Privacy Policy

1. Introduction

Kilo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Kilo mobile application (the "App"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.

2. Information We Collect

Account Information

• Name and email address when you create an account
• Password (stored in encrypted form)

Fitness and Health Data

• Workout logs, exercise names, sets, reps, and weights
• Personal records and training history
• Body weight entries if you choose to log them

Usage Data

• App features you use and how often
• Device type, operating system, and app version
• Crash reports and diagnostic data

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App
• Sync your workout data across devices
• Process subscription payments via third-party payment processors
• Send transactional emails such as account confirmations and password resets
• Analyze usage trends to improve the App
• Respond to your support requests

4. Data Sharing and Disclosure

We do not sell your personal data. We do not track users across third-party apps or websites for advertising purposes. We may share information in the following limited circumstances:

• Service Providers: Trusted third parties who assist in operating the App (e.g., cloud storage, payment processing, email delivery), bound by confidentiality obligations.
• Legal Requirements: If required by law or to protect our rights, we may disclose information to comply with legal process or respond to lawful government requests.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

5. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

• RevenueCat — for subscription and purchase management
• Supabase — for authentication and cloud data storage
• ZeptoMail — for transactional email delivery

We encourage you to review the privacy policies of these providers.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the App. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data.
• Portability: Request your data in a machine-readable format.
• Opt-Out: Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at the email address listed in Section 12.

8. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this document and, where appropriate, by sending an in-app notification or email. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

11. California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of your personal information. We do not sell personal information. To submit a request, contact us using the information below.