Privacy Policy

1. What we collect

Account and profile

Your name, username, email address and password (stored only as a secure hash). If you sign in with Apple or Google, we receive your name and email from them. Optional profile details you add, such as birthday, height and weight, are used to personalise goals and training plans.

Location

The app uses your location to suggest walking routes, record your walks and, when you start one, record a journey. While a journey is recording, the app keeps using your location in the background, including with the screen off, so the whole route is captured. Location is only used in the background while a recording is in progress, and you can stop it at any time. You can turn location access off in your phone's settings; route features won't work without it.

Activity and health data

Walks, distances, times, streaks, goals and training-plan progress. If you connect Apple Health or Health Connect, and only then, we read the data types you allow (such as steps, walking distance, workouts, heart rate and active energy) to count your activity. Health data is used only to provide the app's features. It is never used for advertising, never sold, and never shared with third parties for their own purposes.

Photos and notes

Photos and notes you add to a journey as “moments”. They are stored with your journey. We only access the photos you choose; we don't scan your library.

AI training plans

When you create a plan, we use what you tell us (your goal, date, fitness level, preferences and notes) to generate it. These details are processed by an AI service provider on our behalf to create the plan and are not used to train their models.

Purchases

Subscriptions are handled by the App Store or Google Play. We receive the subscription status and transaction details we need to unlock Plus; we never see your card details.

Technical data

Basic device and app information (device model, operating system, app version, crash reports) to keep the app working and fix problems.

Website waitlist

If you join the waitlist on our website, we store your email address and the date you joined, and send you a confirmation email and one email when the app launches. Every email has an unsubscribe link, which deletes your address from the list.

2. How we use it

• To provide the app: plan your daily walks, map routes, track streaks, record journeys and build training plans.
• To keep your account secure, including two-factor authentication.
• To send the emails you'd expect: account and security messages, and reminders or updates you turn on (you can turn these off in the app).
• To provide support when you contact us.
• To understand and fix problems and improve the app.

We don't sell your personal data, and we don't use your location or health data for advertising.

3. Who we share it with

Only with service providers that help us run Kiloop, under contracts that require them to protect your data and use it only on our instructions:

• Cloud hosting and database providers, which store your account and activity.
• An email provider, to send account and waitlist emails.
• An AI service provider, to generate training plans.
• Map providers, to display maps (they see the map area being viewed).
• Apple and Google, for sign-in and in-app purchases.

We may also disclose data if the law requires it, or to protect the rights and safety of our users and others.

4. How long we keep it

We keep your data while your account is active. When you delete your account, we delete your personal data within 30 days, except where the law requires us to keep some records for longer (for example, purchase records for tax purposes). Waitlist emails are kept until you unsubscribe or until shortly after launch. See Delete your account.

5. Your choices and rights

• Access and correct your details in the app, under Profile.
• Delete your account and data from the app (Profile › Delete account) or by request.
• Control permissions for location, health data, photos and notifications in your phone's settings.
• Opt out of non-essential emails with the link in any email.

Depending on where you live (for example, under the GDPR or the CCPA), you may also have the right to a copy of your data, to object to or restrict certain uses, and to complain to your data protection authority. Contact us at hello@getkiloop.io and we'll respond within 30 days.

6. Security

We use encryption in transit, hashed passwords, optional two-factor authentication and access controls to protect your data. No system is perfectly secure, but we work to keep your information safe and will notify you if a breach affects you, as required by law.

7. Children

Kiloop is not intended for children under 13. We don't knowingly collect data from them. If you believe a child has given us personal data, contact us and we'll delete it.

8. International transfers

Our service providers may process data in other countries. When they do, we use appropriate safeguards, such as standard contractual clauses, to protect it.

9. Changes to this policy

If we make significant changes, we'll let you know in the app or by email before they take effect. The date at the top shows the latest version.

10. Contact us

Kiloop, Kathmandu.
Privacy questions: hello@getkiloop.io