Privacy Policy

Introduction

Korvi ("we", "our", "us") is a fitness tracking application that helps you log workouts, track progress, and receive AI-powered training recommendations. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using Korvi, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile photo (if provided). If you sign in with Google or Apple, we receive basic profile information from those services.

Fitness Data

We collect workout logs, exercise history, personal records, body measurements, training preferences, and goals that you enter into the app.

Media

If you choose to upload progress photos or workout videos, these are stored securely in your private account.

Sensor Data

If you connect a Bluetooth velocity sensor, we collect rep-level barbell velocity data during workouts. This data is stored locally on your device and in your private cloud storage.

How We Use Your Information

• Provide core functionality — Workout tracking, progress history, personal records, and social features.
• AI-powered recommendations — Generate personalised training plans and coaching.
• Push notifications — Send workout reminders, social notifications, and friend requests (with your permission).
• Improve the app — Crash reports and anonymised usage data help us fix bugs and improve features.

Third-Party Services

• Firebase (Google) — Authentication, database, file storage, cloud functions, push notifications, and crash reporting.
• Google Sign-In — Optional sign-in method. We receive your name, email, and profile photo.
• Apple Sign-In — Optional sign-in method. We receive your name and email (or a relay address if you choose to hide it).
• Google Vertex AI — Powers AI coaching features. Your data is anonymised before processing.

Data Storage & Security

Your data is stored on Firebase servers located in the United States. All data is encrypted in transit using TLS and at rest using AES-256 encryption.

We implement appropriate technical and organisational measures to protect your data, including secure authentication, access controls, and regular security reviews.

Data Sharing

We do not sell your personal data. We only share data in these limited cases:

• Social features — Your profile name, photo, and workout feed posts are visible to friends you accept.
• Service providers — Firebase and Vertex AI process data on our behalf under strict data processing agreements.
• Legal requirements — We may disclose data if required by law or to protect our legal rights.

Your Rights

• Access — View all data we store about you through the app.
• Export — Export your workout data at any time via Settings > Export Data.
• Deletion — Delete your account and all associated data via Settings > Delete Account. Deletion is completed within 30 days.
• Correction — Edit your profile and workout data at any time within the app.
• Opt out of AI — Disable AI features in Settings. The app continues to work for manual tracking.

Cookies and Similar Technologies

This section applies to the Korvi website. Cookies that are not strictly necessary are only set once you have given permission, and you can change or withdraw that permission at any time using the Cookie settings link in the footer of every page.

Strictly necessary

These are required for the site to work and are set without consent, because the site cannot function without them.

We also use Vercel Web Analytics to count page views. It sets no cookies, stores no identifiers on your device, and cannot be used to recognise you across sites or sessions.

Analytics (optional)

Aggregate measurement of which pages are used and where visitors run into difficulty. These cookies are only set if you allow the Analytics category.

Session recording (optional)

We use Lucky Orange to record anonymised sessions and build heatmaps, so we can see which parts of a page are confusing. These cookies are only set if you allow the Session recording category, and the Lucky Orange script is not loaded at all until you do.

For details of how Lucky Orange handles this data, see the Lucky Orange privacy policy.

Changing your mind

Choosing "Reject all", or switching a category off after previously allowing it, deletes the cookies that category set and reloads the page so the relevant script stops running. We will ask you again after 12 months, or sooner if we add a new provider.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data — including workouts, photos, videos, and AI context — is permanently deleted within 30 days.

Anonymised, aggregated data that cannot identify you may be retained for analytics purposes.

Children's Privacy

Korvi is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Korvi after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: privacy@korvi.fit

We aim to respond within 48 hours.