Privacy Policy

Choose where your workout data lives

KILO works without iCloud Sync or KILO Sync. The storage and account involved depend on the option you enable. Separately, Apple device backups may include local KILO data even when KILO sync is off. You manage device backups through Apple’s settings; see what iCloud Backup includes.

Overview

KILO is a workout tracker for iPhone and Apple Watch. This policy describes the information handled by the iOS app, Apple Watch app, widgets and Live Activities, and this website (“KILO”, “we”, “us”).

Who is responsible for your data

KILO is operated by Reece Charlton in the United Kingdom. Reece Charlton is the data controller for personal information handled through the KILO app, optional sync, KILO accounts, support, and this website. You can contact the controller at support@kiloapp.uk.

Information we handle

Data you create in the app

This includes active and completed workouts, exercises, custom exercises, sets, reps, weights, workout and set notes, templates, rest timer settings, strength goals, goal outcomes, exercise preferences, muscle contribution settings, favourites, personal records, streaks, stats preferences, unit and theme preferences, the experience level you choose or KILO infers from your history while Insights are on, local insights, and locally cached AI summaries.

This data is stored locally using Apple on-device storage, including SwiftData and app-group storage used by the app, Apple Watch companion, widgets, and Live Activities.

Health data (HealthKit)

When you grant permission, KILO uses HealthKit to support active workouts. The Apple Watch app can read live heart rate and workout data needed to run and mirror a workout, and it can write a completed workout to Apple Health when you finish a Watch workout. The iPhone app can also start a temporary HealthKit workout session to collect live heart rate during an active session, then discard that temporary workout instead of saving it to Health.

Heart-rate values may be mirrored between your iPhone, Apple Watch, and Live Activity while a workout is active. KILO may also store heart-rate timeline samples for completed workout summaries, including beats per minute, timestamp, source, and workout, rest, or exercise context labels. If you enable iCloud Sync or KILO Sync, those heart-rate timeline samples may be included so your workout charts can be restored across devices. KILO does not upload HealthKit workouts to KILO Sync.

Account information (optional)

If you create a KILO account, we handle your email address, optional name, authentication provider information, optional profile metadata supplied by your sign-in provider such as display name, verification status, email-change status, and account session information. Password authentication is handled by Supabase; KILO does not store plaintext passwords. If you use Sign in with Apple, we receive the Apple identity token needed to sign you in, but we do not receive your Apple ID password.

KILO Sync data (optional)

If you enable KILO Sync, the data needed to keep your devices aligned is transmitted over HTTPS and stored in Supabase. This includes settings, custom exercises, muscle contributions, exercise preferences, exercise and template notes, workout templates, workout history, workout exercises, sets, set metadata, notes, rest timer settings, strength goals, goal outcomes, heart-rate timeline samples for workout summaries, detailed stats preferences, and sync timestamps.

iCloud data (optional)

If you enable iCloud Sync, KILO stores a sync snapshot in your private CloudKit database associated with your Apple Account. This data is not stored on KILO’s Supabase servers. iCloud and CloudKit are managed by Apple, and KILO accesses this data through Apple’s CloudKit APIs from your signed-in devices.

Subscriptions and purchases

KILO Pro subscriptions are processed by Apple through StoreKit and the App Store. KILO reads product and entitlement status so it can unlock Pro features, cache entitlement state for short-term offline use, and mirror Pro access to Apple Watch. We do not receive or store your payment card details.

Notifications, alarms, and Live Activities

If you allow notifications or alarms, KILO can schedule local rest timer alerts, active-workout reminders, inactivity reminders, and a reminder before cancelled KILO Pro access ends. Notification text may include information such as an exercise name, training reminder, or subscription end date. Live Activities can display active workout and rest timer state, including live heart rate when available. These features are handled on your device through Apple’s notification, AlarmKit, ActivityKit, and app-extension systems.

Website, feedback, and support messages

This website is static and does not include advertising pixels, analytics scripts, or tracking cookies. Like any website, your browser and the hosting provider may process routine technical information needed to load the page.

If you use Send Feedback in KILO, we receive the category and message you enter, a submission reference, and the KILO version and build. You can separately choose whether to include an email address for a reply and whether to include a technical diagnostic snapshot. The reply email choice is off by default. Technical diagnostics start included with an exact preview, and you can turn them off before submitting. KILO omits either optional field when its control is off. The report is not tied to your KILO account record, even if you submit it while signed in.

The optional diagnostic snapshot is limited to the iOS version, generic hardware model or family, locale and time zone, sync provider and coarse sync state, signed-in status, KILO Pro entitlement state, and Apple Watch pairing and connectivity states. It does not include raw console or system logs, authentication tokens, account IDs, device names, workout or exercise content, notes, weights, reps, heart-rate data, or other HealthKit information.

Supabase processes the feedback request and routine network metadata needed to route and protect it, such as an IP address, approximate country, and request information. We do not store the raw IP address with the feedback report. For abuse prevention, KILO stores a separate, keyed one-way fingerprint derived from the IP address for up to 48 hours. If you email support instead, we receive your email address and whatever information you choose to include in that message.

Diagnostic information

If you opt in at the system level, Apple may share anonymised crash reports with us through built-in diagnostics. KILO does not embed third-party analytics, crash-reporting, or advertising SDKs. Apple crash reports are separate from the optional, allowlisted feedback snapshot described above.

How we use information

• Run the app. Local data powers the workouts, charts, streaks, and Insights you see on your device.
• Summarise workouts. When you choose Generate or Retry, KILO sends workout details to Apple’s Private Cloud Compute servers to generate a short summary. An internet connection is required.
• Keep your devices in sync. If you opt in, iCloud Sync or KILO Sync makes your data available across your devices.
• Authenticate you. Account information is used to sign you in, verify your email, reset your password, manage linked providers, and protect active sessions.
• Unlock Pro features. StoreKit entitlement status is used to unlock subscription features and mirror access to Apple Watch.
• Send local reminders. Notification and alarm permissions are used for rest timers, active-workout reminders, training reminders, and a reminder before cancelled KILO Pro access ends. You can control these features from the app or system settings.
• Handle feedback and support. We use feedback and direct support messages to investigate reports, reply when you ask us to, and improve KILO.
• Protect the feedback service. We use limited request metadata and a short-lived, one-way abuse-prevention fingerprint to apply submission limits and keep the service available.

We do not sell personal information or use it for advertising, cross-app tracking, or training machine learning models.

Our lawful bases

Where UK data protection law applies, our lawful basis depends on the purpose of the processing:

• Contract. We process the data needed to provide the app features, account authentication, and Pro entitlements you request under KILO’s terms.
• Consent. For new activations, we ask you to agree before enabling iCloud Sync or KILO Sync. We rely on consent for these optional uploads. Where KILO handles health information through HealthKit or optional sync, we rely on explicit consent under Article 9(2)(a) of the UK GDPR as an additional condition. You can manage HealthKit access in Apple settings, turn off sync to stop future sync processing, and delete synced data from Settings.
• Legitimate interests. We process limited account, security, support, feedback, diagnostic, website-request, and abuse-prevention information to operate, protect, troubleshoot, and improve KILO, provided those interests are not overridden by your rights. The feedback form lets you choose whether to include a reply email or diagnostic snapshot.
• Legal obligations. We may retain or disclose limited information where required by law or a valid legal request.

HealthKit, notification, and alarm permissions are separate Apple system controls for optional features; granting a system permission does not by itself authorise unrelated processing. Withdrawal of consent does not affect processing that occurred beforehand.

Insights

Insights use your logged workouts to show factual patterns such as training frequency, exercise performance, and goal progress, along with workout suggestions. KILO may infer or update your experience level from this history while Insights are on. This processing happens on your device without sending training data to a server. You can turn Insights off in Settings.

AI workout summaries

KILO uses Apple’s Private Cloud Compute (PCC) to generate workout summaries. When you choose Generate or Retry, workout information is sent to Apple’s servers for processing. This includes workout title, duration, sets, total volume, trained muscles, notes, personal records, goals, recent comparisons, and available heart-rate summaries. KILO does not send this data to KILO’s servers for AI summaries. Generation requires KILO Pro, a supported iPhone running iOS 27 or later with Apple Intelligence switched on, and an internet connection.

Generated summaries are cached locally and can be read offline. Opening or editing a workout does not generate a summary. If the workout or the information used for its recap changes, you can request a new summary. AI generation is optional and separate from sync; leaving sync off does not prevent data being sent to Apple when you request a summary.

Third-party services

We use a small number of service providers and Apple platform services to deliver optional features:

• Supabase hosts KILO account authentication, KILO Sync database storage, email-change support functions, and feedback submissions. Its feedback Edge Function also processes routine network metadata for routing, security, and submission limits. KILO’s primary Supabase database is hosted in Amazon Web Services’ EU West region in Ireland. Supabase Edge Functions and approved subprocessors may process limited data in other regions. KILO uses Supabase row-level security so signed-in users can access their own sync rows, while feedback records are available only to the backend service. Supabase’s processing commitments and transfer safeguards are described in its Data Processing Addendum.
• Resend delivers an internal notification when you submit the feedback form. It receives the category, submission reference, message, submission time, KILO version and build, and your reply email only if you chose to provide one. It also receives a separate, account-unlinked random request identifier used only to prevent duplicate notification delivery. It does not receive the optional diagnostic snapshot. Resend and its approved subprocessors may process this information outside the United Kingdom. Its processing commitments and transfer safeguards are described in its Data Processing Addendum, and its current providers are listed on its Subprocessors page.
• Apple provides iCloud/CloudKit, HealthKit, StoreKit and App Store subscriptions, Sign in with Apple, Apple Intelligence and Private Cloud Compute for AI summaries, notifications, alarms, widgets, and Live Activities. Apple services are governed by Apple’s terms and privacy policy.

Data retention

Locally stored data remains on your device until you delete it, reset KILO data from Settings, or delete the app. Local AI summary caches are removed when you reset all KILO data. Apple device backups may retain copies separately under your backup settings.

iCloud Sync data remains in your private CloudKit database until you delete it from KILO Settings, delete the app’s iCloud data through Apple controls, or Apple removes it according to your Apple Account choices.

KILO account and KILO Sync data remain in Supabase until you delete the synced data or your account. Deleting KILO Sync data removes synced workout, heart-rate timeline, template, exercise, preference, and settings data from the live service and signs this device out. Deleting your account also removes the authentication account record. Local data on your device, App Store purchase history, and any active App Store subscription are not deleted or cancelled by KILO account deletion. Authentication and security logs held by service providers may remain under their retention schedules.

Feedback records stored through the in-app form are automatically deleted from Supabase after 12 months. The corresponding notification email is a separate working copy deleted from our support mailbox when no longer needed, and no later than 12 months after submission. The separate abuse-prevention fingerprint is deleted within 48 hours. Direct support emails are kept while needed to answer your request, investigate related issues, protect the service, or meet a legal obligation, and are deleted when no longer needed for those purposes. Diagnostic reports provided by Apple follow Apple’s retention controls.

Feedback reports are not tied to a KILO account ID, so deleting your account does not automatically delete an earlier report. You can ask us to erase it sooner by providing the submission reference shown after sending it. If you included a reply email, we may use it to help locate the report, but it is not used to associate the report with your account.

Your choices and rights

• Stay local. You can use KILO without enabling iCloud Sync or KILO Sync.
• Toggle sync. Enable, disable, switch, or delete iCloud Sync and KILO Sync data from Settings.
• Control health data. Grant or revoke HealthKit permissions from Apple Health or system settings.
• Control notifications. Grant or revoke notification and alarm permissions from system settings, and adjust reminder behaviour in KILO.
• Manage subscriptions. Manage or cancel KILO Pro through your App Store account settings.
• Access and export. You can view your data in KILO. With KILO Pro, select workouts in Workouts to export workout history as CSV; this does not include every category of account data. Contact us for a broader data request.
• Correct or delete. Edit or remove workouts, exercises, templates, notes, and settings in the app. Use Reset All Data to remove local data, iCloud data, or KILO Sync data depending on your active sync method. Use Delete Account from KILO Account settings to remove your KILO account and KILO Sync data.
• Manage feedback. Contact us with a feedback submission reference to request access to or early deletion of that account-unlinked report.

Depending on where you live and the lawful basis being used, you may have rights to access, correct, erase, restrict, or receive a portable copy of your personal information, and to object to certain processing. Where processing relies on consent, you may withdraw that consent at any time. Contact us using the details below to exercise these rights.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first, but contacting us is not a prerequisite to making a complaint.

Security

Traffic between KILO and Supabase is encrypted in transit with TLS. The KILO Sync database uses row-level security policies tied to your authenticated user ID. Administrative access is limited to what is needed to operate, secure, support, and comply with legal obligations for the service.

KILO Sync data is not end-to-end encrypted. If you want KILO data to remain only on Apple-controlled storage, you can use local-only mode or iCloud Sync instead of KILO Sync.

If you suspect unauthorised access to your account, contact us immediately so we can help.

Children’s privacy

KILO is not directed to children under 13 (or the equivalent minimum age in your region). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

International users

KILO is operated from the United Kingdom and its primary Supabase database is hosted in Ireland. Apple, Supabase Edge Functions, Resend, and service-provider subprocessors may process information in other countries. Where personal information is transferred internationally, we rely on an applicable adequacy regulation or contractual protections provided by the service provider, including the safeguards in Supabase’s and Resend’s Data Processing Addenda where relevant. You can contact us for more information about the safeguards that apply.

Changes to this policy

We may update this policy as the product evolves. The last-updated date above identifies the current text. We will explain material changes here and provide additional notice where appropriate.

Contact us

Questions about this policy or about your data? We’d like to hear from you.