Privacy Policy

Last Updated: October 28, 2026

Welcome to Kasane! We’re committed to protecting your privacy and handling your family’s health information responsibly. This Privacy Policy explains how the Kasane app for iPhone (the “App”), made by Enchant, handles your information. It covers the App from version 3.1 on, including TestFlight builds. Section 14 covers the Kasane beta list on our website.

Your data lives on your iPhone
Your journals, records, and settings are stored on your iPhone and sync through your own iCloud account, under Apple’s control. There’s no Kasane account, and Kasane runs no server that handles your data.
Claude helps, once you agree
Ask, document reading, the Journal’s composer, questions, and Focus Plans use Anthropic’s Claude. The App asks for your OK first, and each request goes from your iPhone straight to Anthropic.
Each request carries what it needs
A request carries what you typed or said and the context that feature needs. Documents are read on your iPhone, and names and other identifiers are removed before any text goes to a model.
Anthropic does not train on your data
Data sent through Anthropic’s API is not used for model training. Anthropic retains inputs and outputs for up to 7 days for safety monitoring, then deletes them.

1. Information the App Keeps

The App keeps the information below on your iPhone and in your iCloud account. Enchant doesn’t receive it, apart from what section 4 describes for requests to Anthropic.

Profiles: for you and each person you add, such as a child or a parent you care for: name, photo, birthday, sex, goals, and status.
Health profile: conditions, medications, family health history, how you live, health notes, and each person’s care team, with a list for the next visit.
Journal: the notes, meals, symptoms, workouts, photos, and check-ins you type, say, or add, and your answers to daily questions.
Labs and documents you add, and the values you confirm from them.
Routines, habits, questions, and experiments: what you’re working on, the habits you check off, the changes you try, and their look-backs.
Content the App generates, such as your morning brief, Focus Plans, readings of your journal, suggestions, and answers from Ask.
Apple Health data, read on your iPhone with your permission (section 5).

If you dictate, your words are transcribed on your iPhone.

2. How the App Uses It

Keep each person’s journal and record, and show your day.
Answer questions about someone’s health from their own record.
Help with questions and experiments, coach habits, and look back on what changed.
Share what you choose with the people you connect with (section 6).

3. Where It’s Stored, and for How Long

On your iPhone and in your iCloud: Your data is stored on your iPhone and syncs through your own iCloud account (CloudKit), under Apple’s control. There’s no Kasane account, and Kasane runs no server that stores, relays, or reads your data.
Security: We rely on the protections iOS and iCloud provide. No system is 100% secure.
Retention: Your data stays until you delete it (section 10). Enchant keeps no copy of your personal or health data.

4. AI Requests

The App uses Apple’s models for some tasks, and those requests stay within Apple. Ask, document reading, the Journal’s composer, questions and experiments, and Focus Plans use Anthropic’s Claude. The App asks for your OK before it sends anything to Claude.

What is sent: A request carries what you typed or said and the context that feature needs. For the Journal, that’s the day you’re writing in, routines, recent meals, and open questions, plus a summary of that day’s Apple Health data when it’s your own journal. For Ask, it’s a summary of that person’s record (their labs, documents, and events). Other features send your words and a summary of the parts of that person’s record they use. Photos you attach are sent as images.
How it is sent: Requests go directly from your iPhone to Anthropic. The App proves it’s a genuine Kasane build with Apple’s App Attest, so it carries no API key, and no Kasane server sits in between.
Anthropic’s data handling: Anthropic does not train on data sent through its API. It retains API inputs and outputs for up to 7 days for safety monitoring, then deletes them. Please review Anthropic’s Privacy Policy and API Terms.

5. Documents, Lab Reports, and Apple Health

Documents you add are read on your iPhone with Apple’s text recognition. Before any of the text goes to a model, the App strips identifiers such as names, dates of birth, record, member, and account numbers, phone numbers, and email and street addresses. This reduces what a model sees; it can’t promise to catch every identifier. Values found in a document wait for your review before they join the person’s record.

With your permission, the App reads Apple Health data on your iPhone to fill in your day (sleep, workouts, and overnight readings such as heart rate), to check off habits it can confirm, and, when you choose Add from Apple Health, to list the medications you’ve recorded there so you can pick which to add. The App reads Apple Health and never writes to it.

6. Sharing With People

When you connect with another adult by invite code, Kasane shares your support card with them through Apple’s CloudKit sharing: your name and photo, the one thing you’re working on, about a month of the days you got it done, your status and time zone, and the asks, answers, and cheers you write.

You can also choose to show a connection parts of your own record: kinds of journal entries (meals, workouts, notes, and routines and habits) from the last 7 days, the last 30 days, or all of them, and parts of your health profile (birthday and sex, conditions, medications, family history, how you live, health notes, labs, documents, and care team). Nothing is shared until you turn it on, and anything you turn off leaves their phone. They see a read-only copy, unless you also let them add entries and check off habits, or add documents. Photos and Apple Health data stay on your phone.

When you share a child with a co-parent, that child’s profile and records are shared with them through CloudKit, and they can write in the child’s journal, check off the child’s habits, and see and add to the child’s labs and documents from their own phone. Either of you can end a connection in the App, and ending it stops the sharing.

7. Exports and Outside AI Agents

In Settings, you can export a person’s data as a file you save, and import a Kasane export file. What happens to a file you export is up to you. Kasane doesn’t connect your journal to outside AI agents: an agent can read only what you share with it yourself.

8. Subscriptions

Kasane Family, and the earlier Inner Circle plans, are sold through the App Store, and Apple processes payment. We don’t receive your payment information. The App receives a transaction identifier from Apple that confirms your active plan, used only to unlock features. You can manage or cancel a subscription anytime in your Apple Account settings.

9. Usage Data, and No Sale of Your Data

The App contains no analytics or advertising code and doesn’t send us usage data. If you’ve chosen to share analytics with app developers in your iPhone’s settings, Apple gives us aggregated usage and crash reports. If you send feedback or crash reports through TestFlight, Apple shares them with us.

We do not sell your personal data. We won’t share your information with other third parties unless required by law, to protect our rights, or in a merger or acquisition (with prior notice).

10. Your Control and Choices

Access and Correction: See and edit each person’s journal and record in the App.
Deletion: Delete entries, documents, or a person in the App. Settings › Delete Account removes everything from this iPhone and your iCloud account. Uninstalling the App removes the data on that iPhone.
AI: Claude is part of how Kasane works. Features that use it ask for your OK first and don’t run without it. To stop after agreeing, Settings › Delete Account removes your data from this iPhone and your iCloud account.

11. Children’s Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Parents and caregivers can keep a journal for a child in the App; it’s stored on the parent’s iPhone and iCloud like the rest of their data, and shared only with a co-parent the parent chooses. If you believe a child has given us personal information, please contact us so we can take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via the App or other methods. Continued use after updates constitutes acceptance of the new policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at: legal@kasanelife.com

14. The Kasane Beta List

This section covers the Kasane beta list: the signup form that was on kasanelife.com before the App Store launch, operated by Enchant, and the emails it sent. Updated October 28, 2026.

What we save

Your email address, the signup time, and a record of your permission to receive Kasane beta invitations and updates. The form does not ask for health information.

Why we save it

So we can invite you to the beta and share updates about testing Kasane. When you join, Paul sends you a welcome email (reply to it and it reaches him), and he gets a note that you joined. Joining the list does not create an app account, start a subscription, or guarantee immediate beta access.

Where it goes

The list is stored in a private Cloudflare database in Enchant’s account. Our team can access it to manage beta invitations. There is no public endpoint for reading the list. Beta emails are sent through Cloudflare’s email service. This page does not record your form input in analytics or session recordings.

Keeping the form working

Cloudflare processes network information to serve requests. The signup service uses a short-lived hash derived from the connecting network address to limit repeated attempts. Its counters expire within 24 hours and are removed daily; the service does not store the raw network address in the beta list.

If you reply

Our welcome email asks a few questions you can answer by replying. Replies go to Paul’s inbox (paul@kasanelife.com, hosted by Google Workspace), and we read them to learn what families need from Kasane and to shape the beta. A reply may include health information about you or someone you care for, so share only what you’re comfortable with. Replies stay in that inbox; they aren’t added to the beta list or to any app account, and we don’t share them outside Enchant except with Google, which hosts the inbox. We delete your replies whenever you ask us to, and asking to leave the beta list counts as asking. Otherwise they stay in the inbox, including after an inactive signup expires from the list.

Changing your mind

Email pvm@enchant.co to ask us to remove your signup or correct your email. Signup records are removed after one year without a renewed signup. You can also ask to stop receiving beta emails whenever we contact you.

The app

This section covers the beta list only. Sections 1 to 13 cover the App, including TestFlight builds, and the App’s terms are on their own page.

California Privacy Notice

Last Updated: October 28, 2026

This California Privacy Notice supplements the information in our Privacy Policy and applies solely to residents of California ("consumers" or "you"). We provide this notice to comply with the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 ("California Privacy Law").

Any terms defined in California Privacy Law have the same meaning here.

Information We Collect

In the past 12 months we have collected the following categories of personal information:

Identifiers — device identifiers and email address when you contact support; email address, and the time and version of your consent, when you joined the Kasane beta list.
Personal information under Cal. Civ. Code § 1798.80(e) — name, date of birth, biological sex (when supplied by you).
Protected classification characteristics — age (derived from date of birth) and sex.
Commercial information — records of in-app subscriptions or purchases (if any).
Internet or similar network activity — limited, anonymized usage metrics describing your interaction with the App (only what is provided by Apple's App Store Connect); and, when you submit the beta signup form, a keyed hash of your network address, used only to limit repeated attempts and deleted within 24 hours.
Inferences — AI-generated Focus Plans, habit suggestions, readings of your journal, and answers, based on your health data and goals.
Sensitive Personal Information — health information you add or the App reads with your permission (conditions, medications, family health history, journal entries, check-ins, labs and documents, and Apple Health data), and AI-generated health content; and any health information you chose to include when you replied to a Kasane beta email.

Sources of Personal Information

Directly from you (profiles, journal entries, check-ins, and the documents you add).
From Apple Health on your iPhone, with your permission.
Indirectly from you (limited App usage events via Apple's App Store Connect).
Directly from you when you joined the Kasane beta list on our website (email address and consent), and when you reply to a beta email.
Automatically when you submitted the beta signup form (network information, processed by Cloudflare).

Use of Personal and Sensitive Personal Information

We use or disclose personal and sensitive personal information to:

Provide and personalize App functionality (keep journals and records, answer questions, generate Focus Plans, and help with questions and experiments).
Support, develop, and improve the App.
Respond to your support inquiries.
Send the Kasane beta invitations and updates you asked for, and keep the signup form working by limiting repeated attempts.
Read replies to beta emails to learn what families need and to improve Kasane.
Comply with legal obligations or law-enforcement requests.

We do not use sensitive personal information for purposes outside those allowed by Cal. Civ. Code § 1798.121(a).

Sharing Personal Information

During the past 12 months we have disclosed the following categories of personal information to Anthropic, PBC (our AI service provider) strictly for processing AI requests. Requests go directly from your iPhone to Anthropic, with no Kasane server in between:

Personal information categories in Cal. Civ. Code § 1798.80(e).
Protected classification characteristics.
Inferences drawn from your data.
Sensitive Personal Information (health context needed for AI generation).

We enter contracts requiring Anthropic to keep this information confidential and use it only to perform the requested service. Anthropic does not train on data sent through their API and retains it for up to 7 days for safety monitoring before deletion.

We have also disclosed identifiers (your email address and consent record) and internet or network activity information to Cloudflare, Inc., which hosts our website, stores the Kasane beta list and sends its emails on our behalf as a service provider, and the contents of replies to beta emails (which may include sensitive personal information) to Google LLC, which hosts our email inbox as a service provider.

We have not "sold" or "shared" personal information (including sensitive personal information) as those terms are defined under California Privacy Law, and we have no actual knowledge of selling or sharing personal information of consumers under 16.

Your Rights and Choices

California residents have the right to:

Know / Access & Data Portability — request details on personal information collected and receive a copy.
Delete — request deletion of personal information, subject to legal exceptions. You can delete entries, a person, or everything (Settings › Delete Account) in the App. You may also uninstall the App to remove the data on that iPhone. To remove a beta list signup, see section 14.
Correct — request correction of inaccurate personal information (most data can be edited directly in the App).
Opt-Out of Sale/Sharing — not applicable, as we do not sell or share personal information (including for cross-context behavioral advertising).
Right to Limit Use of Sensitive Personal Information — not applicable because we use Sensitive Personal Information solely for purposes permitted by California Privacy Law. You can restrict processing by not agreeing to the App’s AI features or by deleting your data in the App.
Non-Discrimination — exercise of these rights will not result in discriminatory treatment.

How to Exercise Your Rights

Submit a verifiable request by emailing legal@kasanelife.com.

Only you (or a legally authorized representative) may submit a request. You may make two access/portability requests in a 12-month period. We will verify your identity before processing the request and will respond within 45 days (or up to 90 days with notice).

Retention

We retain personal information only as long as reasonably necessary to provide the App and its features or as required by law. Your data is stored on your device (and in your iCloud account) until you delete it. Kasane does not keep a server copy of your personal or health data. Transmissions to Anthropic are subject to their retention policy (up to 7 days for safety monitoring). Beta list signups are kept until you ask us to remove them and are deleted after one year without a renewed signup; the signup form’s rate-limit counters are deleted within 24 hours. Replies to beta emails are kept in our email until you ask us to delete them; asking to leave the beta list counts as asking.

Changes to This Notice

We may update this notice at any time. When we do, we will post the updated notice in the App and revise the "Last Updated" date. Continued use of the App after changes constitutes acceptance of the updated notice.

Contact Information

For questions about this notice, our data practices, or your California privacy rights, contact us at legal@kasanelife.com.