PRIVACY POLICY

Effective date: August 2, 2026
Last updated: August 2, 2026

Arzenal: Human Health (the "App") is provided by Kri Zek LLC ("Arzenal," "we," "us," or "our"), a company registered in Delaware, USA. This Privacy Policy explains how we collect, use, store, and protect information when you use the App, our website, and the services that support the App.

Contact us

For privacy questions, requests, or complaints, contact us at:

• Email: admin@krizek.tech

• Website: https://krizek.tech

• Postal address: Continental Drive, Newcastle County, Newark, Delaware 19713, USA

Who this App is for

Arzenal is a wellness, routine, and personal tracking application intended for adults. It is not directed to children under 18. Do not use Arzenal if you are under 18 or if you cannot lawfully consent to this Policy in your location.

Information we collect

Account and profile information

If you create an account, we collect information needed to create and operate it, including your email address, display name (if supplied), date of birth, authentication details managed by our authentication provider, and records of your acceptance of our Terms and Privacy Policy.

You may also use parts of Arzenal in guest mode. Guest-mode data stays on your device unless you later choose to create or sign in to an account and enable a feature that synchronizes eligible data.

Wellness and activity information you enter

Arzenal processes information you choose to record, including supplement inventory and intake, schedules, routines, fasting activity and check-ins, sleep records, focus sessions, mood or wellness check-ins, caffeine response preferences, and related notes or tags.

Optional Health Connect information

If you explicitly grant Health Connect permissions, Arzenal may read the categories you authorize, such as steps, active calories, heart rate, heart-rate variability, sleep sessions, and exercise sessions. You can revoke these permissions at any time in Android or Health Connect settings.

Raw Health Connect records, source identifiers, device details, and free-form notes are processed on your device and are not included in Arzenal's optional daily-summary cloud backup. Arzenal does not write sleep records back to Health Connect.

AI, barcode, and label-scanning requests

When you choose to use Copilot, scan a supplement label, or request a barcode lookup, we process the information needed to deliver that request. A label photo is sent only after you choose the scan action. We resize and compress label photos before transmission. Copilot requests use a bounded summary of relevant information rather than your complete local database or complete chat history.

Barcode lookups may query Open Food Facts. AI features are routed through Arzenal's secured server function, which may send the minimum necessary request content to our AI service provider, OpenRouter, to generate the requested response. Do not include information in free-form notes or Copilot messages that you do not want processed for that feature.

Technical and service information

We process information needed to provide, secure, and troubleshoot the App, such as authentication session information, service request metadata, error information, and feature-usage data needed to enforce security and AI-request limits. We do not use this information for interest-based advertising.

How we use information

We use information to:

• provide supplement, routine, fasting, sleep, focus, and wellness tracking features;

• calculate and display personal, non-medical wellness insights and trends;

• synchronize eligible data for signed-in users who use cloud-sync features;

• provide requested Copilot, label-recognition, and barcode-lookup features;

• maintain security, prevent abuse, enforce request limits, and fix reliability issues;

• respond to support requests and honor privacy requests; and

• comply with applicable law and enforce our terms.

Arzenal's wellness insights, fasting phases, caffeine timing, and Human Index are informational personal-trend tools. They are not medical advice, diagnosis, treatment, or a substitute for professional care.

Where information is stored and processed

Arzenal is local-first. Your primary app data is stored in the App's local database and preferences on your Android device.

For signed-in users, Arzenal may use Supabase to provide authentication, profile storage, and authenticated synchronization of eligible completed-session backup data. Cloud synchronization is merge-only and does not remove unmatched local information. The synchronized bundle excludes credentials, raw Health Connect data, Human Index history, and active timers.

If you choose optional daily health-summary backup, it is off by default. That feature stores only permitted daily summaries; it does not upload raw Health Connect records, source identifiers, device details, or free-form notes.

Copilot conversation messages associated with your account may be stored to provide continuity in the Copilot experience. AI-request limits are recorded to help secure and manage the service.

Service providers and disclosures

We use service providers that process information on our behalf to operate Arzenal:

• Supabase for authentication, database, synchronization, and secured server functions;

• OpenRouter to process AI requests that you explicitly initiate through Copilot or label recognition; and

• Open Food Facts for user-requested barcode lookups.

We disclose information to these providers only as needed to provide the requested feature, operate the service, protect users and our systems, or comply with law. We do not sell personal information or health information. We do not share personal information for cross-context behavioral advertising.

We may disclose information if required by law, to protect rights, safety, and security, or in connection with a corporate transaction, subject to applicable law.

Retention and deletion

Local information remains on your device until you delete it in the App, clear the App's storage, or uninstall the App. Exported backup files are controlled by you and are not encrypted by Arzenal; store them only in locations you trust.

We retain account and cloud-synchronized information while your account is active and for a limited period afterward when reasonably necessary for security, dispute resolution, legal obligations, or backup integrity. You may request deletion of your account and associated cloud data by using the account-deletion controls in the App, where available, or by emailing admin@krizek.tech with the subject line "Delete My Arzenal Account." We may need to verify your identity before acting on a request.

Deleting cloud information does not automatically delete copies you exported yourself or information stored solely in a third-party service you chose to connect. You can remove Health Connect access in Android or Health Connect settings.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information in transit and in our services. For example, production AI requests are sent through a JWT-protected server function, and the OpenRouter API key is not included in the Android app.

No method of storage or transmission is completely secure. Keep your device protected, use a strong account password, and do not share exported backups or account credentials.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. To exercise these rights, contact admin@krizek.tech. You may also:

• use the App in guest mode where available;

• choose whether to grant Health Connect permissions;

• turn off optional daily health-summary backup;

• decide whether to use scanning and AI features;

• delete local records or clear App storage; and

• revoke Android permissions in device settings.

We will not discriminate against you for exercising applicable privacy rights.

International processing

Your information may be processed in countries other than the one where you live, including where our service providers operate. Where required, we use appropriate safeguards for such transfers.

Changes to this Policy

We may update this Policy as Arzenal changes or as legal requirements evolve. We will post the updated version with a revised "Last updated" date and, where required, provide additional notice or request consent.

Google Play and Health Connect

Arzenal's use of information received from Health Connect is limited to providing and improving user-facing wellness features in accordance with applicable Health Connect and Google Play policies. We do not use Health Connect data for advertising or sell it.