Privacy Policy

Data We Collect

The categories below describe every type of personal data the Application collects, how it is used, where it is stored, and whether it is linked to your identity.

• Name — collected during account creation. Stored on Supabase (our authentication and database provider) and linked to your account. Used for account management and to personalize the in-app experience.
• Email Address — collected during sign-in or account creation. Stored on Supabase and linked to your account. Used for authentication, account management, and to respond to support requests.
• Photos or Videos — collected only when you use the AI workout scan feature to photograph a whiteboard or workout. The photo is sent transiently to Anthropic's Claude API for parsing and is never stored on our servers, never stored by Anthropic, and not linked to your identity.
• Customer Support — messages you submit through Help & Feedback (and an optional reply email) are used only to respond to your request. Not used for analytics and not linked to your identity beyond the contact details you choose to provide.
• User ID — a Supabase-generated authentication identifier (UUID) is created for your account and linked to all of your in-app data (workouts, personal records, profile). Not shared with Anthropic or RevenueCat.
• Product Interaction — aggregated, anonymized usage data (page views, feature usage, app version) is collected via Lovable's hosting analytics. Not linked to your identity. No precise location, no cross-app tracking, no advertising identifiers.
• Fitness — workout configurations, completed workout history, timers, splits, personal records, and the optional onboarding profile (sex, date of birth, experience level, height, weight) are stored on Supabase and linked to your account. Used to power the timer, history, and benchmark features.

Camera Access

The Application requests camera access only when you tap to scan a workout photo. The photo is sent to Anthropic's Claude API for parsing and immediately discarded — never stored on our servers, never stored by Anthropic, and never linked to your identity.

Information Collection and Use

The Application collects information when you download and use it. This information may include information such as:

• Your device's Internet Protocol address (e.g. IP address)
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• The operating system you use on your mobile device

The Application does not gather precise information about the location of your mobile device.

The Application uses Artificial Intelligence (AI) technologies to enhance user experience and provide certain features. The AI components may process user data to deliver personalized content, recommendations, or automated functionalities. All AI processing is performed in accordance with this privacy policy and applicable laws. If you have questions about the AI features or data processing, please contact the Service Provider.

The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions.

For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information. The information that the Service Provider request will be retained by them and used as described in this privacy policy.

Third Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• RevenueCat — subscription management and entitlement verification.
• Supabase — authentication, database storage, and serverless functions. Workout history, personal records, and user profile data are stored on Supabase infrastructure.
• Anthropic — AI workout parsing, photo scanning, conversational editing, and coaching insights. When you enable AI features, the workout text or photo you provide is sent to Anthropic's Claude API for processing. Anthropic does not use API data to train their models. You can revoke this consent any time in Settings → Privacy → AI features.
• Lovable — application hosting and product analytics (page views, time on page, app version). Aggregated and anonymized; no precise location, no cross-app tracking.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Data Retention Policy

The Service Provider retains User Provided data for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Account → Delete Account inside the app. Account deletion is immediate and cannot be undone. If you have an active subscription, you must cancel it separately from Apple ID Settings — deleting your account does not cancel an Apple subscription. Anonymous users (those who have not signed in) can clear all locally stored data at any time from Settings → Account → Clear All Data.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please use the Help & Feedback section in the app's Settings so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Your Rights

Depending on where you live, you may have rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar laws, including:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to delete your data (also available in-app via Settings → Account → Delete Account).
• The right to data portability — receive your data in a machine-readable format.

To exercise any of these rights, email us at support@klock-in.app. We will respond within 30 days.

California residents: we do not sell personal information.

International Data Transfers

Your data may be processed in the United States and other countries by our service providers — including Supabase, Anthropic, and RevenueCat — in accordance with applicable law. By using the Application, you acknowledge that your data may be transferred outside your country of residence.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-04-28

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please use the Help & Feedback section in the app's Settings, or email us at support@klock-in.app.