Privacy Policy
1. Who we are
Kilo is operated by Dekilo Ventures LLC ("Kilo", "we", "us"). We are the controller of the personal data described here. You can reach us at support@getkilo.uk for any privacy question or request.
2. What we collect
Account information
Kilo uses Sign in with Apple. There is no Kilo password and no Kilo login form. Depending on your Apple settings, we receive your Apple user identifier, name and email address (which may be Apple's private relay address), and we store the display name you choose and an optional profile photo.
Training and profile data
You may record height, bodyweight and training preferences in your profile. Workouts, sets, repetitions, weights, effort, notes, routines and schedules are stored on your device in Kilo's local database. Kilo does not upload your full workout history to its servers as a synced archive.
AI Trainer requests
When you ask for an AI program or a routine review, we send the details you select — training goals and preferences, available equipment, optional measurements, any limitations text you type, exercise names including custom ones, your recent training summary, and for routine review your routine name, exercise list and working targets — to our backend and to an AI provider. See section 5.
Purchases
Subscriptions are processed by Apple. We use RevenueCat to confirm whether Kilo Pro is active. We receive a subscription identifier, product identifier, entitlement status and expiry/transaction events. We never receive your full payment card details.
Optional integrations
If you enable the Reminders integration, Kilo writes workout titles, dates and exercise targets to the reminders account you select. Exercise illustrations and animation frames are downloaded from GitHub-hosted media.
Technical records
Our backend keeps operational records needed to run and secure the service: request status, model name, token counts, latency, rate-limit counters, error states and service logs. The app contains no advertising SDK, no behavioural analytics SDK and no crash-reporting SDK. Kilo does not build profiles of your activity across other apps or websites.
3. What we do not do
- We do not sell your personal data.
- We do not use your data for advertising, and we do not track you across other companies' apps or websites.
- We do not read your workout history from your device to use for our own purposes; it stays in the app's local database except for exports, optional AI submissions and the explicitly confirmed public snapshots described below.
- We do not use your AI requests to train our own models.
4. Why we are allowed to process it
- To provide the service you asked for (contract): creating your account, syncing your profile, storing AI program drafts, confirming your subscription.
- Your consent: before an AI request that includes health-related information such as bodyweight, limitations or training history, the app asks for permission. Declining means no request is sent. You can decline every time; the rest of Kilo still works.
- Legitimate interests: keeping the service secure, preventing abuse and rate-limit evasion, and fixing faults.
- Legal obligations: retaining records where tax, accounting or consumer law requires it.
5. AI features and your consent
AI program generation and routine review are optional Pro features. Before the first submission in each new flow, Kilo shows you what will be sent and asks for your permission. If you decline, nothing is sent.
The request is processed on our servers and sent to our AI provider, DeepSeek, to produce a draft. Drafts are returned to you as suggestions: nothing changes your routines or schedule until you explicitly accept it.
Withdrawing consent stops future submissions. It does not recall data already sent for a request you authorised. To have existing request data deleted, use the in-app account deletion or contact us.
The request does not include your name, email address or Apple identifier. It is associated with your account in our own database, not by the AI provider, and we do not send data to the provider for the purpose of training models. Provider retention and processing locations are described in sections 7 and 10.
6. Who else sees your data
Proposed feature — public workout links (draft, pending approval). If enabled, you may explicitly share a completed-workout snapshot through a public bearer link. Anyone with the link can see its workout name, finished date, duration, total volume, weight unit, set count, exercise names, loads and repetitions. Check names for personal information before confirming. We exclude notes, body measurements, effort (RPE), profile name/avatar, timezone and local model identifiers. Supabase stores the snapshot and Netlify serves the web page and preview image. We do not identify viewers or add analytics; we record only a coarse last-opened time, at most once per hour. Hosting providers and messaging services may process request logs, IP addresses and preview copies under their own terms.
The proposed default link expiry is seven days, with 30-day and no-expiry options. You can revoke a link in Settings → Shared links; live web access stops within the five-minute cache window, and account deletion removes live share records. Deleting a local workout does not remove its shared snapshot. Revocation, expiry and account deletion cannot erase recipient copies or messaging previews. The storage-retention and backup-deletion period for expired/revoked snapshots remains subject to owner approval; no new storage purge period is represented as approved by this draft. Sharing remains disabled until this decision and publication are complete.
- Supabase — authentication, database and private avatar storage.
- DeepSeek — AI processing of the request you authorised.
- Apple — App Store subscriptions and Sign in with Apple.
- RevenueCat — subscription entitlement management.
- GitHub — hosting of public exercise images and animations.
We may also disclose data where the law requires it, or to establish or defend legal claims. These providers process data on our instructions under their own contractual terms. We do not sell data to anyone.
7. How long we keep it
| Record | Kept for |
|---|---|
| Account, profile, avatar | Until you delete your account. Kilo does not currently delete accounts for inactivity. |
| Workouts, sets, routines (on device) | Until you delete them in the app or remove the app. Full workout history is not held on our servers as an archive; optional AI submissions and public snapshots are separate copies described here. |
| Public workout-link snapshots (proposed) | Proposed access expiry: 7 days by default, 30 days or never; revocation and account deletion stop access. Storage purge and vendor backup/log periods need a new owner decision before enablement. Recipient copies and previews may persist. |
| AI request content tied to a finished request | Redacted 90 days after the request. |
| Failed or rejected program drafts | Deleted after 30 days. |
| Accepted programs and their versions | Until you delete the program or your account. |
| Drafts awaiting your decision | Until you accept or reject them, or delete your account. |
| AI usage statistics | 90 days. |
| Generation audit records | 30 days. |
| Rate-limit counters | 2 days. |
| Billing and webhook event records | 365 days. |
| Deleted-program tombstones | Until you delete your account; they stop a deleted program being restored. |
| Deletion job records | Until every cleanup step completes. The Apple credential we need for revocation is erased once revocation succeeds. |
Provider backups, logs and records that Apple or RevenueCat hold independently are governed by those providers' own retention and policies; we cannot delete from systems we do not control. Where the law requires us to keep a record, we keep only that record and only for as long as required.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your data, to object to processing, and to withdraw consent. Where a right applies, we do not charge for it.
- Export: Settings lets you export your local records and the Kilo cloud records associated with your account.
- Deletion: Settings lets you delete your account. This removes the Kilo authentication account and associated cloud records, deletes local account data, and queues the cleanup steps that need Apple, RevenueCat or storage access. The app shows you when cleanup is still pending.
- Correction: profile details can be edited in the app; for anything else, contact us.
Deleting your Kilo account does not cancel your App Store subscription. Cancel it in your App Store account settings.
We answer requests without undue delay and normally within 30 days; where a request is complex we will tell you why it takes longer. You may also complain to your local data-protection authority.
9. Security
Data in transit is protected with TLS. Server-side records are protected by row-level security so that one account cannot read another's records. Provider credentials used to revoke sign-in tokens and process subscriptions are held in protected server-side stores and are never shipped inside the app. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and any regulator where the law requires it.
10. Where data is processed
Our providers operate internationally, so your data may be processed outside your country of residence, including in the United States. Where the law requires safeguards for such transfers, we rely on the contractual safeguards those providers offer and will explain them on request.
11. Children
Kilo is intended for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided data, contact us and we will delete it.
12. Changes
We will update this policy when our practices change and revise the date and version above. If a change materially affects what we collect or how we use it, we will tell you in the app before the change takes effect, and ask for consent again where the law requires it.
13. Contact
Dekilo Ventures LLC
Email: support@getkilo.uk
Questions about this policy or about data we hold about you can be sent to the address above. If you are in the EEA or UK and we cannot resolve your concern, you may contact your local supervisory authority.