Privacy policy

Last updated November 12, 2026. Draft for the private beta.

What we collect

• Account: your email address and sign-in details.
• Profile: what you enter, such as name, birth date, body weight, sport, goals, experience, equipment, and areas to protect.
• Training: programs, logged sets and sessions, notes, check-ins (sleep quality, energy, soreness, pain), and the app's suggestions and decisions.
• Connected sources, only if you connect them:
  • Oura: daily sleep, readiness and activity summaries, heart rate, heart rate variability, SpO2, workouts and sessions, and basic personal info (age, height, weight), as you approve on Oura's consent screen.
  • Apple Health: the workout, heart rate, heart rate variability, sleep and body measurement types you allow in iOS settings.

How we use it

• To run the app for you: show your history, suggest loads, generate and adjust your program, and decide whether to change a day's session.
• To generate programs and explanations we send the relevant parts of your profile and training data to our AI provider (OpenAI). OpenAI processes it to return a response and does not use API data to train its models.
• To improve suggestions for everyone, only if you turn on “Help improve suggestions for everyone” (off by default). This uses logged sets, suggestions and outcomes, never chat, photos or health data from Apple Health or Oura.

We do not sell your data, use it for advertising, or share it with data brokers. Apple Health data is never used for advertising or marketing.

Where it is stored

Your data is stored with our service providers: Supabase (database and sign-in), PowerSync (syncing between your devices) and Vercel (our server). A copy of your own data is kept on your phone so the app works offline.

Your choices

• Disconnect Oura or Apple Health at any time, in KroiOS or in Oura / iOS settings. Disconnecting stops new data; you can ask us to delete what was already synced.
• Export your training data from the app.
• Delete your account and all your data by emailing trykroios@gmail.com.

Security

Data is encrypted in transit. Each account can only read its own records. Keys for connected services are kept on our server, never in the app.

Children

KroiOS is not intended for children under 13.

Changes

We will update this page and the date above when this policy changes.