Your data, clearly explained
Privacy Policy
This policy explains how Rokuru handles personal data when you use the Kinetic Fit app and website.
Effective 3 August 2026
1. Who is responsible
Rokuru, based in Norway, operates Kinetic Fit and is the controller of personal data described in this policy. Questions or privacy requests can be sent to [email protected].
2. Data flow at a glance
On-device inference and off-device storage or model training are separate processes. This summary shows where the main categories of data go and why.
| Data | Where it is processed | Purpose | Retention or control |
|---|---|---|---|
| Account and settings | Firebase Authentication and Cloud Firestore | Sign-in, account operation, preferences, and device synchronization | Generally while your account is active; removed through account deletion, subject to limited backups and legal records |
| Health and fitness data | Apple HealthKit on your device; selected synchronized data in Cloud Firestore | Health and training insights, synchronization, and—with separate consent—training and improving Kinetic Fit models | HealthKit access is controlled in iOS. Firestore keeps a rolling window of detailed daily snapshots and longer-term aggregate rollups as described below |
| Workouts and routes | Your device and Cloud Firestore | Workout history, routes, synchronization, insights, and—with separate consent—relevant model training | Generally while your account is active; removed through account deletion, subject to limited exceptions described below |
| Foundation Models and Core ML inference | Your device | Generate intelligent app features from models already available to Kinetic Fit | No remote inference request is made; this is separate from Firestore storage and model training |
| Diagnostics | Firebase Crashlytics and Performance Monitoring | Reliability, fault diagnosis, performance, and security | According to our provider configuration and only as long as reasonably needed for those purposes |
3. Data we handle
Account data
If you create an account, we process an account identifier and information provided by your sign-in provider, such as your email address, display name, and whether you use Sign in with Apple or Google Sign-In. Your provider controls the information it shares with Kinetic Fit.
Health and fitness data
With your permission, Kinetic Fit reads selected health and fitness information from Apple HealthKit and may write completed workouts back to HealthKit. This may include activity, workout, heart-rate, energy, mobility, body-measurement, sleep, and related fitness signals needed for features you enable.
Workout content
We process workout plans and templates, exercise selections, sets, repetitions, weights, intervals, climbing sessions, completed workouts, notes, feedback, personal records, and derived training insights.
Machine learning and on-device inference
Kinetic Fit uses Apple’s Foundation Models framework and Core ML for intelligent features. Model inference runs on your device. Separately, with your consent, relevant health and fitness information, workout content, and derived training data stored in Cloud Firestore are used to train and improve models for Kinetic Fit’s health and fitness features. Model training using Firestore data is distinct from on-device inference. We do not sell the training data or models trained from it.
Precise location and routes
If you enable location access for an outdoor activity, Kinetic Fit processes precise location, route coordinates, distance, pace, speed, elevation, and related workout information. Location is used to record and present the route and is not used for advertising.
Diagnostics and performance
We may receive crash reports, error details, app and OS version, device model, performance traces, and technical event metadata through Firebase Crashlytics and Firebase Performance Monitoring. We configure diagnostics to help find faults and improve reliability, not to build advertising profiles.
Support communications
If you contact support, we process your email address, message, and any information you choose to include so we can answer and resolve the request.
4. How and why we use data
- Provide the app: authenticate you, save settings, record workouts, run intelligent features on-device, synchronize data across devices, and support app features.
- Develop Kinetic Fit’s models: with separate consent, use relevant health, fitness, workout, and derived data stored in Firestore only to train and improve models for Kinetic Fit’s health and fitness features.
- Use permissions you choose: access HealthKit, precise location, motion, notifications, and Live Activities only for the relevant functionality.
- Keep Kinetic Fit reliable and secure: diagnose crashes, monitor performance, prevent misuse, and protect accounts and services.
- Provide support: respond to questions, deletion requests, and technical issues.
- Meet legal obligations: comply with applicable law and respond to valid legal requests.
For people in the EEA, our legal bases are performance of our agreement with you, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving Kinetic Fit. We rely on explicit consent to process health data for model training and whenever applicable law otherwise requires it. HealthKit access, location access, and model-training consent are separate choices.
5. Apple HealthKit
Kinetic Fit requests HealthKit access only after you choose to grant it. Apple lets you review or revoke individual categories at any time. Granting HealthKit access allows Kinetic Fit to read the categories you select; it does not by itself grant consent to use that data for model training. We do not use HealthKit data for advertising, marketing, data brokerage, or sale. Removing Kinetic Fit or deleting your Kinetic Fit account does not automatically delete records already stored in Apple Health; you can manage those records in the Health app.
6. Service providers and sharing
We do not sell personal data, training data, or models trained from that data. We do not share personal data for cross-context behavioral advertising. We use service providers only as needed to operate Kinetic Fit:
- Google Firebase: Authentication, Cloud Firestore storage and synchronization, Crashlytics, and Performance Monitoring.
- Apple: Sign in with Apple, HealthKit, MapKit and location services, iCloud/device services, and App Store distribution.
- Google: Google Sign-In when you select it.
- Cloudflare: hosting, security, DNS, and email routing for this website and support address.
Inference using Foundation Models and Core ML occurs locally on your device. The separate use of Firestore data to train and improve Kinetic Fit’s models may occur off-device.
Providers process data under their own terms and our applicable agreements. We may also disclose information if required by law, to protect rights or safety, or as part of a business reorganization with appropriate safeguards.
7. Storage, transfers, and security
Data may be processed in Norway, the EEA, the United States, and other countries where our providers operate. Where required, international transfers use recognized safeguards such as adequacy decisions or standard contractual clauses.
We use reasonable technical and organizational safeguards, including encrypted network transport, authenticated access, and access controls. No system can be guaranteed completely secure, so please protect your device and sign-in credentials.
8. Retention and deletion
Account, workout, route, and other synchronized training data are generally kept while your account is active. For synchronized HealthKit snapshots, Kinetic Fit keeps detailed daily data in a rolling window of approximately 30 days. Weekly and monthly aggregate rollups are kept while your account is active. Support messages are kept as long as needed to handle the request and maintain a reasonable service record. Diagnostic information is retained according to the applicable provider settings and only as long as reasonably needed for reliability and security.
You can delete your account in Kinetic Fit under Settings → Authentication → Delete Account. This starts permanent deletion of your Kinetic Fit account and user-scoped data in active Firestore storage. Limited information may remain temporarily in backups, security logs, or records we must retain by law, after which it is deleted or de-identified. Data stored separately by Apple Health or a sign-in provider must be managed through that service.
Deleting source data does not technically reverse model training that was already completed. We consider requests concerning account-linked training data under applicable law; contact [email protected].
9. Your choices and rights
You can control HealthKit, location, motion, notification, and other permissions through iOS settings. You can also use Kinetic Fit without granting optional permissions, although affected features will be unavailable.
Model-training choice
Before using account-linked health, fitness, workout, or derived data for model training, Kinetic Fit asks for separate, explicit consent. Declining model training does not prevent account access, workout tracking, synchronization, or on-device inference, although features that depend on a personalized model may be limited.
You can withdraw model-training consent in Kinetic Fit or by contacting [email protected]. Withdrawal stops new use of your account-linked data in future training runs. It does not affect processing completed before withdrawal or technically reverse models already trained.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, or receive a portable copy of personal data. EEA users may complain to their local supervisory authority or Norway’s Data Protection Authority (Datatilsynet). Contact [email protected] to exercise a right. We may need to verify your identity before fulfilling a request.
10. Children
Kinetic Fit is not directed to children under 16. If you believe a child has provided personal data without valid authorization, contact us so we can investigate and delete it where required.
11. This website
The Kinetic Fit website is static. It does not set cookies, run analytics, load advertising trackers, or provide account forms. Standard hosting and security logs may include technical request information such as IP address, requested URL, user agent, and timestamp for short-term delivery, abuse prevention, and security.
12. Changes to this policy
We may update this policy when Kinetic Fit, our providers, or legal requirements change. We will post the updated version here, change the effective date, and provide additional notice in the app when a change is material.