SADANA

Sadana Privacy Policy

Last updated: July 21, 2026

1.1 Who we are

Sadana (“Sadana”, “we”, “us”) is a halal-first health and fitness platform that may include meal planning, cart-building from recipes, ready-meal suggestions from partners, nutrition tracking, and optional fitness/activity integrations.

Sadana is operated by Pot & Apron Limited, the data controller responsible for your personal data.

1.2 Scope

This Privacy Policy explains how we collect, use, share, and protect personal data when you:

1.3 Information we collect

A) Information you provide

B) Information we generate from your use

C) Device, technical, and usage data

D) Activity and health data from connected platforms (optional)

If you choose to connect a health or fitness platform, we read only the specific data types you authorize, and only to power the activity features you use.

On Android, through Health Connect, with your permission we read the following data types:

On iOS, through Apple Health, with your permission we read comparable activity data (steps, active energy, and workouts).

We use this connected-platform data only to calculate your daily activity and energy balance, track your workout and movement consistency, compute your wellness (Quality-of-Life) score, and personalize the coaching and nutrition recommendations shown to you.

We do not use this data for advertising, we do not sell it, and we do not share it except as needed to operate the features you requested. You can revoke access at any time through your device's Health Connect or Apple Health settings, or through the connection settings inside Sadana.

Note: any other health-related information described in this policy (such as your weight and height) is information you enter directly in the app, not data we read from a connected health platform, unless and until we add and separately disclose such a connection.

1.4 Sensitive data

Some data (e.g., allergies, diet restrictions, health/wellness metrics) may be considered sensitive or special category data in certain jurisdictions. We only process this where:

1.5 How we use your information

We use personal data to:

Provide the Service

Personalize & recommend

Power nutrition & activity features

Improve safety, security, and reliability

Communicate with you

1.6 Legal bases for processing

Depending on your jurisdiction, we rely on one or more of:

Kenya's Data Protection Act framework includes obligations for controllers/processors and handling of automated decision-making, retention, and policies.

1.7 Automated decision-making & profiling

We may use automated systems to:

These recommendations are designed to help, not to make legal or similarly significant decisions about you. Where required, you may request more information or object to certain processing. Kenya's regulations address automated individual decision-making.

1.8 Sharing your information

We share personal data only as needed:

A) Vendors and “processors”

These parties process data under contracts and instructions, consistent with controller/processor obligations.

B) Payments

Payments may be handled by third-party payment processors (e.g., Pesapal) depending on your checkout method. We typically receive payment confirmation, transaction references, and status, but we do not need to store full card details to complete payment.

C) Retail/restaurant partners & fulfillment

If your order is fulfilled by a partner, we share what is necessary (e.g., items, delivery info, contact details) to complete fulfillment.

D) Legal and safety

We may disclose data to comply with law, protect rights and safety, prevent fraud, or respond to lawful requests.

1.9 AI features and the third-party AI service we use

Some features in Sadana are powered by artificial intelligence: logging meals from a photo or a text description; generating recipes, ingredient lists, meal plans, and nutrition explanations; summarizing your logs and progress; and the in-app and messaging-based coaching assistant.

To provide these features, we send the inputs they need to a third-party AI service, OpenAI (OpenAI, L.L.C.), which processes them on our behalf to generate a response. Depending on the feature you use, the data we send to OpenAI can include: the text you type and any food photo you submit; your name and dietary preferences; your nutrition and logged meals; your pantry items; and your goals, targets, and activity data (such as steps, calories, and workouts). We do not send your password or full payment details.

OpenAI processes this data only to provide the feature you requested, under contractual terms that require it to protect your data to a standard equivalent to the protections described in this policy, and does not use your data to train its models for its own purposes. AI-generated suggestions are provided to help you and are not a substitute for professional medical, nutritional, or fitness advice.

Before any of your data is sent to this AI service for the first time, we ask for your consent inside Sadana. AI features are optional: if you decline, the AI features stay off and the rest of the app continues to work normally. You can withdraw consent at any time by contacting us at the email address in this policy.

1.10 International transfers

Your data may be processed in countries other than where you live (e.g., where cloud providers operate). Where required, we use appropriate safeguards (contractual protections and security controls). Kenya's regulations include requirements for certain processing contexts and controller/processor obligations.

1.11 Data retention

We keep personal data only as long as necessary for:

We may anonymize or aggregate data for analytics. Kenya's regulations include retention obligations and related governance expectations.

1.12 Security

We use administrative, technical, and physical safeguards designed to protect data (access controls, encryption in transit, monitoring, least-privilege, etc.). No method is 100% secure; you are responsible for keeping your login credentials confidential.

1.13 Your privacy rights

Depending on your location, you may have rights such as:

EU/EEA/UK users: GDPR provides specific rights for data subjects (e.g., access, erasure, portability, objection).

California users: CCPA/CPRA provides rights such as access, delete, correct, opt-out, and limit use of sensitive personal information.

To exercise rights: email info@potandapron.com with “Privacy Request” in the subject. We may verify your identity before responding.

1.14 Cookies and similar technologies

We may use cookies/SDKs for:

You can manage cookies via your browser settings and manage mobile permissions within your device settings.

1.15 Children

Sadana is not directed to children under 13. If we learn we collected personal data from a child under 13, we will delete it. For teens, we recommend use under guardian guidance where required by law.

1.16 Changes to this policy

We may update this policy. We will change the “Last updated” date and, if changes are material, we will notify you in-app or by email.