolic, or genetic conditions relevant to nutrition Foods that should be excluded or treated with caution Parent-entered notes relating to these conditions This information may be considered health-related or sensitive information. We use it only for purposes directly connected to the service, such as: Excluding unsuitable foods Evaluating meal safety Displaying warnings Generating more appropriate meal plans Suggesting safer alternatives Helping Danay AI Coach explain relevant restrictions We do not sell health-related information and do not use it for behavioral advertising. 6. Photos and User-Uploaded Content Danay may allow you to upload: A child profile photo Meal photos before serving Meal photos after eating Other files or images related to supported app features Meal photos may be used to provide features you request, such as: Meal logging Progress tracking Meal analysis, where available Helping the AI Coach understand meal context when applicable We do not use your child’s photos or meal photos for advertising purposes or sell them to data brokers or advertisers. 7. Conversations with Danay AI Coach When you use Danay AI Coach, we process the messages you send in order to: Understand your question Provide responses relevant to your child and plan Suggest suitable meals or alternatives Explain meal goals or nutrients Help you follow and manage the nutrition plan Maintain conversational continuity Detect recurring product issues and improve service quality The data processed may include: Conversation text Internal user and child identifiers Relevant nutrition plan context Meal data Relevant dietary restrictions Nutrition goals Conversation history necessary for context You should not enter unnecessary sensitive information such as government identification numbers, passwords, or payment card details into AI conversations. 8. Use of Artificial Intelligence Danay uses artificial intelligence to support features such as: Nutrition plan generation Meal analysis Recommendations AI Coach responses Meal replacement suggestions Personalization Product and service analysis where appropriate Information needed to provide these features may be processed by third-party AI service providers used by Danay, including Google/Gemini depending on the technical configuration of the service. We aim to transmit only the minimum amount of information reasonably necessary to perform the requested AI task. We also design Danay so that critical food-safety restrictions do not rely solely on an AI model’s memory where structured safety rules are available. Artificial intelligence does not provide medical diagnosis and does not replace a physician, pediatrician, dietitian, or other qualified healthcare professional. 9. Automated Personalization and Decision Support Danay may use automated systems and AI to: Select suitable meals Rank meal options Exclude meals that conflict with stored safety rules Identify relevant nutrition goals Suggest alternatives Update or rebuild nutrition plans when requested These processes are intended to personalize the service and do not constitute a medical diagnosis or final clinical decision. 10. App Usage and Analytics Data We may collect technical and behavioral information about your use of Danay, such as: App opens Sessions Screens viewed Time spent in the app Time spent on individual screens Recipe and meal interactions AI Coach usage Plan generation or rebuild events Nutrition-goal interactions App crashes and technical errors Device type Operating system App version Language Approximate country or region where available Technical or analytics identifiers needed to operate analytics We use this information to improve: App performance Stability User experience Screen design Feature quality Product understanding Release quality Danay may use Firebase Analytics / Google Analytics for Firebase and may export analytics data to Google BigQuery for analytics and business intelligence purposes. 11. AI Usage and Token Analytics Danay may record operational metadata relating to AI requests, such as: Request identifier Internal user identifier Internal child identifier Feature used AI model Input token count Output token count Thinking token count, where available Cached token count, where available Total token count Estimated AI cost Request timestamp We use this information to: Monitor AI performance Control costs Detect failures Improve system efficiency Understand AI usage by feature AI cost analytics are not intended to serve as a full copy of user conversations. 12. Subscription and Payment Information If you subscribe to a paid Danay plan through: Apple App Store; or Google Play, your payment is processed by the relevant store provider. Danay may receive information such as: Subscription status Subscription plan Start date Renewal date Cancellation status Transaction or subscription identifiers Information needed to validate entitlement Danay generally does not receive your full payment card number or CVV from Apple or Google. Payment processing is also subject to the applicable store provider’s own privacy policy and terms. 13. Notifications If you allow notifications, Danay may send messages such as: Meal reminders Plan reminders Important account updates Subscription notifications Relevant product notifications You may disable notifications at any time through your device settings. 14. Why We Use Your Information We use information to: Create and operate your account Create and manage child profiles Provide personalized nutrition plans Provide recipes and meal suggestions Determine age suitability Apply allergy and medical-condition restrictions Operate Danay AI Coach Suggest meal alternatives Update grocery lists Track plan progress Improve food safety Provide customer support Prevent fraud and misuse Improve app performance Analyze product usage Develop new features Manage subscriptions Meet legal and regulatory obligations 15. Legal Basis for Processing Depending on applicable law and your location, we may rely on one or more legal bases, including: Your consent Processing necessary to provide the service you requested Compliance with legal obligations Legitimate interests relating to service security, operation, and improvement, where permitted Parent or guardian authorization in relation to child information For sensitive or health-related information, we seek appropriate consent and use the information only for purposes directly connected to the service. 16. Parent or Guardian Authorization Because Danay processes information relating to children, the person creating a child profile must be the child’s parent, legal guardian, or another person with proper authority. Danay may require an acknowledgment or explicit consent before processing certain child-related information. 17. Service Providers and Third Parties Danay may use trusted third-party service providers to operate the service. These may include: Google Firebase / Google Cloud For services such as: Authentication Firestore Cloud Functions Cloud Storage Firebase Analytics Crash reporting Cloud infrastructure BigQuery Google Gemini or Other AI Services For AI-powered functionality. Apple For: Sign in with Apple App Store subscriptions Related iOS services Google For: Google Sign-In Google Play Billing Firebase Android-related services Meta / Facebook If Facebook Login is enabled and selected by the user. We share only information that is reasonably necessary to provide the relevant service. 18. Do We Sell Personal Information? No. Danay does not sell personal information relating to you or your child. We do not sell: Health-related information Child profiles Child photos Meal photos AI conversations Individual usage data to advertisers or data brokers. 19. Advertising Danay’s current business model does not rely on selling personal data or using health-related child data for behavioral advertising. If Danay introduces advertising in the future, this Privacy Policy and related platform disclosures will be updated before any materially different use of personal information. 20. Data Security We use technical and organizational safeguards designed to protect information against: Unauthorized access Unauthorized modification Loss Disclosure Misuse Destruction Measures may include: HTTPS/TLS encryption Firebase Authentication Access controls Firestore security rules Secure secret management Administrative access restrictions Audit logs where appropriate Least-privilege principles Separation of operational and analytics data Internal identifiers rather than directly identifying information where possible No electronic system can be guaranteed to be 100% secure. 21. International Data Processing and Transfers Some data may be processed or stored using infrastructure operated by Google, Apple, or other service providers in locations outside the State of Kuwait. Where data is transferred internationally, Danay seeks to use providers, technical measures, and contractual protections appropriate to the applicable legal requirements. 22. Data Retention We retain information only for as long as reasonably necessary for the purpose for which it was collected or to meet legitimate legal, operational, accounting, or security obligations. In general: Account data: retained while your account remains active and then deleted or de-identified in accordance with our deletion procedures and applicable obligations. Child profiles, plans, and logs: retained while needed to provide the service or until deletion is requested. Conversations: retained as necessary to support service operation, conversational continuity, and product improvement according to applicable retention settings. Photos: retained while needed for the relevant feature or until deleted by the user or through account deletion, unless legal retention is required. Aggregated analytics: may be retained for longer where information has been de-identified or aggregated and no longer reasonably identifies an individual. Security logs: may be retained for a reasonable period to investigate misuse, fraud, or security incidents. When information is no longer needed, we delete or de-identify it as appropriate. 23. Your Privacy Rights Depending on applicable law, you may have rights including: Requesting information about personal data we hold Accessing your personal data Correcting inaccurate information Updating child-profile information Deleting certain information Deleting a child profile Deleting your account Withdrawing consent where consent is the basis of processing Objecting to certain processing where permitted Contacting us with privacy complaints or concerns These rights may be exercised through the app where supported or by contacting us. 24. Account Deletion You may request deletion of your Danay account and associated data. The deletion process should be available: Inside the app: Settings → Account → Delete Account and through: Account Deletion Web Page: https://trydanay.com/delete We may require reauthentication or identity verification before processing a deletion request to prevent unauthorized deletion. Following a valid deletion request, we delete or de-identify information within a reasonable period, except where retention is required for: Legal obligations Ongoing disputes Fraud prevention Protection of users or Danay Financial records required by law Deactivation is not treated as a substitute for account deletion. 25. Deleting a Child Profile Without Deleting the Parent Account Danay may allow a parent or guardian to delete an individual child profile without deleting the entire parent account. Depending on the technical architecture and applicable obligations, deletion of a child profile may remove or de-identify related: Child profile information Meal plans Meal logs Photos Preferences Child-specific conversation context 26. Correcting Your Information You may update many account and child-profile details directly within Danay. If information cannot be updated through the app, contact us at: team@trydanay.com 27. Withdrawing Consent You may withdraw certain permissions or consent through: Danay settings Device settings Account settings Withdrawing consent that is necessary for a particular feature may prevent Danay from providing that feature. 28. Camera, Photos, and Device Permissions Danay may request access to device features only when necessary. For example: Camera / Photos: To add a child profile photo or meal photo. Notifications: For reminders and important service updates. Installing Danay does not automatically give us access to these permissions. Access is controlled by your device operating system. 29. Information We Do Not Normally Require Unless a future feature clearly requires it, Danay does not normally need access to: Phone contacts Call logs Your private SMS messages Precise GPS location Continuous microphone access Files you do not choose to upload If a future feature requires additional information or permissions, Danay will update its disclosures and request appropriate permissions. 30. Internal Business Analytics Danay management may use internal analytics to understand service performance, including: User counts Daily, weekly, and monthly activity Subscription performance Engagement Screen usage Recipe usage Aggregate meal acceptance or rejection AI usage AI cost Retention Platform performance Administrative reporting should use aggregated or pseudonymous information whenever reasonably possible and should not expose unnecessary child health information. 31. Product Insights from AI Coach Conversations Danay may analyze AI Coach conversations to identify aggregated themes such as: Frequently asked questions Meal preparation challenges Meal rejection Product usability issues Feature requests Where possible, Danay uses aggregated insights rather than exposing raw conversations. Danay does not use private child-related conversations for advertising. 32. External Links Danay may contain links to third-party websites or services. Once you leave Danay, the privacy practices of those third parties are governed by their own privacy policies. Danay is not responsible for the privacy practices of third-party services it does not control. 33. Changes to This Privacy Policy We may update this Privacy Policy when: Features are added Data-processing practices change Service providers change Legal or regulatory requirements change We will update the “Last Updated” date. Where a change materially affects how personal or sensitive information is used, we will provide appropriate notice or seek renewed consent where required. 34. Security Incidents If a security incident affects personal information, Danay will respond in accordance with applicable legal and security requirements. Where required, Danay may notify: Affected users Relevant regulatory authorities 35. Country-Specific Privacy Rights Users may have additional privacy rights depending on the country in which they live. Danay aims to comply with applicable requirements in markets where it operates, including requirements relating to: Children’s data Health-related information Consent Access and deletion International data transfers 36. State of Kuwait For users in Kuwait, Danay processes information with regard to applicable Kuwaiti privacy and data-protection requirements, including the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority under Decision No. 26 of 2024, as applicable. 37. Children’s Privacy Protecting children’s privacy is a core principle of Danay. Accordingly: The main account is intended for a parent or guardian. Danay does not sell children’s data. Danay does not use child health-related data for behavioral advertising. Danay aims to collect only the minimum information needed. Children are not expected to independently create accounts. Child information is managed through a parent or guardian. Parents or guardians may request deletion of child data. Additional access controls are applied to sensitive information. 38. No Health Research Use Without Separate Authorization Using Danay does not mean that you consent to your child’s data being used in medical or clinical research. If Danay conducts future research that requires identifiable or health-related participant data, separate consent and any required regulatory approvals will be obtained. 39. No Sale of Health-Related Data Danay will not sell or rent: Health-related data Child profiles Allergy or condition information AI conversations Child photos to data brokers or advertisers. 40. AI Service Disclosure and Consent Some Danay features rely on external AI service providers. Where the use of an AI-powered feature requires personal or sensitive information to be shared with an external AI provider, Danay will provide appropriate disclosure and seek consent where required by applicable law or platform rules. 41. Contact Us For privacy-related questions or requests: Danay Privacy Team Email: team@trydanay.com Support: team@trydanay.com Address: State of Kuwait State of Kuwait Privacy/data requests: https://trydanay.com/delete Account deletion: https://trydanay.com/delete 42. Your Acknowledgment By creating an account and using Danay services that require processing of your information, you acknowledge that you have read and understood this Privacy Policy. When creating a child profile, you also confirm that you have the legal authority to provide and manage information relating to that child.