KiTraining privacy policy

This Privacy Policy explains how KiTraining (“we”, “us”, or “the Service”) collects, uses, stores, shares, and protects personal information when you visit https://kitraining.app, use the application at https://app.kitraining.app, or connect third-party integrations.

By creating an account, using KiTraining, or authorizing an integration, you acknowledge this policy. Use of the Service is also governed by our Terms of service.

1. Data controller

• Controller: KiTraining
• Website: https://kitraining.app
• Application: https://app.kitraining.app
• Privacy contact: info@kitraining.app

For privacy rights or questions, email the address above. We will respond within a reasonable time and in any case within applicable legal deadlines.

2. Scope

This policy applies to:

• Visitors to KiTraining’s marketing site and content.
• Registered app users (athletes and coaches).
• People who contact support, download resources, or subscribe to communications.
• Data obtained from integrations you authorize (Google Health / Google Fit, Strava, Concept2, or other compatible providers).

3. Personal data we process

3.1. Account and profile data

• Email, name or profile name, photo (if provided), and login credentials.
• Language, notification, privacy, and app preference settings.
• Product role (athlete, coach) and coach–athlete relationships you manage.

3.2. Training and health-related data you provide

• Sessions, exercises, sets, loads, duration, notes, body weight, goals, and progress.
• Content you publish or share through social product features (for example the feed), according to your privacy settings.

This information may relate to your physical condition or activity. We process it only to provide the Service you request.

3.3. Technical and usage data

• IP address (where applicable), device/browser type, operating system, access timestamps, pages or screens viewed, and product events.
• Error, security, and diagnostic logs needed to operate the Service.

3.4. Communications

• Content of emails or forms you send us (support, contact, feedback).

3.5. Third-party integration data (only with your authorization)

When you connect an external provider, we receive the data that provider shares according to the permissions you grant. Details are in section 5.

4. Purposes and legal bases

• Providing the Service (account, training logs, progress, coach mode, syncing integrations): performance of a contract / pre-contractual steps.
• Security, abuse prevention, and technical maintenance: legitimate interest and, where applicable, legal obligation.
• Product improvement and analytics: legitimate interest with minimization. On the website, measurement is our own, aggregated and cookie-free; third-party analytics in the app (Google Analytics, Meta) only runs if you accept it in its privacy settings.
• User support: contract performance and legitimate interest.
• Google / Strava / Concept2 integrations: consent you grant when authorizing OAuth (or equivalent), withdrawable at any time.
• Marketing communications (if any): consent or legitimate interest as allowed by law, with opt-out.
• Legal compliance: legal obligation where required.

5. Third-party integrations and Google data

5.1. Google Health and Google Fit

KiTraining may request access to Google Health and, for existing users, Google Fit, to improve activity tracking inside the app. Sources may include Fitbit, Pixel Watch, and other apps or devices you authorize in your Google account.

• Read: steps, cardio points, activity metrics, sleep, and health/fitness measurements you authorize, to show progress and training context in KiTraining.
• Write: training sessions logged in KiTraining so they appear in your Google Health or Google Fit history.

We do not use Google user data for targeted advertising, data resale, or advertising profiles. You may revoke access at any time from KiTraining settings or your Google account security settings.

5.2. Google Limited Use compliance

KiTraining’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, KiTraining commits that:

• Google user data is used only to provide or improve user-facing features that are prominent in the KiTraining interface and related to fitness and training.
• That data is not transferred to third parties except (a) as necessary to provide or improve user-facing features and with user consent where Google policy requires it, (b) for security purposes, (c) to comply with applicable law, or (d) as part of a merger, acquisition, or asset sale with notice where appropriate.
• That data is not used to serve advertisements, including personalized or remarketing ads, or to build advertising profiles.
• Humans are not allowed to read that data unless: (a) we have your affirmative consent, (b) it is necessary for security purposes or to comply with applicable law, or (c) the data is aggregated and anonymized so it cannot be associated with an individual.

5.3. Strava

If you connect Strava, we may read sports activities (for example distance, duration, calories, and related metrics) and basic profile information to sync them with your KiTraining history and give you a consolidated running + strength view. Strava data is not shared with other KiTraining users as someone else’s content; it remains associated with your account according to product settings. You can revoke access from Settings or your Strava account. Use complies with the Strava API Agreement.

5.4. Concept2

If you connect Concept2, we process the rowing/erg data you authorize to show activities and metrics inside KiTraining, for training tracking only and not for advertising.

6. Recipients and processors

We do not sell personal data. We may share information with:

• Infrastructure providers (hosting, databases, storage, transactional email) acting as processors under our instructions.
• Analytics: our own measurement on KiTraining servers (no third-party analytics) to understand visits and clicks on the website.
• Integration providers (Google, Strava, Concept2, etc.) when you initiate the connection; those providers process data under their own policies.
• Other users, only to the extent you use social features (profile search, feed, coach–athlete relationships) and according to your settings.
• Authorities, when legally required or validly compelled.

7. International transfers

Some providers (for example Google) may process data outside the European Economic Area. Where required, we rely on appropriate safeguards under applicable law (such as Standard Contractual Clauses or other valid mechanisms) and reasonable supplementary measures.

8. Retention

• Account and training data: while the account is active and for any additional period needed for security, claims, or legal obligations.
• Integration data: while the connection is active or until you revoke access; afterward, syncing stops and data is deleted or anonymized according to Service operations.
• Technical logs: limited periods needed for security and diagnostics.
• Support communications: as needed to handle the request and keep reasonable records.

You may request deletion of your account and associated data by emailing info@kitraining.app, subject to legal retention requirements.

9. Security

We apply technical and organizational measures appropriate to the risk, including access controls, encryption in transit (HTTPS), secret segregation, security logging, and secure development practices. No system is 100% secure; please protect your credentials and report suspicious access.

10. Cookies and similar technologies

The website (kitraining.app) does not use cookies or store identifiers in your browser. To improve the site we record, on KiTraining's own servers, aggregated and anonymous usage: pages visited, clicks on buttons to the app, and a coarse traffic source (for example search engine, social network, or direct). We do not link a full IP address to a profile or store personal data in this measurement. If you explicitly choose a language, that preference is remembered in your browser only to show you the chosen language. The app (app.kitraining.app) has its own consent settings.

11. Social features and visibility

If you use user search or the feed, other users may see profile elements you make visible (for example name, photo, and level). You can limit search visibility from Settings → Privacy when available. Coaches only access athlete information within an accepted relationship in the product.

12. Children

KiTraining is not directed to children under 16. We do not knowingly collect children’s data. If you believe a minor provided data, contact us to delete it.

13. Your rights

Under applicable law (including the GDPR where it applies), you may request:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure, where applicable.
• Restriction of or objection to processing.
• Portability of data you provided to us, where applicable.
• Withdrawal of consent at any time, without affecting prior lawful processing (including Google Health / Fit, Strava, or other integrations).

To exercise these rights, email info@kitraining.app and describe the request with enough information to verify your identity. You may also lodge a complaint with your supervisory authority (in Spain, the Spanish Data Protection Agency).

14. Health disclaimer

KiTraining is a training logging and tracking tool. It does not provide medical advice, diagnosis, or treatment. Consult a healthcare professional before starting or changing an exercise program, especially if you have pre-existing conditions.

15. Changes

We may update this Privacy Policy to reflect legal, technical, or product changes. The current version will be posted on this page with an updated “Last updated” date. For material changes, we may notify you by email or in-app notice when reasonable.

16. Contact

Controller: KiTraining
Privacy and rights requests: info@kitraining.app
Related terms: /en/terms/