This Privacy Policy explains what Kondio ("we", "us") collects, where it goes, and what you can do about it, when you use our mobile and web applications and related services (the "Service").
We have tried to write this to describe what the software actually does, rather than to reserve every right we might one day want. Where something is deliberately narrow — like the fact that we run no analytics or advertising trackers — we have said so plainly.
Information you give us
- Account details: your email address and display name. Passwords are stored only as a bcrypt hash, never in a readable form. If you sign in with Apple or Google, we receive an identifier and, where you allow it, your email address and name — we never receive or store your password with them.
- Training data: workouts, exercises, sets, reps, weights, durations, distances, effort ratings, templates and programs, plus any free-text notes you add to a workout.
- Body and health data: body weight, body fat percentage, and body measurements you record, along with optional date of birth, height and sex. If you use the AI Program Builder, anything you type into its "injuries or limitations" field.
- Photos: the progress photos and profile picture you choose to add. These are uploaded to and stored on our servers so they stay available across your devices and when you reinstall the app. They are held in a private store that is never publicly accessible, are served back only to you through your authenticated session, and are never shared with anyone, used for advertising, or sent to our AI provider. We treat progress photos as sensitive body data.
- Preferences: goals, experience level, available equipment, schedule, units, and notification settings.
- Support and feedback you choose to send us.
Some of this is health information. We treat your progress photos, body measurements, any injury or limitation you describe, and the training data that reveals your physical condition as sensitive, and we do not use it for advertising or share it for anyone else's marketing.
Information collected automatically
- Records we derive: personal records, streaks, achievements, and workout statistics, calculated from the training data you log.
- Push notification token and device model (for example "iPhone 15 Pro"), only if you enable notifications.
- Your IP address, used to rate-limit abuse and present in ordinary server logs.
What we do not collect
Stated affirmatively, because it is unusual:
- Kondio contains no analytics or tracking SDKs. No third-party product analytics, advertising, attribution, or behavioural tracking software is built into the app, and this website carries no trackers or tag managers.
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
AI features
Some premium features send information to our AI provider, Anthropic, to generate a response. This only happens when you use one of those features. Specifically:
- AI Program Builder: your goals, focus areas, experience level, training days, session length, and available equipment, together with anything you typed into the "injuries or limitations" and "preferences" fields.
- Weekly insight: up to 40 workouts from the previous 21 days — the date, workout name, set count, total volume, duration, and effort rating — plus up to 8 recent personal records. Free-text workout notes are not included.
- Exercise swap: the name of the exercise you are replacing and the reason you gave, including if you indicated it was causing pain or discomfort.
These requests are pseudonymous. We do not send your name, email address, account identifier, or session token with them. Our AI provider is engaged as a business supplier under commercial terms and processes this information to return a result to you.
Generated programs and insights are stored in your account so you can return to them. The inputs to a program generation are retained with the request record until you delete your account.
Other services we rely on
- Push notifications are delivered through Expo, which passes them on to Apple or Google. Notification content — such as a new personal record and the exercise it was set on, or your display name — passes through that service in order to reach your device. Turning off a notification type in Settings stops it being sent at all.
- Crash reporting. Our iOS app includes Sentry, which reports crashes and errors so we can fix them. It collects the error, your device model, operating system and app version, and a trail of recent interactions leading up to the problem. We do not attach your account identifier to these reports. The web app at kondio.app has no crash reporting.
- Payments. Purchases are processed by Stripe on the web, or by Apple or Google for in-app purchases on mobile. If you buy or subscribe through an in-app purchase, this is managed with RevenueCat, which receives your Kondio account identifier and the resulting purchase record — the product, transaction, and store — to keep your subscription in sync across your devices. We never receive or store your card number. We do store the receipt record our payment provider returns, which can include billing details such as the name, email address, or address you gave them at checkout.
- Hosting. The Service runs on private servers we operate. Your data is stored in a PostgreSQL database, and your photos are stored as files in a private object store, both on infrastructure we control.
We share information with authorities only where the law requires it.
Sharing with other users
Nothing you create is visible to anyone else unless you publish it. If you publish a workout template to the community marketplace, other users can see your display name and everything in the template, and can save a permanent copy. See the Terms of Service for what that means, including the fact that copies others have already saved cannot be recalled.
Your data, your choices
- Export. Account settings will produce a machine-readable JSON file of your account details, training data, templates, body measurements, personal records and achievements. It is a data file rather than a formatted report, and it does not currently include every category listed in this policy — notably AI request inputs, photos, and billing records.
- Deletion. You can delete your account from Account settings. This permanently deletes your account and your training data, body measurements, progress photos, profile picture, records, templates, programs, notification tokens, and sign-in links. It cannot be undone.
- What deletion does not reach: feedback you sent us is kept but de-linked from your account; copies of any template you published that other users already saved remain theirs; and data may persist in encrypted backups for a limited period before those backups age out.
- Deleting a workout removes it from the app and from anything we calculate from it. We retain the underlying record rather than erasing the row immediately.
- Notifications can be turned off individually in Settings, which stops us sending them.
Storage on your device
Kondio does not use cookies. On the web, your session and a cache of recently viewed data are held in your browser's local storage so the app works offline; on mobile, your session is held in the device keychain. Clearing your browser data or deleting the app clears this.
Security
Connections are encrypted in transit, passwords are hashed with bcrypt, and sessions expire after 30 days. No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect in the first place.
Children
The Service is not directed to children under 13, or the minimum age in your jurisdiction if it is higher, and we ask that they do not create an account. If you believe a child has given us personal information, contact us and we will delete it.
Changes
We may update this policy. We will update the "Last updated" date above when we do.
Contact
Questions, or want a copy of your data in another form? Email privacy@kondio.fit.