Privacy notice

Privacy

Version 1.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

Kreedo, LLC (“Kreedo”, “Company”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to kreedo.ai, our subdomains such as app.kreedo.ai, and our mobile and desktop applications and related services (together, the “Services”).

Because Kreedo is a health and self-optimization platform, we handle information about your body, mind, and wellbeing that is especially sensitive. We treat it that way. Please read this policy carefully, together with our Terms of Use and Disclaimer.

Quick summary (not a substitute for the full policy). We collect the account, usage, and health-and-wellness information you give us or connect (including bloodwork, labs, assessments, genetic data, wearable data, and photos), and we use it to run the Services and generate your personalized insights. We rely on trusted service providers (hosting, storage, analytics, email, payments, AI, wearable/lab/genetic data) to do this. We do not sell your personal information or your health data, and we do not use your identifiable health data to train generalized AI models. You have rights over your data, including access and deletion. The machine never prescribes — Kreedo is not medical advice.

1. Who We Are and How to Contact Us

Kreedo, LLC is a Delaware limited liability company and is the controller of the personal information processed through the Services, except where we act as a processor on behalf of a business customer (a “B2B tenant”) that uses Kreedo to serve its own clients (see Section 13).

Privacy / data-protection contact: privacy@kreedo.ai
Postal address: Kreedo, LLC, 131 Continental Dr., Suite 305, Newark, Delaware 19713, USA

If you are in the EU/EEA or UK and we are required to appoint a representative or Data Protection Officer, their contact details will be listed above and on our website.

2. Information We Collect

We collect the following categories of information.

2.1 Information you provide directly.

Account and identity data: name, email address, password, and profile details you choose to add (such as age range, sex, goals, and preferences).
Communications: messages, support requests, survey responses, and other content you send us.
Payment information: when you purchase a Subscription, our payment processor collects your payment-card or billing details. We do not store full card numbers; we receive limited information such as the last four digits, card type, and billing status.

2.2 Health and wellness data you submit or generate (“Health Data”). This is sensitive information and may include, without limitation:

Bloodwork and laboratory results; biomarker, hormone, and metabolic data.
Genetic and genomic trait data (for example, from a connected genetic testing provider).
Microbiome and related test results.
Medical history, symptoms, conditions, medications, and supplements you record.
Psychometric, personality, and other assessments and questionnaires you complete.
Body composition, measurements, weight, and other physical metrics.
Body, face, food, and progress photos and images you upload.
Nutrition and dietary logs.
Notes, journals, and other health, physiological, mental-wellness, or lifestyle information you enter.
Insights, scores, correlations, and recommendations we generate from the above.

2.3 Data from devices and services you connect (“Connected Data”). When you connect a wearable, health device, lab, genetic provider, calendar, or other third-party account, we receive data from that source according to the permissions you grant — for example, sleep, activity, heart-rate and heart-rate-variability, readiness/recovery scores, workouts, and other measurements from wearables and health platforms.

2.4 Information collected automatically. When you use the Services, we and our analytics/error-monitoring providers automatically collect technical and usage data, such as device and browser type, operating system, IP address, approximate (coarse) location derived from IP, pages and features used, actions taken, timestamps, referring URLs, and diagnostic/crash data. We use cookies and similar technologies for this (see Section 11).

2.5 Information from other sources. We may receive information from your B2B tenant (for example, an employer, clinic, or coach that provides you access to Kreedo), from service providers that help us prevent fraud and secure the Services, and from public sources where permitted.

You are not legally required to provide Health Data. Providing it is voluntary, but some features will not work without it.

Much of the information described in Section 2.2 and 2.3 is “special category” personal data under the EU/UK GDPR (Article 9) — including data concerning health, genetic data, and biometric data — and “consumer health data” or “sensitive personal information” under U.S. state laws (for example, California’s CPRA and the consumer-health-data laws of Washington, Nevada, and Connecticut).

We process this data only where we have a lawful basis and, for special-category/consumer-health data, only on the basis of your explicit, opt-in consent (unless another lawful basis applies, such as establishing, exercising, or defending legal claims, or protecting vital interests). By choosing to submit or connect Health Data, you provide that explicit consent. You may withdraw your consent at any time (see Section 9); withdrawal does not affect processing carried out before withdrawal and may limit your ability to use certain features.

For other personal information, our legal bases under the GDPR are: performance of a contract (to provide the Services you request); legitimate interests (to secure, maintain, analyze, and improve the Services, prevent fraud, and communicate with you, balanced against your rights); consent (for optional cookies and certain communications); and compliance with legal obligations.

4. How We Use Information

We use personal information to:

Create and manage your Account and provide the Services.
Store, organize, and process your Health Data and Connected Data to generate your personalized insights, scores, correlations, and recommendations.
Operate features you choose to use, including AI-assisted extraction, summarization, and analysis (see Section 6).
Process payments, manage Subscriptions, and send billing and renewal notices.
Provide customer support and respond to your requests.
Secure the Services, authenticate users, prevent and investigate fraud and abuse, and enforce our Terms.
Analyze and improve the Services, including through de-identified or aggregated data that cannot reasonably be used to identify you.
Send you administrative and service messages and, where permitted, marketing communications you can opt out of.
Comply with legal obligations and enforce our legal rights.

We do not use your identifiable Health Data to train or improve generalized AI/LLM models. Any model-improvement work uses de-identified or aggregated data, or is limited to your own account to personalize your experience, consistent with applicable law.

We share personal information only as described here. We do not sell your personal information or Health Data, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California and other U.S. state laws).

5.1 Service providers and sub-processors. We use trusted third parties to run the Services. They may process personal information only on our instructions and under contracts requiring appropriate confidentiality and security. Our material service providers fall into these categories:

Cloud hosting, databases & authentication — e.g., Supabase (database, authentication, and storage; EU and US regions) and Vercel (application hosting and delivery).
File & media storage — e.g., Cloudflare R2, used to store uploads such as photos and lab documents.
Background processing & workflow — e.g., Inngest, used to run data-processing jobs.
Product analytics & error monitoring — e.g., PostHog (analytics, privacy-oriented / EU-hosted) and Sentry (error and performance monitoring).
Email & communications — e.g., Resend, used to send transactional and, where permitted, marketing email.
Payment processing — a third-party payment processor that handles Subscription billing under its own terms and privacy policy.
Artificial intelligence / large-language-model providers — providers used to extract information from documents and images, summarize data, and generate insights (for example, providers of vision and language models). See Section 6.
Wearable & health-device data — e.g., Oura, WHOOP, Withings, and Apple Health (Apple Watch), from which we import data you authorize (and additional platforms we may add over time).
Laboratory, biomarker & microbiome data — e.g., Viome and other lab/biomarker providers you connect.
Genetic data providers — e.g., PowerDNA and other genetic testing providers you connect.
Nutrition & food data — e.g., YourMove and USDA FoodData Central and similar databases.
Live coaching / video capture — e.g., Recall.ai, used to support live coaching features where you participate.

A current, more detailed list of our material service providers and sub-processors is maintained on our sub-processors / integrations page at kreedo.ai/legal#subprocessors, which forms part of this policy. Because the Services evolve, we may add, change, or remove service providers over time. When we add a provider within a category already described above, we will update that list; where a change materially affects how your personal data is processed, we will provide notice as described in Section 15.

5.2 Integrations you connect. When you connect a third-party account (a wearable, lab, genetic provider, calendar, or your own AI provider), data flows between Kreedo and that third party according to the permissions you grant. That third party’s own privacy policy governs its independent processing of your data. You can disconnect an integration at any time in your Account settings.

5.3 B2B tenants, coaches & practitioners. If you access Kreedo through a business, clinic, employer, or coach, we may share your information with that tenant or professional as needed to provide the Services they offer you. Your relationship with them is also governed by their own privacy practices.

5.4 Legal, safety & business transfers. We may disclose information (a) to comply with law, legal process, or lawful government requests; (b) to protect the rights, property, safety, or security of Kreedo, our users, or the public; (c) to enforce our Terms or investigate violations; and (d) in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

5.5 With your direction or consent. We share information in other ways with your consent or at your direction.

6. Artificial Intelligence, LLMs & “Bring Your Own Model”

The Services use artificial-intelligence and large-language-model (“LLM”) technologies to read documents and images (for example, to extract values from a lab PDF), summarize information, surface correlations, and generate insights and content.

AI providers as processors. Where we use third-party AI/LLM providers, they act as our service providers/processors and are contractually restricted from using your data for their own purposes. We do not permit them to use your identifiable Health Data to train their general models, and we minimize the data sent to what is needed for the feature.
The machine never prescribes. AI-generated output is informational and may be inaccurate. It is not medical advice, diagnosis, or treatment. See our Disclaimer.
Your own AI / LLM. If you choose to connect your own AI/LLM account or API key (“User-Provided AI Service”), then when you use a feature powered by it, we transmit your inputs and relevant data to the provider you selected, at your direction. That provider’s processing is governed by its terms and privacy policy, and for that independent processing the provider — not Kreedo — is responsible. You are responsible for deciding whether sending your data (including Health Data) to your chosen provider is appropriate.

7. International Data Transfers

Kreedo is a U.S. company operating a service used by people in different countries, and our service providers may be located in the United States, the European Union, and elsewhere. Where we can, we store personal data in a region appropriate to you (for example, we operate database infrastructure in both EU and US regions). When we transfer personal data out of the EU/EEA, UK, or Switzerland to a country not recognized as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with supplementary measures where needed. You may request a copy of the relevant safeguards by contacting privacy@kreedo.ai.

8. Data Retention

We keep personal information for as long as your Account is active or as needed to provide the Services, and thereafter only as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes. When you delete specific Health Data or your Account, we delete or de-identify the associated personal data from our live systems within a commercially reasonable period, except where retention is required by law or for the establishment or defense of legal claims. Residual copies may persist for a limited time in secure backups before being overwritten. De-identified and aggregated data, which cannot reasonably be used to identify you, may be retained.

9. Your Rights and Choices

Depending on where you live, you have some or all of the following rights. We honor these rights for our users regardless of location where practicable.

9.1 GDPR / UK GDPR rights (EU/EEA, UK). You have the right to: access your personal data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; data portability; and withdraw consent at any time. Where processing relies on consent (including for Health Data), you may withdraw it without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority (in Portugal, the CNPD; a list of EU authorities is available from the European Data Protection Board).

9.2 U.S. state rights (California and others). Subject to your state’s law, you may have the right to: know/access the categories and specific pieces of personal information we have collected; delete your personal information; correct inaccurate information; opt out of the sale or sharing of personal information (we do not sell or share it); and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights. California residents may also request information under California’s “Shine the Light” law.

9.3 Consumer health data (Washington MHMDA, Nevada, Connecticut). If you are covered by a consumer-health-data law, you have the right to confirm whether we collect, share, or sell your consumer health data, to access it, to withdraw consent to its collection and sharing, and to have it deleted. We do not sell consumer health data, and we do not collect or share it without your consent.

9.4 How to exercise your rights. Email privacy@kreedo.ai. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where the law permits. We may need to retain certain information to comply with legal obligations or complete transactions you began.

9.5 Marketing choices. You can opt out of marketing emails via the unsubscribe link or your Account settings. We may still send you non-promotional service and administrative messages.

9.6 Automated decisions. Kreedo’s insights are decision-support tools; we do not use your personal data to make decisions producing legal or similarly significant effects about you without human involvement. If this changes, we will provide the disclosures and safeguards the law requires.

10. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls and row-level security scoped to each data owner, private storage for uploaded media, secrets management, and multi-factor authentication for staff and privileged accounts. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for enabling available security features on your Account. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by law.

11. Cookies and Similar Technologies

We and our analytics providers use cookies, local storage, SDKs, and similar technologies to keep you signed in, remember preferences, measure and analyze usage, and improve the Services. We use privacy-oriented analytics and do not use the Services for third-party behavioral advertising. Where required by law (for example, in the EU/EEA and UK), we request your consent for non-essential cookies through a cookie banner, and you can manage your preferences there or through your browser settings. Because some browsers offer a Global Privacy Control (GPC) signal, we honor GPC as a valid opt-out of “sale”/“sharing” where applicable.

12. Children’s Privacy

The Services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, please contact privacy@kreedo.ai and we will delete it.

13. When We Act as a Processor for a Business (B2B)

Where a B2B tenant (such as a clinic, employer, or coaching business) uses Kreedo to provide services to you, that tenant is the controller of your personal information and Kreedo acts as its processor. In that case, the tenant’s privacy policy governs, and you should direct data-rights requests to the tenant; we will support the tenant in responding. Our processing is governed by our data-processing agreement with the tenant.

14. Third-Party Links

The Services may link to third-party websites and services we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. Review their policies before providing information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by prominently posting a notice on the Services before the change takes effect, and we will update the “Last revised” date above. Adding or changing a service provider within a category already described here is reflected on our sub-processors/integrations page and does not by itself constitute a material change. Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy, except where we are required to obtain your consent.

16. Contact Us

Questions, requests, or complaints about this Privacy Policy or your personal information:

Kreedo, LLC — Attn: Privacy 131 Continental Dr., Suite 305, Newark, Delaware 19713, USA Email: privacy@kreedo.ai

Terms

Version 1.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

How to read this document. These Terms of Use (the “Terms”) are a legally binding contract between you and Kreedo, LLC. They cover your use of our website, mobile and desktop apps, and services. Words in “quotation marks” and bold are defined terms. If you only read one thing, read the boxed callout below on arbitration, and Section 8 (Health Data, Uploads & User-Connected Services) and Section 12 (Limitation of Liability), which limit our responsibility to you.

The website located at kreedo.ai and our related applications, including any subdomains such as app.kreedo.ai (collectively, the “Site”), together with the products, features, content, and services made available through them (the “Services”), are operated by Kreedo, LLC, a Delaware limited liability company (“Company”, “Kreedo”, “us”, “our”, and “we”). Certain features of the Services may be subject to additional guidelines, terms, or rules, which will be posted in connection with such features. All such additional terms, guidelines, and rules are incorporated by reference into these Terms.

These Terms set forth the legally binding terms and conditions that govern your use of the Site and Services. By accessing or using the Site or Services, you are accepting these Terms (on behalf of yourself or the entity that you represent), and you represent and warrant that you have the right, authority, and capacity to enter into these Terms (on behalf of yourself or the entity that you represent). You may not access or use the Site or Services, or accept the Terms, if you are not at least 18 years old. If you do not agree with all of the provisions of these Terms, do not access and/or use the Site or Services.

PLEASE BE AWARE THAT SECTION 13.2 CONTAINS PROVISIONS GOVERNING HOW TO RESOLVE DISPUTES BETWEEN YOU AND COMPANY. AMONG OTHER THINGS, SECTION 13.2 INCLUDES AN AGREEMENT TO ARBITRATE WHICH REQUIRES, WITH LIMITED EXCEPTIONS, THAT ALL DISPUTES BETWEEN YOU AND US SHALL BE RESOLVED BY BINDING AND FINAL ARBITRATION. SECTION 13.2 ALSO CONTAINS A CLASS ACTION AND JURY TRIAL WAIVER. PLEASE READ SECTION 13.2 CAREFULLY.

UNLESS YOU OPT OUT OF THE AGREEMENT TO ARBITRATE WITHIN 30 DAYS: (1) YOU WILL ONLY BE PERMITTED TO PURSUE DISPUTES OR CLAIMS AND SEEK RELIEF AGAINST US ON AN INDIVIDUAL BASIS, NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS OR REPRESENTATIVE ACTION OR PROCEEDING, AND YOU WAIVE YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION; AND (2) YOU ARE WAIVING YOUR RIGHT TO PURSUE DISPUTES OR CLAIMS AND SEEK RELIEF IN A COURT OF LAW AND TO HAVE A JURY TRIAL.

IMPORTANT HEALTH NOTICE. Kreedo is a health, wellness, and self-optimization platform. It is not a medical provider, and the Services are not medical advice, diagnosis, or treatment. Kreedo does not prescribe, and the Services must never be used as a substitute for professional medical care. Please read our Disclaimer and Section 9 below. If you think you may have a medical emergency, call your doctor or your local emergency number immediately.

1. Accounts

1.1 Account Creation. In order to use certain features of the Services, you must register for an account (“Account”) and provide certain information about yourself as prompted by the account registration form. You represent and warrant that: (a) all required registration information you submit is truthful and accurate; and (b) you will maintain the accuracy of such information. You may delete your Account at any time, for any reason, by following the instructions on the Site. Company may suspend or terminate your Account in accordance with Section 11.

1.2 Account Responsibilities. You are responsible for maintaining the confidentiality of your Account login information and are fully responsible for all activities that occur under your Account. Where the Services offer or require multi-factor authentication, you agree to enable and maintain it. You agree to immediately notify Company of any unauthorized use, or suspected unauthorized use, of your Account or any other breach of security. Company cannot and will not be liable for any loss or damage arising from your failure to comply with the above requirements.

1.3 Eligibility. The Services are intended solely for users who are 18 years of age or older and who are legally able to form a binding contract. The Services are not directed to, and may not be used by, individuals under 18.

2. Access to the Services

2.1 License. Subject to these Terms, Company grants you a non-transferable, non-exclusive, revocable, limited license to use and access the Services solely for your own personal, non-commercial use, except where you have separately agreed to a business, team, or enterprise plan, in which case use is governed additionally by that plan’s terms.

2.2 Certain Restrictions. The rights granted to you in these Terms are subject to the following restrictions: (a) you shall not license, sell, rent, lease, transfer, assign, distribute, host, or otherwise commercially exploit the Services, whether in whole or in part, or any content displayed on the Services; (b) you shall not modify, make derivative works of, disassemble, reverse compile, or reverse engineer any part of the Services; (c) you shall not access the Services in order to build a similar or competitive website, product, or service, or to train, develop, or improve any machine-learning or artificial-intelligence model; and (d) except as expressly stated herein, no part of the Services may be copied, reproduced, distributed, republished, downloaded, displayed, posted, or transmitted in any form or by any means. Unless otherwise indicated, any future release, update, or other addition to functionality of the Services shall be subject to these Terms. All copyright and other proprietary notices on the Services (or on any content displayed on the Services) must be retained on all copies thereof.

2.3 Modification. Company reserves the right, at any time, to modify, suspend, or discontinue the Services (in whole or in part) with or without notice to you. You agree that Company will not be liable to you or to any third party for any modification, suspension, or discontinuation of the Services or any part thereof, except as expressly provided in Section 10 (Subscriptions & Billing).

2.4 No Medical Support or Maintenance. You acknowledge and agree that Company will have no obligation to provide you with any support or maintenance in connection with the Services, and that any support Company does provide is technical and administrative only and is never medical in nature.

2.5 Ownership. Excluding any User Content that you may provide (defined below), you acknowledge that all the intellectual property rights, including copyrights, patents, trademarks, and trade secrets, in the Services and their content are owned by Company or Company’s suppliers. Neither these Terms (nor your access to the Services) transfers to you or any third party any rights, title, or interest in or to such intellectual property rights, except for the limited access rights expressly set forth in Section 2.1. Company and its suppliers reserve all rights not granted in these Terms. There are no implied licenses granted under these Terms.

2.6 Feedback. If you provide Company with any feedback or suggestions regarding the Services (“Feedback”), you hereby assign to Company all rights in such Feedback and agree that Company shall have the right to use and fully exploit such Feedback and related information in any manner it deems appropriate. Company will treat any Feedback you provide to Company as non-confidential and non-proprietary. You agree that you will not submit to Company any information or ideas that you consider to be confidential or proprietary.

3. User Content

3.1 User Content. “User Content” means any and all information and content that a user submits to, or uses with, the Services — for example, profile information, community postings, messages, notes, and any files, documents, images, or data you upload. “Health Data” is the subset of User Content described in Section 8 (including bloodwork, lab results, biomarker and genetic data, assessments and questionnaires, body and progress photos, wearable and device data, and other health, physiological, or wellness information). You are solely responsible for your User Content. You assume all risks associated with the use of your User Content, including any reliance on its accuracy, completeness, or usefulness, and any disclosure of your User Content that personally identifies you or any third party. You hereby represent and warrant that your User Content does not violate our Acceptable Use Policy (defined in Section 3.4). Since you alone are responsible for your User Content, you may expose yourself to liability if, for example, your User Content violates the Acceptable Use Policy.

3.2 License to User Content (General). Except with respect to Health Data (which is governed by the narrower license in Section 3.3), you hereby grant to Company a non-exclusive, royalty-free, worldwide license to use, host, store, reproduce, modify, create derivative works of (such as those resulting from translations or reformatting), and display your User Content, solely to the extent necessary to operate, provide, secure, and improve the Services and as permitted by our Privacy Policy. For User Content that you deliberately make public through the Services (for example, community posts or public reviews), this license also permits Company to display and distribute that content in connection with the Services. This license continues even if you stop using the Services with respect to public User Content and aggregated or de-identified data, but otherwise ends when your User Content is deleted from our systems as described in the Privacy Policy.

3.3 License to Health Data (Narrow). You grant Company a limited, non-exclusive, royalty-free license to host, store, process, and analyze your Health Data solely to provide the Services to you, to generate your personalized insights, and as expressly described in our Privacy Policy. Company will not sell your Health Data and will not use identifiable Health Data to train or improve generalized artificial-intelligence models, or share it with third parties for their own purposes, except with your separate consent or as required by law. Company may create and use de-identified or aggregated data derived from Health Data (data that cannot reasonably be used to identify you) to operate and improve the Services, consistent with applicable law.

3.4 Acceptable Use Policy. The following terms constitute our “Acceptable Use Policy.” You agree not to use the Services to collect, upload, transmit, display, or distribute any User Content:

(i) that violates any third-party right, including any copyright, trademark, patent, trade secret, moral right, privacy right, right of publicity, or any other intellectual property or proprietary right;

(ii) that is unlawful, harassing, abusive, tortious, threatening, harmful, invasive of another’s privacy, vulgar, defamatory, false, intentionally misleading, trade libelous, pornographic, obscene, patently offensive, promotes racism, bigotry, hatred, or physical harm of any kind against any group or individual, or is otherwise objectionable;

(iii) that is harmful to minors in any way; or

(iv) that is in violation of any law, regulation, or obligations or restrictions imposed by any third party.

In addition, you agree not to: (i) upload, transmit, or distribute to or through the Services any computer viruses, worms, or any software intended to damage or alter a computer system or data; (ii) send through the Services any unsolicited or unauthorized advertising, promotional materials, junk mail, spam, chain letters, or any other form of duplicative or unsolicited messages; (iii) use the Services to harvest, collect, gather, or assemble information or data regarding other users without their consent; (iv) interfere with, disrupt, or create an undue burden on servers or networks connected to the Services; (v) attempt to gain unauthorized access to the Services (or to other computer systems or networks connected to or used with the Services); (vi) harass or interfere with any other user’s use and enjoyment of the Services; (vii) use software or automated agents or scripts to produce multiple accounts, or to generate automated searches, requests, or queries to (or to strip, scrape, or mine data from) the Services; or (viii) upload another person’s Health Data or personal information without that person’s clear, informed, and documented consent and the lawful right to do so.

3.5 Enforcement. We reserve the right (but have no obligation) to review, refuse, and/or remove any User Content in our sole discretion, and to investigate and/or take appropriate action against you in our sole discretion if you violate the Acceptable Use Policy or any other provision of these Terms or otherwise create liability for us or any other person. Such action may include removing or modifying your User Content, terminating your Account in accordance with Section 11, and/or reporting you to law enforcement authorities.

3.6 Backups. While we take reasonable measures to protect and retain your data as described in the Privacy Policy, Company is not obligated to back up any User Content, and your User Content may become unavailable. You are encouraged to keep your own copies of important User Content, including any export functionality we may provide.

4. Indemnification

You agree to indemnify and hold Company (and its officers, members, managers, employees, and agents) harmless, including costs and attorneys’ fees, from any claim or demand made by any third party due to or arising out of (a) your use of the Services; (b) your violation of these Terms; (c) your violation of applicable laws or regulations; (d) your User Content, including any claim that your upload of another person’s Health Data was unauthorized; or (e) your connection or use of any User-Connected Service or User-Provided AI Service as described in Sections 7 and 8. Company reserves the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate with our defense of these claims. You agree not to settle any matter without the prior written consent of Company. Company will use reasonable efforts to notify you of any such claim, action, or proceeding upon becoming aware of it.

5. Third-Party Links & Ads; Other Users

5.1 Third-Party Links & Ads. The Services may contain links to third-party websites and services, and/or display content or offers from third parties (collectively, “Third-Party Links & Ads”). Such Third-Party Links & Ads are not under the control of Company, and Company is not responsible for any Third-Party Links & Ads. Company provides access to these Third-Party Links & Ads only as a convenience to you and does not review, approve, monitor, endorse, warrant, or make any representations with respect to Third-Party Links & Ads. You use all Third-Party Links & Ads at your own risk. When you access Third-Party Links & Ads, the applicable third party’s terms and policies apply, including the third party’s privacy and data-gathering practices.

5.2 Other Users. Each user is solely responsible for its own User Content. Since we do not control User Content, you acknowledge and agree that we are not responsible for any User Content, whether provided by you or by others. We make no guarantees regarding the accuracy, currency, suitability, appropriateness, or quality of any User Content. Your interactions with other users, and with any coach, practitioner, or professional you may connect with through the Services, are solely between you and such persons, and you agree that Company will not be responsible for any loss or damage incurred as a result.

5.3 Coaches and Practitioners. Where the Services allow you to connect with a coach, practitioner, or other professional (including through business or “B2B” tenants that use Kreedo to serve their own clients), those persons are independent third parties, not employees or agents of Company. Company does not supervise, direct, or control, and is not responsible for, the advice, services, or conduct of any such person. Any professional relationship is between you and that person.

5.4 Release. You hereby release and forever discharge Company (and our officers, members, managers, employees, agents, successors, and assigns) from, and hereby waive and relinquish, each and every past, present, and future dispute, claim, controversy, demand, right, obligation, liability, action, and cause of action of every kind and nature (including personal injuries, death, and property damage), that has arisen or arises directly or indirectly out of, or that relates directly or indirectly to, the Services (including any interactions with, or act or omission of, other users, coaches, practitioners, or any Third-Party Links & Ads). IF YOU ARE A CALIFORNIA RESIDENT, YOU HEREBY WAIVE CALIFORNIA CIVIL CODE SECTION 1542 IN CONNECTION WITH THE FOREGOING, WHICH STATES: “A GENERAL RELEASE DOES NOT EXTEND TO CLAIMS WHICH THE CREDITOR OR RELEASING PARTY DOES NOT KNOW OR SUSPECT TO EXIST IN HIS OR HER FAVOR AT THE TIME OF EXECUTING THE RELEASE, WHICH IF KNOWN BY HIM OR HER MUST HAVE MATERIALLY AFFECTED HIS OR HER SETTLEMENT WITH THE DEBTOR OR RELEASED PARTY.”

6. Services, Integrations & Third-Party Providers

6.1 We rely on third-party providers. The Services are built on, and integrate with, a range of third-party infrastructure providers, data sources, and service providers (collectively, “Service Providers”). These include, among others, providers of cloud hosting and databases, file and media storage, background processing, analytics, error monitoring, email and communications, payment processing, wearable and health-device data, laboratory and biomarker data, genetic data, nutrition data, artificial-intelligence and large-language-model processing, and video/meeting capture for coaching features. A current, categorized list of our material Service Providers and sub-processors is maintained in our Privacy Policy and/or a linked sub-processors/integrations page, which is incorporated into these Terms by reference.

6.2 Adding, changing, or removing integrations. The Services evolve continuously, and we may add, change, replace, or remove Service Providers and integrations at any time. Adding or changing a Service Provider within a category already described in our Privacy Policy (for example, adding a new wearable or lab integration) does not by itself require an amendment to these Terms; we will instead update the sub-processors/integrations list. We will treat a change as a material change to these Terms — and provide notice under Section 13.1 — only where the change materially and adversely affects your rights or the way your personal data is processed. Where a Service Provider requires that its own end-user terms apply to you (for example, a wearable platform or a mapping provider), those terms will govern your use of that integration, and you agree to comply with them.

6.3 Data you connect from third parties. When you connect a third-party account or data source to Kreedo (see Section 7), you authorize us to access, receive, and process the data made available by that source in accordance with your permissions and our Privacy Policy. We are not responsible for the accuracy, completeness, availability, or lawfulness of data provided by third-party sources, or for any third party’s change to, or discontinuation of, its API or data feed.

7. User-Connected Services (Wearables, Labs, Genetics & More)

7.1 What they are. The Services let you connect and import data from third-party accounts, devices, and providers you use — such as wearables and health trackers, laboratory and biomarker testing providers, genetic testing providers, nutrition and food-data services, calendars, and similar sources (each, a “User-Connected Service”).

7.2 Your authorizations and responsibilities. By connecting a User-Connected Service, you: (a) represent and warrant that you are authorized to connect it and to share the resulting data with Kreedo; (b) authorize Kreedo to access and process that data to provide the Services; and (c) remain subject to the User-Connected Service’s own terms and privacy policy, which govern that provider’s own processing of your data. You may disconnect a User-Connected Service at any time through your Account settings or the provider; disconnection stops future data flow but does not by itself delete data already imported (see the Privacy Policy for deletion).

7.3 No responsibility for third parties. Company does not control, and is not responsible for, any User-Connected Service, including its accuracy, availability, security, or data practices, or any change to or discontinuation of the integration. Your use of any User-Connected Service is at your own risk.

8. Health Data & Uploads

8.1 What you may upload. The Services allow you to submit, upload, connect, or generate sensitive personal information about yourself, which may include, without limitation: bloodwork and laboratory results; biomarker, hormone, and metabolic data; genetic and genomic trait data; microbiome and related test results; medical history, symptoms, medications, and supplements; psychometric, personality, and other assessments and questionnaires; body composition and measurements; body, face, food, and progress photos and images; wearable, sleep, activity, heart-rate, and other device data; nutrition and dietary logs; and other health, physiological, biometric, mental-wellness, or lifestyle information (together, “Health Data”).

8.2 Your representations and consent. By submitting Health Data, you: (a) represent and warrant that it relates to you (or to a person for whom you have clear, informed, and documented authority and consent to provide it), and that you have the lawful right to submit it; (b) explicitly consent to Kreedo’s collection and processing of your Health Data — including special-category / sensitive data under the GDPR, and “consumer health data” under U.S. state laws — for the purposes described in these Terms and our Privacy Policy; and (c) understand that providing Health Data is voluntary and that you may withdraw consent and/or delete your Health Data as described in the Privacy Policy, though doing so may limit or prevent your use of certain features.

8.3 How we use Health Data. We use Health Data to provide the Services to you: to store and organize it, to generate your personalized insights, correlations, scores, and recommendations, and to power the features you choose to use. Our processing of Health Data is governed by Section 3.3 (narrow license), our Privacy Policy, and applicable law. We do not sell your Health Data, and we do not use identifiable Health Data to train generalized AI models.

8.4 The machine never prescribes. Kreedo’s insights, scores, correlations, and recommendations are informational and educational tools generated in part by automated and AI systems. They are not medical advice, diagnosis, treatment, or prescription, and they are not a substitute for consultation with a qualified healthcare professional. You are responsible for how you act on any information provided through the Services. See our Disclaimer and Section 9.

8.5 Accuracy. You are responsible for the accuracy of the Health Data you provide. Insights generated from inaccurate, incomplete, or outdated data may themselves be inaccurate. Health Data imported from third parties may contain errors originating with those third parties, for which Company is not responsible.

9. Artificial Intelligence & User-Provided AI Services

9.1 AI-assisted features. The Services use artificial-intelligence and large-language-model (“LLM”) technologies — provided by Company and/or third-party AI providers — to extract information from documents and images, summarize data, surface correlations, and generate insights and content (“AI Output”). You acknowledge that AI Output may be incomplete, inaccurate, out of date, or otherwise unreliable (“hallucinations”), may not reflect your specific circumstances, and must not be relied upon as medical, clinical, legal, financial, or other professional advice. You are solely responsible for evaluating and verifying AI Output before relying on it. Kreedo does not warrant the accuracy or fitness of any AI Output.

9.2 Your own AI / LLM (“Bring Your Own Model”). The Services may allow you to connect or configure your own third-party AI or LLM account, subscription, or API key, or to direct that certain processing be performed using an AI provider you select (a “User-Provided AI Service”). If you do:

(a) Your provider’s terms govern. Your use of the User-Provided AI Service, and that provider’s processing of any data you route to it, are governed by your own agreement and the provider’s terms and privacy policy — not by these Terms. You are responsible for reviewing and complying with them and for any fees, usage limits, or restrictions they impose.

(b) You authorize the data flow. You authorize Kreedo to transmit your inputs, prompts, and relevant User Content and Health Data to the User-Provided AI Service that you have connected, at your direction and configuration, in order to provide the feature you requested. You are responsible for ensuring that sending such data to your chosen provider is lawful and appropriate for the sensitivity of the data.

(c) We are not responsible for your provider. Company does not control and is not responsible for any User-Provided AI Service, including its availability, security, data-retention or model-training practices, outputs, or compliance. Company is not the controller of, and disclaims all liability for, the User-Provided AI Service’s independent processing of your data.

(d) Your credentials. You are responsible for the security of any API keys or credentials you provide. You represent that you are authorized to use them and that doing so does not violate any third-party agreement.

9.3 No prescriptions; human oversight. Regardless of whether AI Output is generated by Kreedo’s systems or a User-Provided AI Service, the Services never provide medical prescriptions, and any coaching, professional, or clinical decisions remain the responsibility of you and any qualified professional you consult.

10. Subscriptions, Fees & Billing

10.1 Paid Services. Certain Services are offered on a paid subscription basis (a “Subscription”). The applicable fees, billing frequency (for example, monthly or annual), features, and any free-trial or promotional terms will be presented to you at the point of purchase. By purchasing a Subscription, you authorize Company and our third-party payment processor to charge the payment method you provide for all applicable fees.

10.2 Payment processing. Payments are processed by one or more third-party payment processors. We do not store your full payment-card details; those are handled by the payment processor under its own terms and privacy policy. You are responsible for providing current, complete, and accurate billing information.

10.3 Automatic renewal. Unless otherwise stated, Subscriptions automatically renew at the end of each billing period (monthly for monthly plans, annually for annual plans) at the then-current rate, until cancelled. You may cancel at any time through your Account settings; cancellation takes effect at the end of the current billing period. Where required by law, we will provide renewal reminders and cancellation instructions.

10.4 Refunds. Except where required by applicable law (including mandatory consumer rights and withdrawal/cooling-off rights for consumers in the EU/EEA, the UK, and certain other jurisdictions), fees are non-refundable and there are no refunds or credits for partial billing periods, downgrades, or unused Services.

10.5 Changes to fees. Company may change its fees and billing methods prospectively. We will give you advance notice of any fee increase, and it will take effect no earlier than your next billing period; your continued use or renewal after the effective date constitutes acceptance.

10.6 Taxes. Fees are exclusive of taxes unless stated otherwise. You are responsible for all applicable taxes, and we may collect them where required.

10.7 Free and trial tiers. Some Services may be offered free of charge or on a trial basis. We may modify or discontinue any free or trial offering at any time.

11. Term and Termination

Subject to this Section, these Terms will remain in full force and effect while you use the Services. We may suspend or terminate your rights to use the Services (including your Account) at any time for any reason at our sole discretion, including for any use of the Services in violation of these Terms. Upon termination of your rights under these Terms, your Account and right to access and use the Services will terminate immediately. You understand that any termination of your Account may involve deletion of your User Content and Health Data associated with your Account from our live databases, subject to the retention and deletion practices described in our Privacy Policy. Company will not have any liability to you for any termination of your rights under these Terms, including for termination of your Account or deletion of your User Content, except as expressly set out in Section 10 (for example, a pro-rated refund where required by law). You may terminate at any time by deleting your Account. Even after your rights under these Terms are terminated, the following provisions will remain in effect: Sections 2.2–2.6, 3, 4, 5, 6.3, 7.3, 8, 9, 10.4, and 11 through 15.

12. Disclaimers and Limitation of Liability

12.1 Disclaimers. THE SERVICES ARE PROVIDED ON AN “AS-IS” AND “AS-AVAILABLE” BASIS, AND COMPANY (AND OUR SUPPLIERS AND SERVICE PROVIDERS) EXPRESSLY DISCLAIM ANY AND ALL WARRANTIES AND CONDITIONS OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ALL WARRANTIES OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, ACCURACY, OR NON-INFRINGEMENT. WE (AND OUR SUPPLIERS AND SERVICE PROVIDERS) MAKE NO WARRANTY THAT THE SERVICES WILL MEET YOUR REQUIREMENTS, WILL BE AVAILABLE ON AN UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE BASIS, OR WILL BE ACCURATE, RELIABLE, FREE OF VIRUSES OR OTHER HARMFUL CODE, COMPLETE, LEGAL, OR SAFE. WITHOUT LIMITING THE FOREGOING, COMPANY MAKES NO WARRANTY THAT ANY INSIGHT, SCORE, CORRELATION, RECOMMENDATION, OR OTHER OUTPUT OF THE SERVICES IS ACCURATE OR APPROPRIATE FOR YOUR HEALTH, AND THE SERVICES ARE NOT MEDICAL ADVICE (SEE OUR DISCLAIMER AND SECTIONS 8 AND 9). IF APPLICABLE LAW REQUIRES ANY WARRANTIES WITH RESPECT TO THE SERVICES, ALL SUCH WARRANTIES ARE LIMITED IN DURATION TO 90 DAYS FROM THE DATE OF FIRST USE.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU. SOME JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU.

12.2 Exclusion of Certain Damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL COMPANY (OR OUR SUPPLIERS AND SERVICE PROVIDERS) BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOST PROFITS, LOST DATA, COSTS OF PROCUREMENT OF SUBSTITUTE PRODUCTS, OR ANY INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES ARISING FROM OR RELATING TO THESE TERMS OR YOUR USE OF, OR INABILITY TO USE, THE SERVICES, EVEN IF COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ACCESS TO, AND USE OF, THE SERVICES IS AT YOUR OWN DISCRETION AND RISK, AND YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR DEVICE OR COMPUTER SYSTEM, OR LOSS OF DATA RESULTING THEREFROM.

12.3 Cap on Liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW, NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ANY AND ALL DAMAGES ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICES (FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION) WILL AT ALL TIMES BE LIMITED TO THE GREATER OF: (A) THE TOTAL AMOUNTS YOU PAID TO COMPANY FOR THE SERVICES IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY; OR (B) THE AMOUNT OF YOUR MOST RECENT MONTHLY SUBSCRIPTION PAYMENT (AND, FOR SUBSCRIPTIONS BILLED OTHER THAN MONTHLY, THE MONTHLY-EQUIVALENT AMOUNT, CALCULATED AS THE TOTAL FEE FOR THE BILLING PERIOD DIVIDED BY THE NUMBER OF MONTHS IN THAT PERIOD — FOR EXAMPLE, AN ANNUAL FEE DIVIDED BY TWELVE); PROVIDED THAT, FOR USERS WHO HAVE NOT PAID ANY FEES TO COMPANY, THE TOTAL AGGREGATE LIABILITY WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS ($100). THE EXISTENCE OF MORE THAN ONE CLAIM WILL NOT ENLARGE THIS LIMIT. YOU AGREE THAT OUR SUPPLIERS AND SERVICE PROVIDERS WILL HAVE NO LIABILITY OF ANY KIND ARISING FROM OR RELATING TO THESE TERMS.

12.4 Basis of the bargain; carve-outs. The limitations in this Section 12 form an essential basis of the bargain between you and Company and will apply even if a limited remedy fails of its essential purpose. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law — for example, liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or any non-waivable statutory rights of consumers. SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS OR EXCLUSIONS MAY NOT APPLY TO YOU, AND YOU MAY HAVE ADDITIONAL RIGHTS.

13. General

13.1 Changes. These Terms are subject to occasional revision, and if we make any material changes, we may notify you by sending you an email to the last email address you provided to us (if any), and/or by prominently posting notice of the changes on our Services. You are responsible for providing us with your most current email address. In the event that the last email address that you have provided us is not valid, our dispatch of the email containing such notice will nonetheless constitute effective notice of the changes described in the notice. Continued use of our Services following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by them. Adding or changing a Service Provider or integration is addressed in Section 6.2 and generally does not constitute a material change to these Terms.

13.2 Dispute Resolution. Please read the following arbitration agreement in this Section (the “Arbitration Agreement”) carefully. It requires you to arbitrate disputes with Company, its parent companies, subsidiaries, affiliates, successors, and assigns, and all of their respective officers, directors, members, managers, employees, agents, and representatives (collectively, the “Company Parties”) and limits the manner in which you can seek relief from the Company Parties.

(a) Applicability of Arbitration Agreement. You agree that any dispute between you and any of the Company Parties relating in any way to the Site, the Services, or these Terms will be resolved by binding arbitration, rather than in court, except that (1) you and the Company Parties may assert individualized claims in small claims court if the claims qualify, remain in such court, and advance solely on an individual, non-class basis; and (2) you or the Company Parties may seek equitable relief in court for infringement or other misuse of intellectual property rights. This Arbitration Agreement shall survive the expiration or termination of these Terms and shall apply, without limitation, to all claims that arose or were asserted before you agreed to these Terms or any prior version of these Terms. This Arbitration Agreement does not preclude you from bringing issues to the attention of federal, state, or local agencies.

(b) Informal Dispute Resolution. Before either party commences arbitration (or initiates an action in small claims court), the parties will personally meet and confer, telephonically or via videoconference, in a good-faith effort to informally resolve any Dispute (an “Informal Dispute Resolution Conference”). The party initiating a Dispute must give written notice (“Notice”) of its intent to initiate an Informal Dispute Resolution Conference, which shall occur within 45 days after the other party receives the Notice, unless extended by mutual agreement. Notice to Company should be sent by email to legal@kreedo.ai, or by regular mail to 131 Continental Dr., Suite 305, Newark, Delaware 19713. The Notice must include (1) your name, telephone number, mailing address, and the email address associated with your Account (if any); (2) the name and contact details of your counsel, if any; and (3) a description of your Dispute. Engaging in the Informal Dispute Resolution Conference is a condition precedent to commencing arbitration. Applicable statutes of limitation and filing-fee deadlines are tolled while the parties engage in this process.

(c) Arbitration Rules and Forum. These Terms evidence a transaction involving interstate commerce, and the Federal Arbitration Act, 9 U.S.C. § 1 et seq., will govern the interpretation and enforcement of this Arbitration Agreement and any arbitration proceedings. If the informal process does not resolve the Dispute within 60 days after receipt of the Notice, either party may commence binding arbitration administered by JAMS. Disputes with an amount in controversy under $250,000 (not inclusive of attorneys’ fees and interest) shall be subject to JAMS’s Streamlined Arbitration Rules; all other claims shall be subject to JAMS’s Comprehensive Arbitration Rules and Procedures. The rules are available at www.jamsadr.com or by calling 800-352-5267. A party who wishes to initiate arbitration must provide the other party with a request for arbitration (the “Request”) including the initiating party’s contact details and account email; a statement of the legal claims and factual bases; a description of the remedy sought and a good-faith calculation of the amount in controversy; a statement certifying completion of the informal process; and evidence of payment of any necessary filing fees.

(d) Location. Unless you and Company otherwise agree, or the Batch Arbitration process in Subsection (h) is triggered, the arbitration will be conducted in the county where you reside. The arbitrator may direct a limited and reasonable exchange of information consistent with the expedited nature of the arbitration. Your responsibility to pay any JAMS fees and costs will be solely as set forth in the applicable JAMS Rules.

(e) Confidentiality. All materials and documents exchanged during the arbitration shall be kept confidential and shall not be shared except with the parties’ attorneys, accountants, or business advisors who agree to keep them confidential.

(f) Authority of Arbitrator. The arbitrator shall have exclusive authority to resolve all disputes subject to arbitration hereunder, including any dispute related to the interpretation, applicability, enforceability, or formation of this Arbitration Agreement, except that: (1) disputes arising out of the “Waiver of Class or Other Non-Individualized Relief” subsection shall be decided by a court and not an arbitrator; (2) disputes about arbitration-fee payment shall be decided by a court except as contemplated in “Batch Arbitration”; (3) disputes about whether a condition precedent to arbitration has been satisfied shall be decided by a court; and (4) disputes about which version of the Arbitration Agreement applies shall be decided by a court. The arbitration will not be consolidated with any other matters or joined with any other cases or parties, except as provided in “Batch Arbitration.” The arbitrator may award monetary damages and any non-monetary remedy available to an individual under applicable law and these Terms, shall issue a reasoned written award, and shall follow applicable law. The award is final and binding, and judgment may be entered in any court having jurisdiction.

(g) Waiver of Jury Trial and Class Relief. EXCEPT AS SPECIFIED IN SUBSECTION (a), YOU AND THE COMPANY PARTIES HEREBY WAIVE ANY CONSTITUTIONAL AND STATUTORY RIGHTS TO SUE IN COURT AND HAVE A TRIAL IN FRONT OF A JUDGE OR JURY. YOU AND COMPANY AGREE THAT, EXCEPT AS SPECIFIED IN SUBSECTION (h), EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY ON AN INDIVIDUAL BASIS AND NOT ON A CLASS, REPRESENTATIVE, OR COLLECTIVE BASIS, AND THE PARTIES WAIVE ALL RIGHTS TO HAVE ANY DISPUTE BROUGHT, HEARD, ADMINISTERED, RESOLVED, OR ARBITRATED ON A CLASS, COLLECTIVE, REPRESENTATIVE, OR MASS-ACTION BASIS. If a court decides, by a final decision not subject to appeal, that this class-waiver is unenforceable as to a particular claim or request for relief, that particular claim or request shall be severed from arbitration and may be litigated in the state or federal courts located in the State of Delaware; all other Disputes shall be arbitrated or litigated in small claims court.

(h) Batch Arbitration. If 100 or more individual Requests of a substantially similar nature are filed against Company by or with the assistance of the same law firm or organizations within a 30-day period, JAMS shall administer them in batches of up to 100 Requests, appoint one arbitrator per batch, and resolve each batch as a single consolidated arbitration with one set of filing and administrative fees per side per batch, one procedural calendar, one hearing (if any), and one final award. Requests are of a “substantially similar nature” if they arise out of or relate to the same event or factual scenario and raise the same or similar legal issues and seek the same or similar relief. This provision shall not be interpreted as authorizing a class, collective, or mass arbitration except as expressly set forth here.

(i) 30-Day Right to Opt Out. You have the right to opt out of this Arbitration Agreement by sending a timely written notice of your decision to opt out to 131 Continental Dr., Suite 305, Newark, Delaware 19713, or by email to legal@kreedo.ai, within 30 days after first becoming subject to this Arbitration Agreement. Your notice must include your name and address and a clear statement that you want to opt out. If you opt out, all other parts of these Terms will continue to apply to you.

(j) Invalidity; Survival; Modification. Except as provided in the class-waiver subsection, if any part of this Arbitration Agreement is found to be invalid or unenforceable, that part shall be severed and the remainder shall continue in full force. Any Dispute must be initiated within the applicable statute of limitations or be forever time-barred. If Company makes any future material change to this Arbitration Agreement, you may reject that change within 30 days of it becoming effective by writing to the address or email above; otherwise your continued use constitutes acceptance.

13.3 Governing Law. These Terms and any Dispute arising out of or related to them or the Services are governed by the laws of the State of Delaware and, where applicable, the Federal Arbitration Act, without regard to conflict-of-laws principles. Subject to the Arbitration Agreement, the exclusive venue for any permitted court proceeding shall be the state and federal courts located in Delaware, and you consent to personal jurisdiction there. If you are a consumer resident in the EU/EEA, the UK, or another jurisdiction whose law grants you mandatory protections, nothing in these Terms deprives you of the protection of the mandatory consumer-protection provisions of the law of your country of residence, and you may be entitled to bring proceedings in your local courts.

13.4 Export. The Services may be subject to U.S. export-control laws and to export or import regulations in other countries. You agree not to export, reexport, or transfer, directly or indirectly, any U.S. technical data acquired from Company, or any products utilizing such data, in violation of applicable export laws or regulations.

13.5 Consumer Disclosures. Company is located at the address in Section 15. If you are a California resident, you may report complaints to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

13.6 Electronic Communications. The communications between you and Company use electronic means. For contractual purposes, you (a) consent to receive communications from Company in electronic form; and (b) agree that all terms, agreements, notices, disclosures, and other communications that Company provides to you electronically satisfy any legal requirement that such communications would satisfy if in hardcopy writing. The foregoing does not affect your non-waivable rights.

13.7 Entire Terms. These Terms, together with the Privacy Policy, the Disclaimer, and any additional terms you agree to, constitute the entire agreement between you and us regarding the Services. Our failure to exercise or enforce any right or provision shall not operate as a waiver. Section titles are for convenience only. “Including” means “including without limitation.” If any provision is held invalid or unenforceable, the other provisions will be unimpaired and the invalid or unenforceable provision will be modified so that it is valid and enforceable to the maximum extent permitted by law. Your relationship to Company is that of an independent contractor, and neither party is an agent or partner of the other. These Terms may not be assigned or transferred by you without Company’s prior written consent, and any attempted assignment in violation of the foregoing is void. Company may freely assign these Terms.

13.8 Copyright/Trademark Information. Copyright © 2026 Kreedo, LLC. All rights reserved. All trademarks, logos, and service marks (“Marks”) displayed on the Services are our property or the property of other third parties. You are not permitted to use these Marks without our prior written consent or the consent of the third party that owns the Marks.

14. Copyright Policy (DMCA)

Company respects the intellectual property of others and asks that users of our Services do the same. We have adopted a policy of removing infringing material and terminating, in appropriate circumstances, users who are repeat infringers. If you believe that content on our Services infringes a copyright you own or control, please send a written notification (pursuant to 17 U.S.C. § 512(c)) to our designated Copyright Agent containing: (a) your physical or electronic signature; (b) identification of the copyrighted work(s) claimed to have been infringed; (c) identification of the allegedly infringing material and information reasonably sufficient to locate it; (d) your address, telephone number, and email address; (e) a statement that you have a good-faith belief that the use is not authorized by the copyright owner, its agent, or the law; and (f) a statement, under penalty of perjury, that the information in the notification is accurate and that you are the owner or authorized to act on the owner’s behalf. Please note that, pursuant to 17 U.S.C. § 512(f), any misrepresentation of material fact in a written notification automatically subjects the complaining party to liability for damages, costs, and attorneys’ fees incurred by us.

Designated Copyright Agent: Nuno Machado Lopes, Founder Address: Kreedo, LLC, 131 Continental Dr., Suite 305, Newark, Delaware 19713 Email: legal@kreedo.ai

15. Contact Information

Kreedo, LLC Attn: Nuno Machado Lopes 131 Continental Dr., Suite 305 Newark, Delaware 19713, USA Email: legal@kreedo.ai

Cookie notice

Cookies

Version 2.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

We use very few cookies, and none that follow you around the internet. This page lists every category we set and why.

This marketing site sets no cookies at all. Everything below applies to the Kreedo app at app.kreedo.ai, where you sign in and your data lives. You can read kreedo.ai end to end without a single cookie being written.

Strictly necessary

Set without asking, because the app cannot work without them.

What	Why	Lifetime
Authentication session	Keeps you signed in and identifies your session to our database. Set by our authentication provider (Supabase).	Until you sign out, or expiry
Security token	Prevents cross-site request forgery on form submissions.	Session
Load balancing / routing	Keeps your requests on a consistent edge route.	Session
Your cookie choice	Remembers the decision you made below, so we stop asking.	12 months

These are exempt from consent under the ePrivacy Directive and equivalent rules, because the service you asked for cannot be delivered without them.

Preference

Local to your browser and stored in local storage rather than sent to us: your theme, units, language, and whether the navigation is collapsed. We never read these on the server. They persist until you clear your browser storage.

We use PostHog for aggregate, first-party measurement of which features are used.

It is off until you say yes in regions where consent is required, and declining costs you nothing — every feature keeps working.
If your browser sends a Global Privacy Control signal, we take that as a no and do not ask.
Session recording is disabled. We do not replay your screen.
Automatic page-view capture is off; we send specific product events instead.
Profiles are created for identified users only.
It never touches your health data.

Performance

We measure how quickly pages load and render, so we can find what is slow or broken. It stores nothing on your device — no cookie, and an identifier that lasts only until you leave the page — and we do not record which account it came from. Because it cannot follow you between visits, it is not part of the optional category above and there is nothing to switch off.

Advertising

None. We run no advertising cookies, no third-party trackers, and no cross-site pixels. We do not sell or share personal information for cross-context behavioural advertising, and we do not intend to.

Your choice, and how to change it

Where consent is required — the EU/EEA, the UK, and other regions with equivalent rules — we ask before setting anything in the analytics category, through a banner on your first visit. Elsewhere, analytics runs on a legitimate-interest basis and you can still switch it off.

Your choice is remembered for twelve months. You can change it at any time in Settings › Preferences in the app, or by clearing cookies in your browser. We do not sell or share personal information in any case.

Questions

Write to privacy@kreedo.ai.

Disclaimer

Version 1.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

This Disclaimer governs your use of kreedo.ai, our applications, and related services (the “Services”), operated by Kreedo, LLC (“Kreedo”, “we”, “us”, or “our”). It is incorporated into, and should be read together with, our Terms of Use and Privacy Policy. By using the Services, you acknowledge and agree to this Disclaimer.

In one line: Kreedo is a health, wellness, and self-optimization tool for informational and educational purposes only. It is not a medical provider, it does not give medical advice, and — this is core to how we build — the machine never prescribes. Always consult a qualified healthcare professional, and if you have a medical emergency, call your local emergency number now.

1. Not Medical Advice

The Services — including all insights, scores, correlations, recommendations, content, assessments, and any output generated by our software or artificial-intelligence systems — are provided for general informational and educational purposes only. They are not medical, clinical, nutritional, psychological, or other professional advice, and they are not a substitute for the advice, diagnosis, or treatment of a qualified healthcare professional who knows your individual circumstances.

Nothing on the Services is intended to diagnose, treat, cure, mitigate, or prevent any disease or health condition. Always seek the advice of your physician or another qualified health provider with any questions you may have regarding a medical condition, your bloodwork or lab results, your diet, supplements, exercise, or any changes to your health regimen. Never disregard professional medical advice, or delay seeking it, because of something you read or received through the Services.

2. No Professional Relationship

Your use of the Services does not create a doctor-patient, therapist-client, or any other professional or fiduciary relationship between you and Kreedo. Where the Services let you connect with a coach, practitioner, or other professional (including through a business or clinic that uses Kreedo), that person is an independent third party, and any relationship is between you and them — not with Kreedo. Kreedo does not supervise, direct, or control, and is not responsible for, the advice or services of any such person.

3. The Machine Never Prescribes

Kreedo is designed so that our software and AI systems inform and educate — they do not prescribe. The Services do not, and are not intended to, issue prescriptions, dosing instructions, or clinical directives, and any suggestion, target, or recommendation surfaced by the Services is an informational starting point for a conversation with a qualified professional, not an instruction to act. Decisions about your health, medications, supplements, testing, and treatment are yours to make with appropriate professional guidance.

4. Artificial Intelligence & Automated Output

Parts of the Services use artificial-intelligence and large-language-model technologies to read documents and images, extract data, summarize information, and generate insights and content (“AI Output”). AI Output can be incomplete, inaccurate, outdated, or misleading (“hallucinations”), may misread uploaded documents or images, and may not reflect your specific situation. You are responsible for critically evaluating and independently verifying any AI Output before relying on it, and for discussing it with a qualified professional. If you connect your own AI/LLM provider (“bring your own model”), Kreedo is not responsible for that provider’s output or data practices.

5. Third-Party and Imported Data

The Services import and display data from third-party sources you connect — such as wearables and health devices, laboratory and biomarker providers, genetic testing providers, and nutrition databases. We do not generate this data and do not control its accuracy, completeness, timeliness, or availability. Imported data may contain errors originating with the third party, devices may be inaccurate, and providers may change or discontinue their services. Insights generated from inaccurate or incomplete data may themselves be inaccurate. You are responsible for the accuracy of the information you provide and connect.

6. No Guarantees; Individual Results Vary

Health, fitness, and wellness outcomes depend on many factors unique to each person. We make no guarantee that the Services will produce any particular result, improvement, or outcome, and any examples, case studies, or testimonials are not promises of what you will experience. Individual results vary. Statements about supplements, foods, or wellness practices have not been evaluated by the U.S. Food and Drug Administration (FDA) or any comparable regulator and are not intended to diagnose, treat, cure, or prevent any disease.

7. Assumption of Risk

Any changes you make to your diet, exercise, supplementation, sleep, or lifestyle based on information from the Services are undertaken at your own risk. Physical activity and dietary changes carry inherent risks. You should consult a qualified professional before starting, stopping, or changing any health-related regimen, especially if you are pregnant or nursing, have a medical condition, or take medication. To the maximum extent permitted by law, you assume all responsibility and risk for your use of the Services and any decisions or actions you take based on them.

8. Not a Medical Device

Except where we expressly state otherwise in writing, the Services are general-wellness tools and are not intended to be a medical device, and have not been cleared, approved, or evaluated as such by the FDA or any other regulatory authority.

9. Emergencies

The Services are not designed for medical emergencies. If you think you may have a medical emergency, are in crisis, or may harm yourself or others, do not use the Services — call your doctor or your local emergency number (for example, 911 in the U.S. or 112 in the EU) immediately, or go to the nearest emergency facility. If you are experiencing thoughts of self-harm, please contact your local emergency services or a crisis helpline in your area.

10. External Links

The Services may contain links to third-party websites and resources provided for convenience. We do not endorse and are not responsible for the content, accuracy, or practices of any third-party site. Accessing them is at your own risk and subject to their terms and policies.

11. Limitation of Liability

Your use of the Services is subject to the disclaimers of warranties and the limitations of liability set out in our Terms of Use, including the cap on our liability, which are incorporated here by reference. Nothing in this Disclaimer excludes or limits any liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, or any non-waivable statutory rights you may have as a consumer.

12. Contact

Questions about this Disclaimer:

Kreedo, LLC 131 Continental Dr., Suite 305, Newark, Delaware 19713, USA Email: legal@kreedo.ai

Security

Version 2.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

You are handing us your blood work. This page says what we do to deserve that, in enough detail to be checkable. Where we are still building something, we say so rather than implying it is already done.

Encryption

Everything is encrypted in transit with TLS and at rest with AES-256. Uploaded documents — lab PDFs, reports, images — are held in private object storage, separate from the database, and are never publicly addressable.

Access

Your health data is visible to you, and to the people you have explicitly granted a layer to.

Access is enforced in the database itself using row-level security scoped to the owner of each record, not only in application code — so a bug in a screen cannot expose another person’s data. Kreedo staff do not browse your records. Production access is limited to a small group, requires multi-factor authentication, and is logged.

Your account

Sign-in is by one-time email code or a trusted identity provider. You can see your active sessions and sign them out.

Where your data lives

Kreedo runs regional data planes, and your data stays in the plane for your region — the two planes hold entirely separate data and are never merged. Our primary region is the United States; we also operate an EU plane for users in the EU/EEA. The two are kept schema-identical by an automated check that fails our build if they drift, so a change can never land in one region and quietly miss the other.

Backups are encrypted and taken automatically by our infrastructure providers. Where personal data is transferred out of the EU/EEA or UK, we rely on Standard Contractual Clauses — see the Privacy Policy.

How we build

Every change is peer-reviewed before release, and our pipeline blocks a merge on failure of:

Dependency vulnerability scanning — both a package audit and an OSV database check, on every change.
Static analysis for security patterns, including a rule that prevents privileged database credentials being used outside their one sanctioned location.
Secret scanning, so a credential cannot be committed.

Secrets are held in a dedicated secrets manager rather than in source control or in a developer’s environment.

If something goes wrong

We notify the supervisory authority within 72 hours where the law requires it, and we tell affected users directly and plainly — what happened, what was exposed, what we have done, and what you should do. We would rather tell you early and imperfectly than late and neatly.

Reporting a vulnerability

Send it to security@kreedo.ai. We aim to acknowledge within two working days, and we will not pursue anyone who reports in good faith, gives us reasonable time to fix, and does not access or alter data that is not theirs.

Honest limits

No system is perfectly secure, and we will not pretend otherwise. We are an early-stage company: we have not yet completed an independent penetration test or a SOC 2 audit, and we would rather tell you that than let a security page imply certifications we do not hold. What we can promise is that security decisions are made in your favour by default, and that everything on this page is a commitment we expect to be held to.

Sub-processors & integrations

Sub-processors

Version 1.0 · last updated 2 August 2026 · applies to kreedo.ai and the Kreedo apps

This page lists the third parties that process personal information on Kreedo’s behalf. It forms part of our Privacy Policy and is referenced by Section 5.1 of that policy.

Each provider below processes personal information only on our instructions, under a contract requiring appropriate confidentiality and security. We do not sell your personal information or your health data.

Because the Services evolve, we may add, change, or remove providers. When we add one within a category already listed here, we update this page. Where a change materially affects how your personal data is processed, we give notice as described in Section 15 of the Privacy Policy.

Infrastructure

Provider	Purpose
Supabase	Database, authentication and storage (EU and US regions)
Vercel	Application hosting and delivery
Cloudflare R2	File and media storage — uploads such as photos and lab documents
Inngest	Background processing and workflow jobs

Product analytics & monitoring

Provider	Purpose
PostHog	Product analytics (privacy-oriented, EU-hosted)
Sentry	Error and performance monitoring

Communications & payments

Provider	Purpose
Resend	Transactional and, where permitted, marketing email
Payment processor	Subscription billing, under its own terms and privacy policy

Artificial intelligence

Provider	Purpose
AI / LLM providers	Extracting information from documents and images, summarisation, and generating insights. See Section 6 of the Privacy Policy.

If you connect your own AI provider (“bring your own model”), that provider is not a Kreedo sub-processor — it processes your data at your direction, under its own terms.

Data sources you connect

These receive or provide data only when you connect them, and only to the extent you authorise.

Provider	Purpose
Oura	Wearable and health-device data
WHOOP	Wearable and health-device data
Withings	Wearable and health-device data
Apple Health (Apple Watch)	Wearable and health-device data
Viome	Laboratory, biomarker and microbiome data
PowerDNA	Genetic testing data
YourMove	Nutrition and food data
USDA FoodData Central	Nutrition and food reference data
Recall.ai	Live coaching / video capture, where you participate

Questions

Write to privacy@kreedo.ai for a copy of our data processing agreements, our international transfer safeguards, or any question about a provider listed here.

Something here unclear? Tell us and we will rewrite it.legal@kreedo.ai

Privacy

1. Who We Are and How to Contact Us

2. Information We Collect

3. Sensitive & Consumer Health Data — Legal Bases and Consent

4. How We Use Information

5. How We Share Information; Service Providers & Integrations

6. Artificial Intelligence, LLMs & “Bring Your Own Model”

7. International Data Transfers

8. Data Retention

9. Your Rights and Choices

10. Security

11. Cookies and Similar Technologies

12. Children’s Privacy

13. When We Act as a Processor for a Business (B2B)

14. Third-Party Links

15. Changes to This Privacy Policy

16. Contact Us

Terms

1. Accounts

2. Access to the Services

3. User Content

4. Indemnification

5. Third-Party Links & Ads; Other Users

6. Services, Integrations & Third-Party Providers

7. User-Connected Services (Wearables, Labs, Genetics & More)

8. Health Data & Uploads

9. Artificial Intelligence & User-Provided AI Services

10. Subscriptions, Fees & Billing

11. Term and Termination

12. Disclaimers and Limitation of Liability

13. General

14. Copyright Policy (DMCA)

15. Contact Information

Cookies

Strictly necessary

Preference

Analytics — consent required

Performance

Advertising

Your choice, and how to change it

Questions

Disclaimer

1. Not Medical Advice

2. No Professional Relationship

3. The Machine Never Prescribes

4. Artificial Intelligence & Automated Output

5. Third-Party and Imported Data

6. No Guarantees; Individual Results Vary

7. Assumption of Risk

8. Not a Medical Device

9. Emergencies

10. External Links

11. Limitation of Liability

12. Contact

Security

Encryption

Access

Your account

Where your data lives

How we build

If something goes wrong

Reporting a vulnerability

Honest limits

Sub-processors

Infrastructure

Product analytics & monitoring

Communications & payments

Artificial intelligence

Data sources you connect

Questions