This policy explains how Kandake Labs LLC ("Kandake Labs," "we," "us") handles information in Reign (the "App"). It is written to be read, not to be survived. Where something is a genuine limitation rather than a feature, it says so.
- The short version
- What we collect, and in what form
- How identity separation works — and its limits
- Your vault, and what we genuinely cannot do
- AI features
- Who else touches your data
- How long we keep things
- Your rights, and how to use them
- What survives deletion, and why
- Users aged 13–17
- Security
- Changes to this policy
- Contact
1. The short version
The rest of this document is the detail behind those sentences, including the parts that are less flattering.
2. What we collect, and in what form
Reign holds information in three different states. The difference matters more than the list, so it is set out by state rather than by category.
a. Your identity — held separately
Your name and email address. These live in our authentication system, not on the tables that hold your health data. Your email is how you sign in; we send you a numeric code rather than storing a password.
b. Account and health basics — stored unencrypted
This is the part most privacy policies would blur, so plainly: the following are stored on our servers in ordinary readable form, protected by access controls and encryption-at-rest at the database level, but not by your vault key. Our staff and our database provider are technically capable of reading them.
- Date of birth, biological sex, and height
- Whether you are using a GLP-1 medication, which one, the dose, and the start date
- Your subscription status, trial end date, and Stripe customer reference
- Your communication preferences
- If you are 13–17: your guardian's name and email, and the consent record
These are stored unencrypted because the App and our billing need to act on them — a dose schedule the App cannot read cannot drive a reminder. We consider this a trade-off worth naming rather than hiding.
c. Everything you log — encrypted with your key
Your weight history, food and hydration logs, workouts, sleep, journal entries, side-effect notes, goals, recipes, shopping list, injection log, lab result documents and progress photos are encrypted on your device before they reach us. We store the ciphertext. We do not have your passphrase and cannot derive it, so we cannot read any of it.
d. Information we do not collect
- No advertising identifiers, no ad networks, no third-party trackers, no analytics SDKs.
- No location data.
- No contacts, photos library, or device sensors beyond what you deliberately upload.
- No card numbers. Payment details go directly to Stripe and never touch our servers.
3. How identity separation works — and its limits
Your health records are not filed under your name or your email. They are filed under a pseudonymous identifier derived from your email address using a keyed cryptographic hash (HMAC-SHA256), with a secret key held only on our servers.
This means a stolen copy of the health-data tables, on its own, does not tell an attacker who anyone is. That is a real protection and it is the reason the architecture is built this way.
4. Your vault, and what we genuinely cannot do
When you set up Reign you choose a passphrase. From it, your device derives a key using PBKDF2-SHA256 with 600,000 iterations, and uses that key to wrap the data key that encrypts your logs. Encryption is AES-256-GCM. We name the algorithms rather than saying "bank-grade" or "military-grade," which mean nothing.
Your passphrase never leaves your device. Neither does the data key. What we receive and store is an encrypted envelope: your data as ciphertext, plus the data key wrapped twice — once under your passphrase and once under your recovery code. Because that envelope is stored on our servers, you can sign in on a second device and unlock the same vault with the same passphrase.
5. AI features
Reign offers optional AI features: lab-result analysis, side-effect pattern analysis, recipe suggestions and goal encouragement. These require sending content to an AI provider, and you should understand exactly what that means.
- Our AI provider is Anthropic (the Claude API).
- When you ask Reign to analyse a lab result, the lab document itself — the PDF or image you uploaded — is decrypted on your device and sent to Anthropic so it can be read. It is not encrypted in a way Anthropic cannot open; it could not be analysed if it were.
- No identifier is sent with it. Your name, email and pseudonymous id are not included in AI requests. The provider receives the content and nothing that says whose it is.
- We do not store your content on the AI provider's systems, and the analysis that comes back is encrypted with your vault key before it is saved.
- AI features are optional, and we ask before the first time anything of yours is sent. You choose during sign-up — turn them all on, choose which ones, or decline — and declining does not affect the rest of the app. If you haven't turned a feature on, Reign shows you this disclosure before its first use and asks again.
- You control each feature separately. Settings has a switch for AI features as a whole and one for each feature, because each sends something different:
| AI feature | What is sent to Anthropic | When |
|---|---|---|
| Lab analysis | The lab document you choose to analyse | Only when you ask |
| Side-effect patterns | Your symptom and dose logs | Only when you ask |
| Recipe suggestions | Your grocery list | Only when you ask |
| Goal encouragement | A goal’s title | Automatically, when you set or finish a goal — if switched on |
- We record your acknowledgment of this disclosure, and every time you switch a feature on or off, so there is a record of exactly what you authorised and when. Switching a feature off stops it sending anything from then on; results you already have stay yours.
- If none are switched on, nothing of yours is sent to an AI provider — including goal encouragement, which Reign would otherwise generate on its own.
AI output is generated text. It is not medical advice, it can be wrong, and it does not replace your clinician. See the Medical Disclaimer in the App.
6. Who else touches your data
These are the only third parties involved in running Reign. All data is stored in the United States.
| Who | What they do | What they can see |
|---|---|---|
| SupabaseDatabase & auth | Stores our database and runs sign-in | Your name and email; the unencrypted account and health basics in §2b; the ciphertext of everything else, which they cannot read |
| NetlifyHosting | Serves the App and runs our server functions | Standard web server logs, including IP address |
| AnthropicAI provider | Powers the optional AI features | Only the content you submit for analysis, with no identifier attached. Nothing if you do not use AI features |
| StripePayments | Processes subscriptions | Your name, email, billing address and card details, which they collect directly. We never receive your card number |
| LoopsEmail | Sends product-update emails | Your name and email — only if you opted in to updates |
| MeroëConsent ledger (a Kandake Labs system) |
Records that you accepted our terms and disclaimers | Which agreements you accepted and when — Terms, medical disclaimer, AI use, each AI feature switched on or off, PT track, recovery code, email opt-in — each recorded separately, against your pseudonymous id. No health data |
| USDA FoodData Central and Open Food Facts | Food and nutrition lookups | The search term you type, when you search for a food. Not linked to your account |
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so and have no plans to. If that ever changes, it would require a new version of this policy and your explicit opt-in.
7. How long we keep things
| What | Kept for |
|---|---|
| Your vault contentsLogs, labs, photos, journal | Until you delete your account, then up to 30 days while backups expire |
| Account and health basics§2b | Until you delete your account, then up to 30 days while backups expire |
| IdentityName, email | Until you delete your account, then removed immediately |
| Consent recordsWhat you agreed to, and when | 7 years after your account closes. See §9 |
| Marketing contactIf you opted in | Until you unsubscribe or delete your account |
| Server logs | Up to 30 days |
8. Your rights, and how to use them
Depending on where you live you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to certain processing. We extend the following to everyone, regardless of location:
- Get a copy. Settings → Data & Backup → Export my data. This runs on your device and produces a file immediately — you do not have to ask us.
- Delete your account. Settings → Delete My Account. This removes your records from our servers, cancels any active subscription, and deletes your sign-in identity. It is immediate and cannot be undone.
- Correct something. Most of it is editable in the App. For anything that is not, email us.
- Stop marketing email. Unsubscribe in any email, or turn it off in the App.
- Ask us anything else, including a request in a form the App does not offer, at info@kandakelabs.com. We will respond within 30 days.
We will not charge you, degrade your service, or treat you differently for exercising any of these rights.
9. What survives deletion, and why
When you delete your account, we delete your health records, your encrypted vault, your account basics and your sign-in identity. Two things deliberately remain, and we would rather state them here than have you discover them later.
- Consent records. The record that you accepted our Terms and medical disclaimers, and when, is retained for 7 years against your pseudonymous identifier, with your account removed. This is our evidence of what was agreed. Deleting it would destroy the only proof that we obtained your consent properly, which protects you as much as us.
- Guardian details on a minor's record. If you gave guardian consent for a 13–17 user, your email remains attached to that minor's consent record even after you delete your own account — because your email is that record. Deleting your account cannot remove the evidence of consent you gave for someone else.
We may also retain information where the law requires it, for example financial records relating to payments.
10. Users aged 13–17
Reign is not for children under 13. We do not knowingly collect information from anyone under 13. The App asks for date of birth at sign-up and refuses accounts below that age. If we learn that someone under 13 has created an account, we delete it and its data.
Users aged 13–17 may use Reign only with the consent of a parent or legal guardian, given through the App's guardian-consent flow before the account activates. We collect the guardian's name and email in order to obtain and record that consent.
For users we know to be under 18, we do not use their information for targeted advertising or for profiling, and we do not sell or share it. A parent or guardian may contact us at info@kandakelabs.com to review, correct or delete their teen's information, or to withdraw consent — which closes the account.
11. Security
All traffic runs over TLS. Our database enforces row-level security so one account's rows are unreachable from another account's session. Server-side secrets are held in our hosting provider's encrypted environment store and are never sent to your browser. The most sensitive material — your logs, labs and photos — is additionally protected by encryption we cannot reverse, as described in §4.
No system is perfectly secure, and we will not claim otherwise. If a breach ever affects your personal information, we will notify you and the relevant authorities as required by law, and we will tell you what actually happened.
12. Changes to this policy
We may update this policy. The version and effective date at the top always tell you which one you are reading. If a change materially affects how we handle your information, we will notify you in the App and, where the law requires it, ask for your consent before the change applies to you. We will not make a material change retroactively.
13. Contact
Kandake Labs LLC
Loveland, Colorado, USA
info@kandakelabs.com
For privacy requests, please email us from the address on your Reign account where possible — it lets us confirm the request is yours without asking you for more personal information than we already hold.