Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how Kessa collects, uses, and shares information when you use the Kessa website and web app (the "Service"). Kessa is a fictitious business name registered in Placer County, California by Nectar Gummies LLC, a California limited liability company (file number B20250319336), referred to here as "Kessa", "we", "us" or "our". Kessa is a consumer-wellness service and is not a healthcare provider.

1. Information we collect

  • Account information: your email address, used to create and sign in to your account.
  • Quiz answers: information you enter to generate your protein target, such as weight, height, strength-training status, GLP-1 phase, and your primary concern. We use these to estimate lean body mass and calculate a protein target.
  • Activity in the app: the foods and protein you log, dates, and program interactions. Any medication/"shot" log is recorded as a date only — we do not collect dose amounts.
  • Payment information: subscription payments are processed by Stripe. Kessa does not store your full card number; we may store limited billing details and your subscription status.
  • Technical information: device/browser type, IP address, and usage data collected automatically.
  • Marketing-page referral tracking: on our public marketing pages we use Rewardful, an affiliate-referral service, to attribute sign-ups to the person who referred you (see "Cookies & analytics").

2. How we use information

To provide and operate the Service (calculate your target, store your logs, authenticate you); process your subscription and refunds; send transactional messages (sign-in links, receipts, renewal and refund notices); provide support; maintain security and prevent abuse; improve the Service; and comply with legal obligations. We do not use your health-related inputs to make decisions about you beyond providing the Service's features.

3. How we share information

  • Service providers (subprocessors) that process information on our behalf under contract: Stripe (payments), Supabase (database, authentication, and app hosting), Netlify (website/app hosting), Resend (transactional email), Anthropic (AI processing of coach conversations and food photos), Rewardful (referral attribution), and Google Workspace (our business email).
  • Legal and safety; business transfers: when required by law or to protect rights and safety, and in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. We don't sell your personal information

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising.

5. Cookies & analytics

We use cookies and similar technologies to keep you signed in and operate the Service. On our public marketing pages, Rewardful sets a cookie so that a visit from an affiliate link can be credited if you later subscribe.

6. Sensitive information

Some information you provide (such as weight and GLP-1 phase) may be considered sensitive personal information. We use it only to provide the Service's features and as described in this Policy.

7. Your California privacy rights

If you are a California resident, you have the right to know/access the personal information we hold about you; delete it; correct it; opt out of any sale or sharing; and limit the use of sensitive personal information — and to not be discriminated against for exercising these rights. To exercise a right, email hello@kessahealth.com. We will verify your request as required by law.

8. Data retention

We keep your account information for as long as your account is active. After you close your account, we delete or de-identify your personal information within 90 days, except records we must keep to meet legal, tax, or accounting obligations, which we retain for as long as the law requires. We keep records of auto-renewal consent for as long as the law requires.

9. Security

We use reasonable administrative and technical measures to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18.

11. US-focused service

The Service is intended for users in the United States. We do not target or knowingly offer the Service to individuals in the EU or UK. If you access it from outside the United States, you do so on your own initiative and are responsible for local law.

12. Changes to this Policy

We may update this Policy. If changes are material, we will notify you (for example, by email or in-app). The "Last updated" date shows the current version.

13. Contact

Privacy questions: hello@kessahealth.com · Nectar Gummies LLC, 2305 Spanish Trail, Rocklin, CA 95765.