Privacy Policy
Keto28, operated by Lightning Command Lines LLC. Last updated June 17, 2026.
This policy explains what Keto28 ("we," "us") collects, how we use it, and the choices you have. Keto28 is a wellness and education app. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Keto28 is for adults 18 and older.
The short version
- Your health entries stay on your phone. Glucose, ketone, weight, photos, food logs, and progress are stored on your device, not on our servers, unless you choose to export them.
- Your account holds only your email, name, and subscription status on our server.
- We do not sell your personal information.
- You can delete everything — your account (and subscription) and your on-phone data — at any time.
What we collect
- Account information (on our server): your email address, first name, a securely hashed password, your platform, and your subscription plan, tier, and status.
- Health and progress data (on your device): the readings, photos, food logs, fasting windows, and program progress you enter. This stays local to your phone. Your device's own backup (iCloud or Google) may include it according to your device-backup settings and that provider's policies. Exporting saves a copy to a location you choose.
- Usage analytics (on our server): product-usage events (for example, that onboarding was started, a paywall was viewed, or a purchase occurred) with an app-generated identifier and, once you are signed in, your email. We use this to understand and improve the product. We do not collect your health entries in analytics.
- Payment information: purchases are processed by Stripe. We never receive or store your full card details; Stripe processes payments under its own privacy policy.
The optional AI coach (bring-your-own key)
If you choose to connect your own AI provider (such as Anthropic or OpenAI) to the coach, your messages — and any stats or medical flags you choose to share with the coach — are sent directly from your device to the provider you selected, using your own key. They are not routed through Keto28's servers, and we do not receive them. Your provider handles that data under its own terms. The coach is optional; you do not need it to use the app.
How we use information
- To provide your account, deliver your plan and subscription, and restore your purchase.
- To send the service messages you'd expect (for example, a reminder before a free trial ends).
- To understand product usage and improve Keto28.
- To comply with law and to protect the security and integrity of the service.
Sharing
We share information only with service providers that help us run Keto28 — notably Stripe (payments) and, only if you connect it, your own chosen AI provider. We may disclose information if required by law. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Retention and your choices
- Delete your account: Settings → Account → Delete account removes your account from our server and cancels any active subscription.
- Erase on-phone data: Settings → Erase all my data removes your logs, progress, settings, and private photos from the device.
- Export your data: Settings → Export my data saves a copy you control.
- We keep account and analytics data only as long as needed for the purposes above or as required by law.
Security and breach notification
We use reasonable safeguards to protect your information. Keto28 is a consumer health app and is generally not a HIPAA-covered entity; where the FTC Health Breach Notification Rule applies, we will notify affected users and the FTC of a breach of unsecured personally identifiable health data as required. No method of storage or transmission is perfectly secure.
Children
Keto28 is for adults 18 and older. We do not knowingly collect information from anyone under 18.
Changes
If we update this policy, we will revise the "Last updated" date above and, where appropriate, notify you in the app.
Contact
Questions or requests: [email protected].