Privacy Policy
Last updated: October 4, 2026
Kilo (“Kilo”, “we”, “us”) is a native iOS and watchOS strength-training app. This policy explains what we collect, why, and the choices you have. Questions go to jc@fontecha.studio.
What we collect
- Account. When you sign in with Apple or email, we store your email address and a user identifier, and a display name when you provide one. For Sign in with Apple, we securely store an encrypted authorization token so we can revoke your Apple connection when you delete your account. We never receive your Apple password.
- Training data. The routines, workouts, sets, exercises, and notes you create or log, plus onboarding answers used to tailor your program, body measurements, age, training limitations, and equipment. If you log meals, we store the descriptions, photos, and estimated nutrition you provide.
- Coach conversations. Messages you send to the AI coach and any photos or files you attach for context.
- Health data. If you grant permission, workout and activity samples read from or written to Apple Health. Depending on the feature you choose, this can include body mass, height, date of birth, biological sex, workouts, steps, heart rate, energy, sleep, and cycle data. Relevant measurements and training context may be synced to your account and shared with coaching providers only after your explicit permission. We do not use Health data for advertising or sell it to data brokers.
- Subscription status. Whether you hold an active subscription, managed through our payments provider. We never see your card details.
- Diagnostics. Basic technical logs needed to operate the service and fix errors.
- Optional usage data. If you enable Share usage data in Profile, TelemetryDeck receives app interactions and error diagnostics with pseudonymous device/session identifiers. This is off by default.
- Gym relationships and reports. Gym membership, staff assignments, sharing choices, and reports or blocks you submit. Gym staff can see the training and progress you choose to share with them.
How we use it
- To run the app: store your training data, sync across your devices, and power workout generation.
- To provide the AI coach and generate routines tailored to your answers and history.
- To manage your subscription and entitlements.
- To diagnose problems and improve reliability.
We do not sell your personal data, and we do not use it for third-party advertising.
Third parties that process data for us
- Supabase — authentication, database, and file storage for your account and training data.
- RevenueCat & Apple — subscription purchases and entitlement status.
- OpenAI — personalized coaching and training generation using your relevant profile, training history, Health-derived context, messages, and attachments. OpenAI also checks gym text and logos for harmful content before they are shared.
- Google and OpenRouter — training research and writing, and analysis of supplied video links/questions. Personalized writing can include relevant training context; research gathering uses a reduced training profile. We send age instead of your exact date of birth to coaching models.
- SearchAPI — research queries, video searches, and transcripts requested by the coaching service. Queries can contain context from what you ask the coach to research.
- Typesafe AI, through Vercel AI Gateway — classifies meal descriptions or estimated food names and training effort context, such as prescribed work and recent performance. Raw meal photos are processed by the image-capable coaching provider, not sent to this classifier.
- TelemetryDeck — optional usage analytics and error diagnostics when you enable sharing.
- Vercel — hosting for our backend and website.
These providers act on our behalf under their own security and privacy commitments and may store data outside your country.
Data retention
We keep your data while your account is active. You can delete your account at any time from Profile → Account → Delete account, which removes your account and associated personal data and revokes your Apple authorization. A sole gym admin can transfer or close the gym first; members retain their own accounts and independent training/history. Shared gym artwork can remain in those independent copies. Deleting your account does not cancel an Apple subscription. Backups and logs are purged on a rolling basis.
Your choices
- Access or correct your data by contacting us.
- Delete your account and data in-app at any time.
- Withdraw personalized coaching permission in Profile. New third-party coaching requests stop; your existing workouts and history remain accessible. Re-enable permission there when you want coaching again.
- Enable or withdraw optional usage sharing in Profile.
- Choose which progress to share with gym staff, and report or block a gym or trainer in the app.
- Revoke Health, photo, or notification permissions in iOS Settings.
Children
Kilo is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Changes
We may update this policy as the app evolves. Material changes will be reflected by the date above and, where appropriate, surfaced in the app.