Privacy Policy (United States)

A. Scope & Application

This Privacy Policy applies to personal data processed by Diamond Star Technologies, Inc. (“DST,” “we,” “our,” “us”) when you use DiamondStarTech.com, FoodQualityGuide.com, KarbCoach.com, the KarbCoach nutrition-coaching mobile application, related onboarding/account flows, and related services (collectively, the “Platform” or “Services”).

The KarbCoach mobile application, account registration, personalized features, subscriptions, promotional credits, and other account-based consumer Services are offered only to eligible users in the United States and its territories (“U.S.”) unless DST expressly states otherwise. Public informational webpages may be technically accessible outside the U.S. If you are outside the U.S., do not create an account or submit questionnaire, profile, or health-related information unless DST has expressly made the relevant account-based Service available in your location.

This Policy explains how we collect, use, disclose, and safeguard your information in connection with the Services. Capitalized terms not defined here inherit meanings from the DST Terms of Use and End-User License Agreement.

B. Overview

Information We Collect

We want you to clearly understand the types of information we collect when you use our services. Our goal is to provide better, more personalized experiences — from remembering your preferences to tailoring recommendations, enhancing security, and improving reliability. The information DST collects, and how it’s used, depends on how you interact with our services and which features you choose to use.

We associate the information we collect with unique identifiers tied to the browser, application, or device you’re using. This allows us to maintain preferences across sessions or show more relevant results based on your activity. We also collect information linked to your account if you create one.

B.1 Information You Provide or Create

When you create a KarbCoach or DST account through FoodQualityGuide.com, KarbCoach.com, the KarbCoach app, or another DST registration flow, you provide personal information such as your email address, phone number, and a password or other authentication credential. The phone number you provide is used for registration verification, account security, and anti-abuse purposes associated with accessing the KarbCoach app. You may also choose to add payment details to purchase subscriptions or in-app services, although app-store payment information is generally handled by the applicable store or payment provider.

In addition, you may choose to provide:

• Profile details such as age range, height, weight, activity level, and general health goals;
• Pre-registration or in-account questionnaire responses, such as dietary preferences, food restrictions, eating patterns, activity information, wellness goals, glucose-related goals, or weight-related goals;
• Nutrition-related entries such as foods eaten, recipes, notes, or tags you add to meals;
• Photos or videos of meals or food items for analysis;
• Text descriptions of meals, habits, or goals in chat or log entries;
• Feedback you submit through support channels or in-app surveys.

You are not required to provide health or sensitive information merely to browse public FoodQualityGuide pages. If you choose to enter, upload, or sync health-related information for personalized Services (for example, by connecting a compatible device or logging health data manually), it will be processed in accordance with this Policy and any additional consent or collection notice required by applicable law.

B.2 Information Collected Automatically

Your apps, browsers & devices

We collect information about the apps, browsers, and devices you use to access the Services. This helps us provide features like automatic updates, adaptive settings, security protections, and service optimization. The information collected may include:

• Unique identifiers associated with your device or app installation;
• Browser type and settings;
• Device type and settings;
• Operating system and version;
• Application version numbers;
• Interaction data, such as IP address, crash reports, system activity, and request metadata (e.g., date, time, referrer URL).

This information is collected when your device communicates with DST servers — for instance, when installing an app, checking for updates, or reporting an error.

B.3 Unique Identifiers & Activity

We also collect information about how you use our services, which may help us improve your experience by offering relevant recommendations, personalization, or security protections. Activity information may include:

• Buttons you tap, screens you view, and in-app flows you complete;
• Frequency and timing of meal logging and other feature usage;
• Search terms you enter into in-app search or chat features;
• Interactions with in-app educational content (e.g., which articles you open);
• General purchase and subscription activity.

If you contact support, we may also log metadata about those interactions (such as time, date, channel, and outcome) to help diagnose issues and improve service.

B.4 AI & Model Processing

KarbCoach and related DST Services use artificial intelligence and machine-learning models, including third-party large language models and computer-vision models, to provide certain features — for example, generating meal descriptions and nutrition summaries from your text, estimating likely food items from photos, or producing educational explanations and suggestions.

When you use these features, some of the content you provide — such as meal descriptions, questions, food or product information, images of food, and questionnaire or profile context when needed to personalize a requested output — may be sent to AI or model service providers so they can generate the requested output. These providers process information on DST’s behalf under applicable service terms, contracts, and/or data-processing commitments.

We do not authorize our AI vendors to use your personal information for their own independent advertising purposes. We also do not knowingly allow identifiable health, nutrition, or questionnaire information to be sold or disclosed to third parties for their own independent marketing.

DST does not authorize third-party general-purpose AI providers to use identifiable health-related User Content or questionnaire responses to train their general-purpose models unless DST separately discloses that practice and obtains any consent required by law. Provider retention and security practices may vary by service and configuration; DST uses available contractual and technical controls appropriate to the processing and periodically reviews material provider practices.

B.5 Questionnaires & Consumer Health Data

FoodQualityGuide or KarbCoach may offer a questionnaire before or after account registration so you can receive more relevant food and nutrition insights. Responses may include dietary preferences, eating patterns, activity information, food restrictions, wellness goals, glucose-related goals, weight-related goals, or other information that may qualify as sensitive personal information or “consumer health data” under some state laws.

Pre-registration data. Questionnaire responses provided before registration may be associated temporarily with a browser, device, session, or temporary identifier so the onboarding flow can function. If you create an account, responses you choose to save may be linked to that account and become available in KarbCoach. If you do not create an account, DST retains pre-registration information only as long as reasonably necessary for the onboarding flow, security, fraud prevention, and other disclosed purposes, after which it is deleted or de-identified in accordance with our retention practices.

Separate questionnaire consent. Before DST collects questionnaire responses that constitute consumer health data through a pre-registration questionnaire, DST will present a separate, clear consent notice when consent is required by applicable law. The notice will identify the categories of consumer health data to be collected, the specific purposes for which it will be used, the categories of entities with whom it may be shared where required, and how you can withdraw consent from future collection or sharing. Acceptance of the general Terms of Use is not treated as a substitute for a separate health-data consent where the law requires separate consent. You may decline optional health-related questions, although doing so may limit personalization.

For the detailed questionnaire disclosure used with the consent flow, see the Health & Personalization Data Notice.

C. Categories of Data Collected

To deliver personalized nutrition insights and app functionality, we may collect the following categories of data, depending on how you use the Platform and what you choose to share. All examples are illustrative, not exhaustive.

This table scrolls horizontally on small screens.

Special Data Note: Certain information (for example, health-related metrics, questionnaire responses, dietary restrictions, wellness goals, or health-related inferences) may be considered “sensitive” personal information or “consumer health data” under U.S. state privacy laws. We collect such data only as described in this Policy and any applicable collection notice or consent flow. We do not sell sensitive personal information or identifiable consumer health data or use such data for third-party advertising.

D. Purposes of Processing

This table scrolls horizontally on small screens.

E. Data Sharing

We disclose personal data to third parties only as needed to operate, secure, and improve the Platform, or as required by law. Typical categories of recipients include:

• Infrastructure & hosting providers – Cloud platforms, content delivery networks, and database hosting services that store data and keep KarbCoach running.
• Analytics & diagnostics providers – Service providers that process website/app telemetry, crash logs, performance information, and general usage data to help operate, secure, and improve the Services. DST does not intentionally provide the contents of health questionnaires or identifiable health logs to advertising analytics systems.
• AI & model providers – Service providers that process some content you submit, such as chat text, product information, meal photos, or relevant questionnaire/profile context, when needed to generate AI or computer-vision outputs you request.
• Authentication, communications & security providers – Service providers that support login, email/SMS verification, fraud prevention, account security, and transactional service communications.
• Payment processors and app stores – Apple App Store, Google Play Billing, RevenueCat, and payment processors that handle your purchases and subscriptions.
• Professional advisors – Lawyers, auditors, or consultants who help us comply with legal requirements and run our business.
• Legal & compliance recipients – Courts, regulators, or law-enforcement agencies when we believe disclosure is required or appropriate under applicable law.
• Business successors – A buyer, successor, financing source, or other party involved in a merger, acquisition, reorganization, bankruptcy, financing, or sale of all or part of DST, subject to applicable law.

We do not sell your personal information for money. We also do not share your personal information with third parties for their own independent targeted advertising. We do not knowingly sell identifiable consumer health data or disclose identifiable consumer health data for third-party targeted advertising.

Some service providers may process data on servers located outside your state or region. Where required by law, we put in place appropriate safeguards and contracts to help protect your information.

F. Cookies & Tracking

We use first-party cookies, local storage, and mobile SDKs for purposes such as authentication, storing preferences, measuring performance, and improving the app. On the web, we may also use limited first-party analytics cookies to understand how users interact with our pages.

As of the “Last updated” date above, DST does not use third-party advertising SDKs in the KarbCoach mobile app for cross-app behavioral advertising. Analytics, crash-reporting, security, and other operational SDKs are not used by DST for that purpose. If DST introduces advertising technologies or materially changes these practices, we will update this Policy and provide consent or opt-out controls where required by law.

We do not intentionally place health-questionnaire answers, meal descriptions, or identifiable health-related content into advertising cookies or advertising pixels.

You can manage certain cookie and tracking preferences through your browser or device settings, and through in-app settings where available.

G. Retention

We keep personal data only as long as reasonably necessary for the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods include:

• Account data: While your account is active, plus a reasonable period (for example, up to 7 years) after closure to meet tax, audit, and legal requirements.
• Questionnaire and health-related data: Retained as reasonably necessary to provide the personalized features you choose and according to applicable deletion or consent-withdrawal requests, subject to legal, security, fraud-prevention, and backup exceptions.
• Payment/transaction records: Typically up to 7 years, in line with U.S. federal tax and accounting rules.
• Deleted content (e.g., photos, notes): Removed from active storage within a reasonable period (for example, 30 days) and from backups on their normal cycle.

When data is no longer needed for any legitimate business or legal purpose, we either delete it or irreversibly de-identify it.

H. Security Measures

We implement a range of administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are informed by widely recognized frameworks (such as NIST and SOC-style controls) and are periodically reviewed.

Supported communications between our websites/apps and DST systems are intended to use encrypted transport such as HTTPS/TLS where technically applicable.

However, no internet, mobile, or cloud service can be guaranteed 100% secure. You are responsible for using strong passwords, keeping your devices secure, and notifying us promptly at security@diamondstartech.com if you suspect unauthorized access to your account.

If a security incident triggers notification obligations under applicable law, DST will provide the notices required by that law. Depending on DST’s legal status, data practices, and the affected information, applicable requirements may include state breach-notification laws and, where DST or a relevant service qualifies for coverage, the Federal Trade Commission’s Health Breach Notification Rule.

I. Your Privacy Rights (U.S.)

Depending on your state of residence, the type of information involved, and whether the applicable law applies to DST, you may have rights under U.S. privacy laws (such as the California Consumer Privacy Act/CPRA, Washington consumer-health-data law, or similar state laws) to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Request information about how we collect, use, and disclose personal information;
• Opt out of certain data sharing where applicable (for example, “sale” or “sharing” under state law); and
• Not be discriminated against for exercising your privacy rights.
• Withdraw consent from future collection or sharing of consumer health data where applicable;
• Request a portable copy of certain personal information where applicable;

You can exercise these rights by emailing us at privacy@diamondstartech.com or using any in-app privacy controls we provide. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframes required by applicable law.

You may opt out of receiving marketing emails, texts, or promotional calls at any time via the unsubscribe link in the communication, via in-app settings, or by contacting us at the address above. Transactional or legally required notices (such as account, security, or billing notifications) are not considered marketing and will still be sent while your account is active.

I.1 Consumer Health Data Privacy

This section supplements the rest of this Policy when a U.S. state consumer-health-data law applies, including the Washington My Health My Data Act (“MHMDA”).

Categories and Sources

Depending on the features you use, consumer health data may include dietary preferences or restrictions; eating patterns; weight-, activity-, glucose-, or metabolic-related information; wellness and nutrition goals; meal and food logs; questionnaire responses; information from services or devices you expressly connect; images, text, or audio from which health-related information may be inferred; and health-related inferences or scores. Sources may include you directly, services or devices you expressly connect, your use of the Services, and inferences generated from information you provide.

Purposes

We may collect or use consumer health data to provide the feature you request, personalize food and nutrition insights, generate educational analyses, maintain account history, secure the Services, prevent abuse, respond to requests, and improve Service reliability and quality in ways consistent with this Policy and applicable consent requirements.

Sharing and Recipients

To provide requested functionality, DST may disclose the minimum reasonably necessary consumer health data to categories of processors or service providers such as cloud/hosting providers, AI/model processors, authentication/security providers, communications providers, and other processors that perform services for DST. DST may also disclose information when required by law. DST does not sell consumer health data and does not currently disclose consumer health data to corporate affiliates for their own independent purposes.

Consent and Additional Uses

Where applicable law requires consent before collection or sharing, DST will obtain the required consent before the relevant collection or sharing. A collection-consent request will clearly describe the categories of consumer health data involved, the purpose and specific ways the data will be used, the categories of entities with whom the data is shared where required, and how consent can be withdrawn. Where applicable law requires sharing consent that is separate from collection consent, DST will obtain that separate consent. DST will not collect, use, or share additional categories of consumer health data, or use existing consumer health data for additional purposes requiring consent, without first providing the required disclosure and obtaining the required consent.

When DST uses a health-related questionnaire consent flow, the detailed disclosure is available in the Health & Personalization Data Notice.

Your Rights

Where applicable, you may request confirmation of whether DST is collecting, sharing, or selling consumer health data; request access; obtain information about certain recipients; withdraw consent from future collection or sharing; and request deletion. Submit a request or withdraw applicable consent by emailing privacy@diamondstartech.com with “Consumer Health Data Request” in the subject line, or through any applicable website/app control we provide. We may authenticate requests as permitted by law and will provide any appeal process required by applicable law.

Consumer Health Data Privacy Link. Where applicable consumer-health-data law requires a prominent homepage link to this notice, DST will provide a prominent link labeled “Consumer Health Data Privacy” or substantially similar wording on the applicable website or service.

J. Children

The Platform is designed for and intended to be used only by individuals 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn that we have inadvertently collected personal information from a child under 18, we will take reasonable steps to delete it. If you believe a child has provided us with personal information, please contact us at privacy@diamondstartech.com.

K. Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will provide a clear notice, such as by:

• Posting an updated Policy with a new “Last updated” date;
• Displaying an in-app banner or notification; and/or
• Sending you an email or other direct communication, where appropriate.

Your continued use of the Platform after such changes take effect constitutes your acknowledgement of the updated Policy where permitted by law. If a material change requires new affirmative consent, including for certain consumer-health-data collection, use, or sharing, we will request that consent rather than relying on continued use.

L. Contact