Kinetix Fit Privacy Policy

This policy explains what personal data the Kinetix Fit app (Android and iPhone) and website collect, why, who sees it, how long we keep it, and how you can delete it. It follows UK GDPR and the Data Protection Act 2018, and is written to meet the requirements of Google Play and the Apple App Store.

In short

1. Who this applies to

This policy applies to anyone who uses the Kinetix Fit app or website (kinetixfit.co.uk). Kinetix Fit is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child under 16 has given us data, email us and we will delete it.

2. What data we collect

Account & profile data
Name, email address, height, weight, age, sex, fitness goal, activity level, diet (for example vegetarian), any allergens you tell us about, and your country and preferences (such as reminder times and theme). Your email address and a password are held by our sign-in provider, Supabase; we never see your password.

Health & biometric data (special category data)
If you choose to connect Apple Health (iPhone) or Google Health Connect (Android), the app reads: steps, distance, heart rate, heart rate variability (HRV), resting heart rate, sleep, workouts (exercise), active and total calories burned, blood oxygen, breathing rate, blood pressure, VO2 max, weight and body fat. The app only reads this data; it never writes to Apple Health or Health Connect. Access is only with your explicit permission, through Apple's or Google's own consent screens, and you can change or withdraw it at any time in the Health app, in Health Connect or in Kinetix Fit.

Readings the app shows you are saved to your Kinetix Fit account (so they appear on your other devices and in your trends and weekly views). A short-lived copy of today's steps, heart rate, HRV and sleep is also kept on our server for up to 2 days so we can check that a quest was really completed.

Food & nutrition data
Meals you log (typed, from a barcode scan or from a photo), saved foods, and the nutrition calculated from them. Photos you take of meals are sent to our server to identify the food and are not stored by us after the answer comes back. Barcodes you scan are used only to look up the product.

Water, workouts and check-ins
Drinks you log, workouts you add by hand or that your phone records, and your daily morning check-ins (including how energetic you feel).

Gut checks and digestive wellbeing
Your answers to the daily gut check and the patterns the app finds in them. This is health data.

Period (cycle) data
If you use period tracking, the dates you log and the predictions the app works out from them. This is health data and is sensitive. It is used only to show you your own cycle in the app. It is not sent to Anthropic or any advertiser, and it is not used to infer anything about you outside the app.

Rewards & activity data
Points, XP, streaks, quests completed, voucher redemptions and charity donation records.

Payment & subscription data
We do not store your card details. Subscriptions are bought and managed through the Apple App Store or Google Play, and RevenueCat tells us whether your Plus subscription (or a promo code) is active. RevenueCat identifies you by your account email address.

Location
We do not collect your GPS or precise location. We use the country you choose (or your phone's language setting suggests) and your phone's time zone to show the right foods, rewards and days.

Technical data
Standard technical data needed to run the app, such as app version and error logs, and a scrambled (hashed) form of your IP address on our website forms to stop abuse. The barcode scanner uses Google's ML Kit, which scans on your phone; Google may collect technical diagnostics such as crashes and performance from ML Kit, as described in Google's ML Kit disclosure.

Early access list
If you join the early access list on our website, we keep your email address and, if you tell us, which kind of phone you use. We use them only to email you about Kinetix Fit's launch. To stop the form being abused we also keep a scrambled (hashed) form of your IP address, for up to an hour.

Notifications
Reminders (water, movement breaks, gut check, streak) are scheduled on your phone itself. We do not send push notifications from our servers, and no notification token is collected.

3. Why we process your data, and our legal basis

PurposeLegal basis
Providing your account, saving your data across devices, and the core app featuresPerformance of a contract with you
Reading your health data, personalised targets, gut checks and period trackingYour explicit consent (required for special category data)
AI meal ideas (a Plus feature) and meal photo recognitionPerformance of a contract with you, and your explicit consent where health data is involved
Subscriptions, promo codes and rewardsPerformance of a contract with you
Fraud and abuse prevention on points, vouchers and scan limitsLegitimate interest
Service-related reminders you turn onPerformance of a contract / your consent for optional reminders
Keeping the service secure and fixing errorsLegitimate interest
Emailing you about the launch, if you joined the early access listYour consent

You can withdraw consent for health data at any time by disconnecting Apple Health or Health Connect, and by turning off period tracking or deleting your data. This doesn't affect the lawfulness of what we did before, or the rest of your account.

4. Who we share data with

We share data only with the service providers needed to run Kinetix Fit. They act on our instructions, under their own data protection obligations, and may use the data only to provide their service to us:

We do not sell your personal data to anyone, for any purpose. We do not use or share your health or cycle data for advertising, marketing, data brokering or credit or insurance decisions. We may disclose data if the law requires it, or to protect our rights or users' safety.

International transfers. Some of these providers process data outside the UK and the European Economic Area, for example in the United States. Where this happens, we rely on UK-approved safeguards such as the UK International Data Transfer Agreement or Addendum, or Standard Contractual Clauses, or an adequacy decision.

5. How long we keep your data

DataHow long
Account, profile and everything synced to your account (food, water, workouts, check-ins, gut checks, period data, health readings, points)Until you delete it in the app, or ask us to
Today's health snapshot and cached meal ideas on our serversUp to 2 days, then they expire on their own
Meal photosNot stored by us
Daily and monthly usage counters (scans, vouchers, donations; numbers only)Up to 35 days, even if you delete your account, so that limits like one voucher a month can't be reset by deleting and re-creating an account
Early access list emailUntil you ask us to remove you or the launch email has been sent
Hashed IP address on website formsUp to an hour
Records we must keep by law (such as accounting records)Only for as long as the law requires
Backups held by our infrastructure providersOverwritten on their normal schedule, within 30 days

6. Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS) and at rest with our providers, access controls and row-level security so each account can only read its own data, and keeping secret keys on our servers and never in the app. No system is perfectly secure; if a breach affects you we will tell you and the ICO as the law requires.

7. Deleting your data and account

You can delete your data yourself, in the app: Account → Your data & privacy → Delete account or data. You can choose to delete your data and keep your account, or delete your account and all your data. Deleting is immediate and cannot be undone. It removes your account, profile, logs, health readings, gut checks, period data, points and rewards history from your phone and from our servers, and your subscription record with RevenueCat.

If you can't get into the app, see how to delete your account, or email info@kinetixfit.co.uk from the address you signed up with. We reply within one month.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it in your store's subscription settings. If you redeemed a voucher, our rewards provider Tremendous keeps its own record of that order under its own policy.

8. Your rights

Under UK GDPR (and, if you live in the European Economic Area, the EU GDPR), you have the right to:

To exercise any of these rights, email info@kinetixfit.co.uk. We reply within one month.

If you live in California or another US state with a privacy law. You have similar rights to know, access, correct and delete your personal information, and not to be discriminated against for using them. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We treat health information as sensitive personal information and use it only to provide the app. Email us to make a request.

9. Children

Kinetix Fit is not for children under 16 and we do not knowingly collect their data (see Section 1).

10. Data Protection Officer

Our appointed Data Protection Officer can be contacted at info@kinetixfit.co.uk.

11. Changes to this policy

We may update this policy as Kinetix Fit's features evolve. We'll update the "Last updated" date above and tell you about significant changes in the app, and ask for your consent again if a change needs it.

12. Contact us

JN Global Ventures LTD
Sheffield, United Kingdom
Email: info@kinetixfit.co.uk