Privacy Notice

Data we collect and why

• Account data (email address, display name, login credentials managed by our authentication provider, sign-in via Google if you choose it) — to create and secure your account. Legal basis: performance of our contract with you.
• Profile and health data (age, sex, height, weight, blood pressure, VO2 and other metrics you enter, goals, equipment, dietary preferences and allergies) — to generate and personalise your training and meal plans and to show your progress charts. Health data is special-category data; legal basis: your explicit consent, which you give by entering it and can withdraw at any time by deleting the entries or your account.
• Plan and activity data (generated training blocks, meal plans, shopping lists, completed sessions, adherence) — to provide the Service. Legal basis: contract.
• Language and settings preferences — to show the app in your language. Legal basis: contract.
• Subscription and payment status (plan, status, renewal date, credits, payment event records) — to grant access to paid features and keep billing records. Legal basis: contract and legal obligation. Card details are collected and processed by Paddle, not by us.
• Support messages — to answer your questions. Legal basis: legitimate interests in supporting our users.
• Technical and security data (IP address, device and browser information, log and error data) — to keep the Service secure, prevent fraud and fix problems. Legal basis: legitimate interests in security and reliability.

Shop, notifications and marketing images

If you order from our supplements shop, the basket and checkout are handled by Shopify and the order details are processed by them as a separate controller under their own terms. If you switch on reminder notifications we store a device subscription so we can send them, and you can switch them off at any time in Settings. Our marketing images are generated by AI from our own product information and never contain member data or photos.

Sales assistant chat

Our sales assistant answers questions about Kinetic. What you write in the chat, the page you wrote it from and your language are stored so we can improve our answers, and are sent to our AI model provider to produce a reply. Visitors who are not signed in are identified only by a random browsing id stored in your browser. Chat transcripts are deleted after 90 days. If you choose to leave your name and email, we keep those details so we can get back to you; legal basis: your consent and our legitimate interest in answering enquiries. Do not enter health details in the sales chat.

Automated plan generation

To create your plans, the goals, preferences and relevant metrics you provide are sent to our AI model provider for processing. This produces a plan for you; it does not make legal or similarly significant decisions about you.

Our trainer chat and sales chat are AI assistants, not people, and we tell you so in the chat window itself. Plans, trainer notes and chat replies are general fitness guidance and are never medical advice; speak to a doctor before starting a new programme if you have a health condition.

Who we share data with

• Service providers / subprocessors — cloud hosting and database, authentication, AI model providers, and error and performance monitoring.
• Merchant of Record (Paddle) — for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to disclose by law.

The full, current list is on our processors page.

We do not sell your personal data or use your health data for advertising.

International transfers

Some of our providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or Standard Contractual Clauses with appropriate additional safeguards.

Retention

We keep account, profile, health and plan data for as long as your account is active, and delete or anonymise it within 90 days of account deletion. Billing and transaction records are retained for as long as tax and accounting law requires (typically 5–7 years). Security logs are kept for up to 12 months.

Your rights

Subject to applicable law you have the right to access your data, correct it, have it erased, restrict or object to processing, receive it in a portable format, and withdraw consent at any time (without affecting processing already carried out). Email support@trainwithkinetic.com and we will respond within one month. If you are in the EEA/UK you also have the right to complain to your supervisory authority — in Norway, Datatilsynet.

You do not have to wait for us: in Settings you can download a copy of everything we hold about you, and delete your account and personal data yourself at any time. Deletion is immediate and cannot be undone; only the payment records that accounting law requires are kept, with your name detached.

Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest with our hosting provider, row-level access controls so users can only reach their own records, and restricted, role-based administrative access.

Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your language, and hold your shopping-list tick state and administrative session. We do not use advertising cookies. You can clear or block them in your browser settings, though the app may not work correctly without the necessary ones. Every item is listed on our cookies and storage page.

Accessibility

Our accessibility statement explains the standard we work to and how to report a problem.

Children

Kinetic is not intended for children under 16, and we do not knowingly collect their data.