Privacy Policy

Introduction

Korvi ("we", "our", "us") is a fitness tracking application that helps you log workouts, track progress, and receive AI-powered training recommendations. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using Korvi, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile photo (if provided). If you sign in with Google or Apple, we receive basic profile information from those services.

Fitness Data

We collect workout logs, exercise history, personal records, body measurements, training preferences, and goals that you enter into the app.

Media

If you choose to upload progress photos or workout videos, these are stored securely in your private account.

Sensor Data

If you connect a Bluetooth velocity sensor, we collect rep-level barbell velocity data during workouts. This data is stored locally on your device and in your private cloud storage.

How We Use Your Information

• Provide core functionality — Workout tracking, progress history, personal records, and social features.
• AI-powered recommendations — Generate personalised training plans and coaching.
• Push notifications — Send workout reminders, social notifications, and friend requests (with your permission).
• Improve the app — Crash reports and anonymised usage data help us fix bugs and improve features.

Third-Party Services

• Firebase (Google) — Authentication, database, file storage, cloud functions, push notifications, and crash reporting.
• Google Sign-In — Optional sign-in method. We receive your name, email, and profile photo.
• Apple Sign-In — Optional sign-in method. We receive your name and email (or a relay address if you choose to hide it).
• Google Vertex AI — Powers AI coaching features. Your data is anonymised before processing.

Data Storage & Security

Your data is stored on Firebase servers located in the United States. All data is encrypted in transit using TLS and at rest using AES-256 encryption.

We implement appropriate technical and organisational measures to protect your data, including secure authentication, access controls, and regular security reviews.

Data Sharing

We do not sell your personal data. We only share data in these limited cases:

• Social features — Your profile name, photo, and workout feed posts are visible to friends you accept.
• Service providers — Firebase and Vertex AI process data on our behalf under strict data processing agreements.
• Legal requirements — We may disclose data if required by law or to protect our legal rights.

Your Rights

• Access — View all data we store about you through the app.
• Export — Export your workout data at any time via Settings > Export Data.
• Deletion — Delete your account and all associated data via Settings > Delete Account. Deletion is completed within 30 days.
• Correction — Edit your profile and workout data at any time within the app.
• Opt out of AI — Disable AI features in Settings. The app continues to work for manual tracking.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data — including workouts, photos, videos, and AI context — is permanently deleted within 30 days.

Anonymised, aggregated data that cannot identify you may be retained for analytics purposes.

Children's Privacy

Korvi is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Korvi after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: privacy@korvi.fit

We aim to respond within 48 hours.