Privacy Policy (United States Only)

A. Scope & Application

This Privacy Policy applies to personal data processed by Diamond Star Technologies, Inc. (“DST,” “we,” “our,” “us”) when you use the KarbCoach nutrition-coaching mobile application, website, and related services (collectively, the “Platform”).

The Platform is offered solely for use by natural persons who are physically present in, and legal residents of, the United States and its territories (“U.S.”). The Platform must not be used in any other country or jurisdiction. If you access the Platform from outside the U.S., you must immediately discontinue use.

This Policy explains how we collect, use, disclose, and safeguard your information within the U.S. Capitalized terms not defined here inherit meanings from the KarbCoach Terms and Conditions.

B. Overview

Information We Collect

We want you to clearly understand the types of information we collect when you use our services. Our goal is to provide better, more personalized experiences — from remembering your preferences to tailoring recommendations, enhancing security, and improving reliability. The information DST collects, and how it’s used, depends on how you interact with our services and which features you choose to use.

We associate the information we collect with unique identifiers tied to the browser, application, or device you’re using. This allows us to maintain preferences across sessions or show more relevant results based on your activity. We also collect information linked to your account if you create one.

B.1 Information You Provide or Create

When you create a KarbCoach or DST account, you provide personal information such as your email, phone number, and a password. You may also choose to add payment details to purchase subscriptions or in-app services.

In addition, you may choose to provide:

• Profile details such as age range, height, weight, activity level, and general health goals;
• Nutrition-related entries such as foods eaten, recipes, notes, or tags you add to meals;
• Photos or videos of meals or food items for analysis;
• Text descriptions of meals, habits, or goals in chat or log entries;
• Feedback you submit through support channels or in-app surveys.

You are not required to provide health or sensitive information to use KarbCoach. If you choose to enter or sync that information (for example, by connecting a compatible device or logging health data manually), it will be processed in accordance with this Policy.

B.2 Information Collected Automatically

Your apps, browsers & devices

We collect information about the apps, browsers, and devices you use to access KarbCoach. This helps us provide features like automatic updates, adaptive settings, security protections, and service optimization. The information collected may include:

• Unique identifiers associated with your device or app installation;
• Browser type and settings;
• Device type and settings;
• Operating system and version;
• Mobile network information (such as carrier name and phone number, if available);
• Application version numbers;
• Interaction data, such as IP address, crash reports, system activity, and request metadata (e.g., date, time, referrer URL).

This information is collected when your device communicates with DST servers — for instance, when installing an app, checking for updates, or reporting an error.

B.3 Unique Identifiers & Activity

We also collect information about how you use our services, which may help us improve your experience by offering relevant recommendations, personalization, or security protections. Activity information may include:

• Buttons you tap, screens you view, and in-app flows you complete;
• Frequency and timing of meal logging and other feature usage;
• Search terms you enter into in-app search or chat features;
• Interactions with in-app educational content (e.g., which articles you open);
• General purchase and subscription activity.

If you contact support, we may also log metadata about those interactions (such as time, date, channel, and outcome) to help diagnose issues and improve service.

B.4 AI & Model Processing

KarbCoach uses artificial intelligence and machine-learning models, including third-party large language models and computer-vision models, to provide certain features — for example, generating meal descriptions and nutrition summaries from your text, estimating likely food items from photos, or producing educational explanations and suggestions.

When you use these features, some of the content you provide (such as meal descriptions, questions you ask, or images of food) is sent to our AI service providers so they can generate the requested output. These providers act as our processors or service providers under their own contracts and are required to handle your data in accordance with applicable privacy laws.

We do not permit our AI vendors to use your personal information for their own advertising purposes. We also do not knowingly allow your identifiable health or nutrition logs to be sold or shared with third parties for their own independent marketing.

C. Categories of Data Collected

To deliver personalized nutrition insights and app functionality, we may collect the following categories of data, depending on how you use the Platform and what you choose to share. All examples are illustrative, not exhaustive.

Special Data Note: Certain information (for example, health-related metrics) may be considered “sensitive” under U.S. state privacy laws. We collect such data only when you actively choose to enter it or connect a third-party integration, and only as needed to provide the relevant feature. We do not sell sensitive personal information or use it for third-party advertising.

D. Purposes of Processing

E. Data Sharing

We disclose personal data to third parties only as needed to operate, secure, and improve the Platform, or as required by law. Typical categories of recipients include:

• Infrastructure & hosting providers – Cloud platforms, content delivery networks, and database hosting services that store data and keep KarbCoach running.
• Analytics & AI vendors – Service providers that process app telemetry, crash logs, and some of your content (such as chat text or meal photos) to generate AI responses or aggregate analytics.
• Payment processors and app stores – Apple App Store, Google Play Billing, RevenueCat, and payment processors that handle your purchases and subscriptions.
• Professional advisors – Lawyers, auditors, or consultants who help us comply with legal requirements and run our business.
• Legal & compliance recipients – Courts, regulators, or law-enforcement agencies when we believe disclosure is required or appropriate under applicable law.

We do not sell your personal information for money. We also do not share your personal information with third parties for their own independent targeted advertising.

Some service providers may process data on servers located outside your state or region. Where required by law, we put in place appropriate safeguards and contracts to help protect your information.

F. Cookies & Tracking

We use first-party cookies, local storage, and mobile SDKs for purposes such as authentication, storing preferences, measuring performance, and improving the app. On the web, we may also use limited first-party analytics cookies to understand how users interact with our pages.

We do not use third-party advertising trackers in the KarbCoach mobile app for cross-app tracking. If we introduce optional advertising technologies in the future, we will seek your consent where required and update this Policy.

You can manage certain cookie and tracking preferences through your browser or device settings, and through in-app settings where available.

G. Retention

We keep personal data only as long as reasonably necessary for the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods include:

• Account data: While your account is active, plus a reasonable period (for example, up to 7 years) after closure to meet tax, audit, and legal requirements.
• Payment/transaction records: Typically up to 7 years, in line with U.S. federal tax and accounting rules.
• Deleted content (e.g., photos, notes): Removed from active storage within a reasonable period (for example, 30 days) and from backups on their normal cycle.

When data is no longer needed for any legitimate business or legal purpose, we either delete it or irreversibly de-identify it.

H. Security Measures

We implement a range of administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are informed by widely recognized frameworks (such as NIST and SOC-style controls) and are periodically reviewed.

However, no internet, mobile, or cloud service can be guaranteed 100% secure. You are responsible for using strong passwords, keeping your devices secure, and notifying us promptly at security@diamondstartech.com if you suspect unauthorized access to your account.

I. Your Privacy Rights (U.S. Only)

Depending on your state of residence, you may have rights under U.S. privacy laws (such as the California Consumer Privacy Act/CPRA or similar state laws) to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Request information about how we collect, use, and disclose personal information;
• Opt out of certain data sharing where applicable (for example, “sale” or “sharing” under state law); and
• Not be discriminated against for exercising your privacy rights.

You can exercise these rights by emailing us at privacy@diamondstartech.com or using any in-app privacy controls we provide. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframes required by applicable law.

You may opt out of receiving marketing emails, texts, or promotional calls at any time via the unsubscribe link in the communication, via in-app settings, or by contacting us at the address above. Transactional or legally required notices (such as account, security, or billing notifications) are not considered marketing and will still be sent while your account is active.

J. Children

The Platform is designed for and intended to be used only by individuals 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn that we have inadvertently collected personal information from a child under 18, we will take reasonable steps to delete it. If you believe a child has provided us with personal information, please contact us at privacy@diamondstartech.com.

K. Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will provide a clear notice, such as by:

• Posting an updated Policy with a new “Last updated” date;
• Displaying an in-app banner or notification; and/or
• Sending you an email or other direct communication, where appropriate.

Your continued use of the Platform after such changes take effect constitutes your acknowledgement of the updated Policy.

L. Contact