Privacy Policy

IWho we are

[Controller], with registered office at [address], company no. [number], is the controller of the personal data collected through the KRATVS app and this website.

For any privacy question: [privacy email].

IIData we collect

Account data: email address and account identifier. If you sign in with Apple or Google, we receive only your email (or Apple’s private relay address) and your name, if you choose to share it.

Training data: the plans, exercises, sets, loads, reps and notes you log.

Minimal technical data: app version, device model and error logs. Error logs do not include your email, account identifier, IP address or any training content.

IIIHealth data and explicit consent

Body composition and measurement entries are data concerning health, a special category under Article 9 of the GDPR.

We only process this data with your explicit consent, requested in the app before your first entry. You can withdraw consent at any time in Profile, which deletes those entries.

This data is never used for advertising nor shared with third parties for their own purposes. [Text pending legal review.]

IVPurposes and legal basis

Providing the service (performance of a contract): storing, syncing and displaying your data.

Health data: explicit consent.

Security and abuse prevention: legitimate interest. [To be completed.]

VWhere and how we store data

Your data is stored on your device first. A copy is sent to the cloud, encrypted in transit and at rest, and isolated per account.

Servers located in [region, EU]. KRATVS does not offer end-to-end encryption.

VIProcessors

Supabase: database hosting, authentication and backup of your data. Servers in [region — confirm in the Supabase dashboard].

Sentry (Functional Software, Inc.): app error logs, hosted in the European Union (Frankfurt), with no data that identifies you.

Apple: Sign in with Apple and processing of Pro subscriptions through the App Store. We do not receive your payment details.

Google: Sign in with Google, if you choose it.

[Confirm this list and any transfers outside the EU with legal counsel.]

VIIRetention

We keep your data for as long as your account exists. After account deletion, data is erased within [period], unless required by law.

VIIIYour rights

You have the right of access, rectification, erasure, restriction, portability and objection, under the GDPR.

You may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

IXExporting data and deleting your account

You can export all your data in JSON from the app, on any plan.

You can delete your account at any time in Profile. Deletion is permanent.

XChanges and contact

Material changes to this policy are announced in the app before they take effect.

Contact: [privacy email].