Privacy Notice

Your care information stays in your hands

Kramio helps you organize care for yourself, people you care for, and pets.

Before you sign in, this notice explains what information Kramio uses, why it is needed, what is optional, and what choices you control.

You can change optional choices later in Settings → Privacy.

Kramio is not a doctor, hospital, pharmacy, diagnostic laboratory, veterinarian, or emergency service. Kramio can organize care information, generate summaries and suggestions, help you plan next steps, and prepare actions for your approval. It does not diagnose, prescribe, or replace a licensed professional.

If someone may be in immediate danger, contact the emergency service or appropriate licensed professional where you are located.

---

What Kramio may collect

1. Account information

This may include:

• name;
• mobile number;
• email address;
• preferred language;
• country or region;
• accessibility preferences; and
• the names, relationships, or labels of Care Subjects you add, such as “Dad,” “Mom,” “Sam,” or a pet name.

2. Care and health information

This may include information you enter, upload, describe, or connect, such as:

• conditions;
• medicines and doses;
• allergies;
• diet and nutrition;
• vaccines and preventive care;
• symptoms;
• appointments;
• care tasks;
• blood pressure, weight, blood glucose, heart rate, and other measurements;
• prescriptions;
• lab reports;
• discharge documents;
• clinician notes;
• veterinary information; and
• things Kramio is asked to monitor or help you remember.

3. Voice, messages, photos, and documents

Kramio may process what you:

• type;
• say;
• photograph; or
• upload

so it can understand the information and update the relevant care picture.

Voice may be converted to text. Unless you separately choose to keep a recording, Kramio may delete the audio after transcription and any required operational processing.

4. Connected health and device information

Only if you choose to connect a supported source, Kramio may receive selected information from services or devices such as:

• Apple Health;
• Android Health Connect;
• wearables;
• home health devices; or
• other supported connected-health services.

You choose which supported source and data types to authorize. You can disconnect a source later.

Connected information can be incomplete, delayed, duplicated, manually entered, or inaccurate. Kramio is not an emergency-monitoring service.

5. Device and app information

Kramio may collect technical information needed to operate, secure, and improve the service, such as:

• device type;
• operating-system version;
• app version;
• crash information;
• security events;
• login and authentication events; and
• basic feature-performance information.

Kramio does not collect continuous precise location for general tracking.

If you choose a local service or fulfillment feature, Kramio may use a city, postal code, ZIP code, postcode, pincode, or other location you provide for that specific purpose.

6. Actions and transactions

If you choose to use fulfillment features, Kramio may process information needed to prepare or track an approved action, such as:

• medicine refill or reorder requests;
• diagnostic bookings;
• grocery or meal requests;
• appointments;
• provider messages;
• delivery or booking status; and
• the Service Partner selected.

Kramio does not submit an external transaction without the approval required by the feature.

---

Required to use Kramio Care

Please confirm each statement separately.

I am 18 years or older.

Only adults may create a Kramio account.

A child may be added as a Care Subject only by a parent, lawful guardian, or another person with valid legal authority.

I explicitly agree that Kramio may process the health and care information I provide or connect in order to provide Kramio Care.

This includes using that information to:

• organize the care picture;
• maintain and update a care plan;
• generate summaries and suggestions;
• surface next steps;
• create reminders and check-ins;
• show trends and measurements;
• prepare care reports; and
• prepare actions that I can review and approve.

This required processing is limited to providing and securing the Kramio Care service, together with processing otherwise permitted by applicable law and described in the Privacy Notice.

You can withdraw this consent where applicable, but Kramio may then be unable to provide care features that require health information.

If I add another person’s information, I have their permission or I am legally allowed to act for them.

You should add another person’s health or care information only if:

• they have agreed;
• you are their parent or lawful guardian;
• you have another valid legal authority; or
• applicable law otherwise permits it.

Where practical, tell the person that you use Kramio to help coordinate their care.

I understand that Kramio uses AI and can make mistakes.

Kramio may use artificial intelligence to:

• understand voice and documents;
• organize care information;
• create summaries;
• generate suggestions;
• identify missing information;
• update plans; and
• prepare proposed next steps.

AI Output may be incomplete, inaccurate, or out of date.

Check important information, especially:

• diagnoses;
• medicine names and doses;
• allergies;
• measurements;
• dates;
• professional instructions; and
• urgent or safety-related information.

I understand that Kramio supports care but does not diagnose, prescribe, or replace professional care.

Always follow the instructions of the appropriate licensed professional.

Do not start, stop, substitute, or change a medicine or dosage because of Kramio AI Output.

I have read the Kramio Privacy Notice and Terms of Use.

• Privacy: kramio.com/privacy
• Terms: kramio.com/terms

---

Optional choices

These choices are off by default unless a regional law or feature flow requires a different presentation.

You can change them later.

Use Kramio on WhatsApp — Default: Off

If you turn this on, you may send and receive supported Kramio messages through WhatsApp.

Messages pass through WhatsApp / Meta infrastructure, and WhatsApp’s own terms and privacy practices apply.

You can turn this off later.

Keep my voice recordings — Default: Off

If enabled, Kramio may retain supported voice recordings so you can replay them or use them with supported features.

If disabled, Kramio should delete recordings after transcription and required operational processing, subject to temporary technical logs, security needs, and legal obligations.

Help improve Kramio with optional product analytics — Default: Off

If enabled, Kramio may use additional app-usage analytics, such as:

• which screens are opened;
• which features are used;
• performance information; and
• interaction patterns.

Optional product analytics should not include the content of your health records, care notes, voice transcripts, or uploaded documents.

Essential security, fraud-prevention, and reliability telemetry may still be processed where necessary to operate the service.

Product news and updates — Default: Off

If enabled, Kramio may send occasional information about:

• new features;
• product updates; and
• Kramio news.

This choice should be separate from essential service messages.

---

Choices that should be requested only when you use the feature

Kramio should not ask for these permissions globally before sign-in.

Instead, ask when the user first uses the relevant feature.

Care Circle sharing

When you invite a family member, caregiver, or other person, Kramio should show:

• who will receive access;
• which Care Subject is involved;
• the permission level;
• what information can be seen or changed; and
• how access can be revoked.

No Care Circle access is granted until the required invitation and acceptance steps are completed.

Connected Health

When you connect Apple Health, Health Connect, or another source, Kramio should explain:

• why the connection is useful;
• which data types are requested;
• how the data will be used; and
• how to disconnect later.

The operating system or connected provider will show its own permission controls.

Share a care summary

Before sharing a care summary, Kramio should let you choose:

• the Care Subject;
• the sections included;
• the format;
• the sharing application; and
• the recipient.

Once information is sent through email, WhatsApp, Messages, Files, or another third-party application, that recipient or service may retain or further share it.

Fulfillment and Service Partners

Before Kramio sends information to a pharmacy, diagnostic provider, food or grocery provider, clinician, home-care provider, veterinarian, or other Service Partner, Kramio should show:

• the action being requested;
• the Service Partner;
• the information that will be shared;
• price or fees where applicable; and
• any additional partner terms.

The user must provide the approval required by the workflow before Kramio sends the request.

---

Our privacy commitments

Kramio is designed around the following commitments.

We do not sell your health information for advertising.

Kramio does not sell identifiable health or care information for advertising and does not use health information to target advertising to you.

We do not use identifiable health information to train general-purpose AI models shared with other users unless you separately opt in.

Kramio may use de-identified, aggregated, synthetic, security, and operational information to evaluate and improve the service as described in the Privacy Notice.

We protect information in transit and at rest.

Kramio uses technical and organizational safeguards designed to protect care information, including encryption and access controls.

No system can be guaranteed completely secure.

Sharing is controlled.

Care information is not shared with a Care Circle Member or Service Partner merely because they exist in Kramio.

The appropriate user authorization or permission must be completed first.

Kramio prepares; the user approves.

For actions with real-world consequences, such as:

• sharing care information;
• requesting a refill;
• booking a test;
• placing a grocery or meal request;
• booking an appointment; or
• contacting a Service Partner,

Kramio requires the approval appropriate to that feature.

We provide breach notices when required by law.

If a qualifying security incident affects your information, Kramio will provide notices to users and regulators as required by applicable law.

---

Who may process information for Kramio

Kramio may use carefully selected service providers to operate the service.

Categories may include:

Secure cloud and database providers

Used to host account information, care data, configuration, backups, and system services.

AI and inference providers

Used to process authorized information for functions such as:

• document understanding;
• transcription;
• extraction;
• summarization;
• care-plan generation; and
• responses.

Provider access and retention are governed by Kramio’s contracts, configuration, and Privacy Notice.

Messaging providers

Used only for messaging features you enable, such as WhatsApp.

App platforms

Apple and Google may process information associated with:

• downloading the app;
• app-store subscriptions;
• device permissions; and
• platform services.

Their own privacy practices apply.

Analytics, reliability, and security providers

Used for:

• crash reporting;
• fraud prevention;
• security monitoring;
• performance; and
• optional analytics where enabled.

Connected-health providers

Used only when you choose to connect a supported source.

Service Partners

A Service Partner receives information only when required for an action you have authorized, or where another lawful basis applies.

Service Partners act under their own professional, commercial, and privacy obligations for the products and services they provide.

---

International processing

Kramio may use cloud, AI, messaging, security, or other service providers that process information outside the country where you live.

Where law requires safeguards for international transfers, Kramio will use the applicable contractual, organizational, technical, or legal safeguards described in the Privacy Notice.

Regional requirements are summarized below.

---

Your controls and rights

Depending on the feature and applicable law, you may be able to:

• view information Kramio holds about you;
• correct or complete information;
• export available information;
• delete a Care Subject;
• delete your account;
• withdraw an optional consent;
• disconnect a Connected Health Source;
• revoke Care Circle access;
• stop WhatsApp messages;
• change notification settings;
• object to or restrict certain processing where applicable;
• request portability where applicable; and
• complain to Kramio or an applicable regulator.

Some information may need to be retained for a limited period because of:

• security;
• fraud prevention;
• legal obligations;
• transactions;
• dispute resolution; or
• statutory recordkeeping.

Privacy questions: support@kramio.com

---

Regional privacy information

The same Kramio product principles apply across India, the United Kingdom, and the United States, but legal rights and terminology differ.

The full Privacy Notice should provide the detailed regional terms.

India

For users in India, applicable privacy requirements may include the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable Indian law as provisions come into force.

Depending on applicable law:

• Kramio may act as a Data Fiduciary;
• the user may be a Data Principal;
• Kramio will provide required notices before obtaining consent;
• consent must meet applicable legal requirements;
• users may have rights concerning access to information, correction, completion, updating, erasure, grievance redressal, and nomination;
• Kramio will use required safeguards for processing and breaches; and
• eligible complaints may be taken to the appropriate Indian authority after the required Kramio grievance process.

India privacy questions and grievances: support@kramio.com

Detailed India privacy information: kramio.com/privacy/india

United Kingdom

For UK users, Kramio processes personal data under applicable UK data-protection law, including the UK GDPR and Data Protection Act 2018.

Health information is generally special-category personal data.

Where Kramio relies on explicit consent for special-category processing, that consent must be specific, informed, affirmative, and capable of being withdrawn.

The UK Privacy Notice should identify:

• the controller;
• the Article 6 lawful basis;
• the applicable Article 9 condition for health information;
• retention periods;
• international-transfer safeguards; and
• applicable user rights.

UK users may have rights including:

• access;
• rectification;
• erasure;
• restriction;
• objection;
• portability; and
• withdrawal of consent where consent is relied upon.

UK users may also complain to the Information Commissioner’s Office (ICO).

Detailed UK privacy information: kramio.com/privacy/uk

United States

For US users, privacy rights vary by federal law and state.

Kramio AI LLC is registered in Delaware.

Registered Agent: ZenBusiness Inc.

Registered Agent Address: 611 South Dupont Highway, Suite 102, Dover, DE 19901

Depending on the product function and the user’s state, Kramio may be subject to:

• Federal Trade Commission requirements;
• the FTC Health Breach Notification Rule;
• state privacy laws;
• state consumer-health-data laws; and
• other applicable health, consumer, and security laws.

A consumer Kramio account is not automatically covered by HIPAA.

If Kramio processes protected health information on behalf of a HIPAA-covered entity under a valid Business Associate Agreement, that agreement and applicable HIPAA requirements govern that processing.

US users may have state-specific rights concerning:

• access;
• correction;
• deletion;
• portability;
• sensitive-data consent;
• withdrawal of consent;
• appeals; and
• disclosures of consumer health data.

Detailed US privacy information: kramio.com/privacy/us

---

Emergency references by region

Kramio is not an emergency service.

India

For an emergency, contact the appropriate local emergency service, including 112, or seek immediate professional help.

United Kingdom

For an emergency, call 999 or 112.

For urgent medical help that is not an emergency, use the applicable NHS service, including 111 where available.

United States

For an emergency, call 911.

For suicide or mental-health crisis support, call or text 988 where available.