GynoShift

Privacy Policy

Effective 10 August 2026 · Kaniki Pty Ltd · [email protected]

The short version: your progress photos never leave your phone. The one photo you may submit for an AI read is analysed once and never stored. In the community you appear only as an anonymous handle. We don't sell data, we don't run ad tracking, and you can delete your account — and everything tied to it — from inside the app.

Who we are

GynoShift is made by Kaniki Pty Ltd ("we", "us"). It is a self-management companion for men dealing with gynecomastia. It is an informational and educational product — not a medical device and not a source of medical advice.

What we collect, and why

• Account. When you sign in with Apple or Google we receive your name (as the provider shares it) and email address. We use these to keep your programme, Plan and history attached to you across devices, and for essential service messages. Nothing else — no marketing lists you didn't ask for.
• Onboarding answers. Your age band, how long you've noticed the condition, how tissue feels, and your goal. These shape your programme.
• Journey events. Task completions, mood check-ins, challenge outcomes, your written reflections, and Plan decisions (path chosen, surgeon chosen, date booked). These are the record your programme, streaks, weekly note and insights are honestly derived from.
• The photo check (optional, adults only). If you choose to submit a chest photo for an AI read, it is transmitted securely, analysed once by our AI processor, and never stored, never used to train any model, and never seen by a person. The written result is retained so your report works; the photo is not. We never analyse photos of anyone under 18 — an under-18 age answer never reaches the analysis service at all.
• Progress log photos. The photos and notes in your Log stay on your device only. They are never uploaded to our servers.
• Community. Posting happens under an anonymous handle (e.g. ANON_4F2K) that is privately linked to your account for custody — other users can never connect it to your name or email. Posts are public to other users. Photos you attach to posts are stripped of location metadata (EXIF/GPS), moderated, and shown blurred until a reader chooses to view them.
• Purchases. Subscriptions are processed by Apple and managed through RevenueCat. We never see or store card details; we receive only the entitlement status needed to unlock Pro.

What we deliberately don't do

• No selling or renting of personal data. Ever.
• No third-party advertising or cross-app tracking SDKs.
• No storing of analysed photos, and no human review of them.
• No use of your content to train AI models.

AI processing

Some features are written by AI from your own data: the photo read, the weekly note, and (with Pro) reflection insights. These run on vetted processors under contracts that prohibit training on your data. AI-written content is always labelled as such in the app, and it is educational — never a diagnosis.

Our processors

Apple (sign-in, payments), Google (sign-in), RevenueCat (subscription management), xAI (photo analysis), Anthropic (text generation for notes and insights), and Cloudflare (content delivery and media storage). Each receives only what its job requires.

Retention and deletion

Your data is retained while your account exists. Settings → Delete account permanently removes your account, journey history, and the private link to your community handle. Community posts, which are anonymous by design, may remain in anonymised form unless you report them for removal. Analysed photos are never retained at all.

Your rights

Depending on where you live (including under South Africa's POPIA and the EU's GDPR), you have the right to access, correct, export, or erase your personal information, and to object to processing. In-app deletion covers most of this instantly; for anything else, email [email protected] and we'll respond within 30 days.

Children

GynoShift is for adults. The photo check refuses under-18 subjects by design, and the app is rated 17+. We do not knowingly collect data from children.

Security

Data in transit is encrypted (TLS). Authentication tokens are stored in the device Keychain. Access to production systems is restricted and credentialed.

Changes

If this policy changes materially, we'll say so in the app before the change applies. The effective date above always tells you which version you're reading.