Kiplet Privacy Notice.

1. The short version

• Kiplet helps you find care, get ready for visits and keep your care in one place.
• You choose what to add. We use it to run Kiplet for you.
• We don’t sell your information. We don’t show ads or use advertising trackers.
• You can download your information or delete your whole account at any time.
• Kiplet is not a clinic, insurer or health plan. It doesn’t send your information to a clinic, insurer or employer.

2. Who we are

Kiplet is run by Kiplet. Questions about privacy: support@kiplet.health.

This notice covers the Kiplet app at kiplet.health (in a web browser or added to your home screen) and Kiplet’s public pages on the same site, like the guides.

3. What we keep when you make an account

To sign you in

• Your email address.
• A password, if you choose to set one. Your password goes through Kiplet’s server to our sign-in service, which saves only a scrambled (hashed) form. Kiplet doesn’t save or log it.

What you choose to add

Kiplet saves only what you type, pick or upload, such as:

• The name you want Kiplet to use.
• Your care goals, for example dental care, vision, mental health or physical health.
• Your answers to Kiplet’s questions, including the dental safety check.
• Places you choose or add, with their names, addresses and phone numbers.
• Your ZIP code, when you search for places.
• Visits: dates and times, what happened, prices you were quoted, notes, and questions to ask.
• Copies of records you upload: photos or PDFs, up to 5 MB each.
• Medicines, allergies, coverage and memberships you list.
• Care Fund plans: amounts and dates you type in yourself.
• Your brushing routine and activity notes.
• How your Kiplet looks: body tone, shape and any mobility aid you choose.
• Preferences, such as written instructions or step-free access, and your language.

From the earlier Kiplet app

If you used Kiplet before October 13, 2026, your account may still hold what you saved there. That can include your profile, care plans, visits, medicines, allergies, findings, coverage, costs and uploaded files. It stays in your account until you delete it. You can download it (see §11).

4. Why we use it

We use your information only to:

• sign you in and keep your account safe,
• save your care so it’s there next time, on any device,
• find places near the ZIP code you give,
• help you get ready for calls and visits and remember what happened,
• give you the copies you ask for, and
• answer you when you contact us.

We don’t use your information for advertising. We don’t build profiles to sell or to target ads. Kiplet doesn’t send your information to AI services.

5. Finding places near you

• When you type a ZIP code, Kiplet’s server asks the national provider registry (NPPES), run by the U.S. Centers for Medicare & Medicaid Services, for places in that ZIP code. The registry gets only the ZIP code and the kind of care. It doesn’t get your name, email or account. Kiplet keeps each ZIP code’s answer for one day so the same search is faster.
• Places Kiplet has checked come from Kiplet’s own list.
• When you tap “Use my location,” your device asks you first. Kiplet rounds the spot to about 110 meters (about 360 feet) before it leaves your device. Kiplet’s server sends that rounded spot to the U.S. Census Bureau geocoder to find your ZIP code. Kiplet doesn’t save or log your location. If you then search, Kiplet keeps only the ZIP code.

6. Who helps us run Kiplet

These companies work for Kiplet. They get only what they need to do their job:

• Supabase handles sign-in, the database and private file storage. It gets your account and everything you save.
• Vercel hosts the app and its server. It gets each request, including your IP address and browser details.
• Google Workspace sends sign-in emails from Kiplet. It gets your email address and the sign-in link.
• Cloudflare Web Analytics counts visits to public pages only (guides and info pages). It isn’t on app screens. It gets the page address, the site you came from and page speed. No cookies.

Public agencies that answer place searches (§5): the CMS provider registry and the U.S. Census Bureau geocoder.

Your information is stored in the United States.

7. When we share information

We don’t sell your information. We don’t share it for advertising.

We share it only:

• with the services in §6, to run Kiplet;
• when you choose to, for example by calling a place, or by showing or sending a copy yourself;
• if the law requires it, such as a valid court order; or
• if Kiplet is sold or merged. Then this notice would still protect your information, and we’d tell you first.

Kiplet never sends your information to a clinic, insurer or employer on its own. It doesn’t book visits or call anyone for you.

8. Cookies and storage on your device

Kiplet uses only what it needs to work. No advertising or tracking cookies.

• sb-…-auth-token keeps you signed in, until you sign out or the sign-in expires.
• kiplet_locale remembers your language, for 1 year.
• kiplet_locale_pending holds a language you picked before signing in, until it’s saved to your account. It lasts up to 1 year and is removed once saved.

Kept only on your device (never sent to Kiplet):

• your account photo,
• your reading size,
• whether celebration messages are quiet,
• a brushing timer in progress, and
• unsaved drafts in the open tab. Kiplet clears these drafts when you sign out.

Calendar files (.ics) for your visits are made on your device. Nothing is sent when you add them to your calendar.

9. Who at Kiplet can see your information

Kiplet’s app has no staff screen for reading your care. Only the people who run Kiplet can access account data, and only when needed to support you, fix problems, keep Kiplet secure or follow the law. We don’t sell it or use it for ads. Kiplet’s AI tools don’t read your records.

10. How long we keep it

• Your account and what you saved stay until you delete them or delete your account. Kiplet doesn’t delete them on a timer.
• Your location from “Use my location” is never kept.
• Our service providers keep short technical logs, like the time of a request and an IP address, for a limited time.

11. Your choices

You can do all of this yourself in My Care → Settings → Privacy & your data:

• Download my information: a file with everything saved in your Kiplet.
• Download my kiplet.health data: a .zip with everything you saved in the earlier Kiplet app, plus your uploaded files.
• Delete my account: deletes your whole Kiplet account. See below.
• Change your name and preferences, or remove items you added.

How to delete your account

1. Go to kiplet.health in any web browser (no app needed) and sign in with your account email.
2. Open My Care, then Settings.
3. Under Privacy & your data, choose Delete my account.
4. Type DELETE MY KIPLET and confirm.

This deletes your sign-in, everything saved in your Kiplet, everything from the earlier Kiplet app, and every file you uploaded. It can’t be undone.

Can’t sign in? Email support@kiplet.health from your account’s email address and ask us to delete it. We’ll do it within 30 days. You can find these steps at kiplet.health/delete-account.

What deletion can’t remove:

• copies you downloaded,
• your account photo on each device. Remove it in Settings before you delete, or clear your browser’s data for kiplet.health,
• events you added to your own calendar, and
• records kept by a clinic, insurer, pharmacy or anyone else.

12. Your rights

Wherever you live, you can ask us to:

• give you a copy of your information,
• correct it,
• delete it, or
• tell you how we use it.

Most of this you can do yourself in Settings (§11). For anything else, email support@kiplet.health. We answer within 30 days. We may ask you to write from your account’s email so we know it’s you. We won’t treat you differently for asking.

13. How we protect it

• Kiplet checks who you are before it reads or changes your account.
• Database rules let each account reach only its own information.
• Uploaded files go to private storage, in a folder only your account can open. A link to open a file works for only 60 seconds.
• Connections use HTTPS. Pages with your information are marked so browsers don’t cache them.
• To delete your account, you have to type a confirmation phrase.

No service can promise perfect security. Keep downloaded copies somewhere only you can open.

14. Children

Kiplet is for people 18 and older. We don’t knowingly keep information from children under 13. If you think a child has an account, email support@kiplet.health and we’ll delete it.

15. Health information and HIPAA

Kiplet is a guide and organizer that you use for yourself. It isn’t a clinic, insurer or health plan. We still treat everything you add as private and sensitive.

16. Consumer health data

This section sums up how Kiplet handles the health information you add, sometimes called consumer health data.

What health data we keep. Only what you add: your care goals (including mental health), your answers to Kiplet’s questions (including the dental safety check), your visits, notes and questions, the medicines, allergies, coverage and memberships you list, copies of records you upload, your brushing routine, any mobility aid you choose for your Kiplet, and the places you choose for care and the ZIP code you search from. If you used the earlier Kiplet app, it also includes the health details you saved there (§3).

Why we use it. Only to run Kiplet for you: to save your care, find places near you, help you get ready for visits and give you the copies you ask for (§4). We don’t use it for advertising.

Where it comes from. From you. Kiplet saves only what you type, pick or upload. Kiplet doesn’t get health information about you from anyone else.

Who we share it with. We don’t sell it and we don’t share it for advertising. Service providers that run Kiplet for us handle it only to do that work: Supabase stores it and Vercel runs the app’s server (§6). Any other sharing is limited to what §7 describes, such as when you choose to share it or the law requires it.

Your rights. You can download, change or delete it yourself in Settings, or delete your whole account (§11). You can also email support@kiplet.health to ask for a copy, a correction, a deletion or a list of who has received it. We answer within 30 days, and we won’t treat you differently for asking.

17. Changes to this notice

If we change this notice, we’ll post the changes here and update the date at the top. For big changes, we’ll also tell you in the app or by email before they take effect.

18. Contact

Kiplet, support@kiplet.health