PRIVACY POLICY

KOBP Fitness LLC ("KOBP Fitness," "we," "us," or "our") operates the KOBP Strength apps for iOS and Android, the website at kobpfitness.com, and the web application at app.kobpfitness.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have.

1. Information We Collect

Account information:

• Email address and password — to create and secure your account. Passwords are stored only as a salted one-way hash.
• Name — the name you enter at sign-up and the display name you give each lifter profile

Training and body data you enter:

• Lifter profiles, lift names, weights, sets, reps, set types, and session dates
• Session notes, which may include anything you write — for example pain, injuries, or schedule constraints
• Body weight and body weight history
• Training goal, preferred training days, difficulty, equipment, and warm-up preferences

Information generated by the Service:

• Coach AI analyses — training assessments, weekly plans, plan adherence scores, and lift predictions
• Coach Memory — short "durable facts" about your training (for example an injury to work around, an equipment limitation, or a programming preference) that Coach AI extracts from your session notes or that you add yourself. See section 3h.
• Badges and weekly training statistics

Health platform data (optional, only with your permission): Apple Health on iOS and Health Connect on Android. See sections 3f and 3g.

Information collected automatically:

• Product analytics (PostHog) — events describing how the app and website are used (for example page views and feature use), a random device identifier stored in your browser or app storage, and approximate location derived from your IP address. Analytics events are not linked to your email address or name and never include health values. You can opt out at any time in the app (Settings → Privacy → Product Analytics).
• Error reports (Sentry) — when the app or website encounters an error, a report containing technical details (error message, device and browser type, app version, and your IP address) is sent to Sentry so we can fix it.
• Server logs — our servers record IP addresses for rate limiting and security, the platform you use (iOS, Android, or web), and error logs that may include your email address when an error occurs on your account.
• We do not use advertising trackers, sell your data, or share it with advertisers.

2. How Your Training Data Is Stored

When you create an account, your training data — lifters, workout log, session notes, body weight history, preferences, and leaderboard choices — is automatically backed up to our servers (Cloudflare D1 and KV) under your account and linked to your email address, so you can restore it on any device. Any training data already on your device when you sign up is uploaded to your new account. Data is encrypted in transit via HTTPS.

Your cloud data is kept until you delete it (Settings → Delete Cloud Data) or delete your account.

3. Coach AI — Third-Party AI Processing by Anthropic

Coach AI uses the Claude API from Anthropic, PBC ("Anthropic") to generate personalized training analysis and weekly plans.

What is sent to Anthropic:

• Lift names, weights, sets, reps, set types, and session dates
• Session notes from the last 30 days
• Total session count, body weight, and body weight trend
• Your training goal and plan preferences, and your current weekly plan
• Your Coach Memory facts (section 3h)
• Apple Health or Health Connect recovery data, if you have granted permission (sections 3f and 3g)
• A random lifter identifier used to match the analysis to the right profile

What is NOT sent to Anthropic: your name, your lifter display name, your email address, your password, payment information, device identifiers, or location.

How Anthropic handles it: Anthropic processes this data to generate your analysis and return it to us. Under Anthropic's commercial API terms, data sent through the API is not used to train Anthropic's models. Anthropic's handling is also subject to Anthropic's Privacy Policy.

What we keep:

• The latest Coach AI analysis is cached on our servers for up to 7 days and on your device
• For Premium subscribers, up to 8 historical weekly analyses, weekly plan adherence scores, and lift predictions are stored in our database until you delete your account

3a. Automated Weekly Analysis (Premium)

Premium subscribers receive an automated weekly AI analysis that runs on our servers. Each week it:

• Sends your recent workout log, session notes, weekly plan, and Coach Memory facts to Anthropic's Claude API
• Stores the resulting analysis, adherence scores, lift predictions, and any new Coach Memory facts in your account
• Does not send your name, email address, password, Apple Health or Health Connect data, or payment information
• Runs only for Premium accounts that have logged at least 2 workouts in the past 14 days
• Stops when your Premium subscription ends, and stops immediately when you request deletion of your account

3b. Import AI — Third-Party AI Processing

Import AI sends only the content you choose to import — pasted text (for example a CSV export or notes) or an uploaded image or screenshot, plus its file type — to Anthropic's Claude API to extract workout entries. Please don't import images or text containing other people's information. Your name, email address, and account details are not sent. Import results are cached on our servers and your device for 30 days so the same content isn't processed twice. Import AI is limited to 5 lifetime uses per account.

3c. Quick Log — Third-Party AI Processing

Quick Log sends the text you type or dictate, a list of your known lift names, and today's date to Anthropic's Claude API to structure your workout. Voice dictation is handled by your device's keyboard; audio is never sent to us or to Anthropic. Your name, email address, and training history are not sent. Quick Log is available to Premium subscribers.

3d. Global Leaderboard, Weekly Leaderboard, and Badges

If you opt a lifter in:

• The lifter's display name, body weight, and top sets (weight, reps, and date for each lift) are stored on our servers and are publicly visible — to other users and to anyone who accesses the leaderboard. If you use Apple Health or Health Connect, the body weight shown may be the value imported from those apps.
• Weekly totals (training volume, number of PRs, and session count) are shown on the weekly leaderboard
• Leaderboard data expires 90 days after your last activity. Opting out or deleting the lifter removes it immediately.

Personal badges you earn are stored on our servers with the lifter's display name whether or not you opt in; they are shown only to you unless you are opted in to the leaderboards.

3e. Share Links

If you create a share link, anyone with the link can see the lifter's display name, body weight, top sets, and session count for up to 90 days. You can revoke a link at any time, and share links are deleted when you delete your account.

3f. Apple Health Integration (iOS)

What we read from Apple Health:

• Resting heart rate — 7-day average and trend
• Heart rate variability (HRV) — 7-day average and trend
• Sleep analysis — 7-day average duration
• VO2 Max — most recent value
• Active energy burned — 30-day total
• Body mass — most recent value
• Strength training workout sessions (last 30 days) — duration, active calories, and average heart rate. Only Traditional Strength Training, Functional Strength Training, Core Training, Cross Training, HIIT, and Mixed Cardio sessions are included.

We do not read steps, running, cycling, blood oxygen, ECG, reproductive health, location, or any other Apple Health data type.

How it is used and stored:

• Body weight — the most recent Apple Health body weight is imported into your lifter's body weight history, stored on our servers with the rest of your training data, and used wherever your body weight is used (including the leaderboards if you opt in)
• Heart rate, HRV, sleep, VO2 Max, and workout sessions — included in Coach AI requests sent to Anthropic for recovery and intensity context. We do not store these raw readings on our servers; the Coach AI analysis produced from them is stored as described in section 3.
• Apple Health data is never used for advertising and is never sent to analytics providers
• KOBP Fitness never writes data to Apple Health
• You can revoke access at any time in iPhone Settings → Health → Data Access & Devices → KOBP Strength, and reset your in-app choice in app Settings

3g. Health Connect Integration (Android)

What we read from Health Connect, and why:

• Resting heart rate (android.permission.health.READ_RESTING_HEART_RATE) — 7-day average and trend, an input to the Coach AI recovery assessment: a rise of more than 5 bpm together with a falling HRV trend is read as accumulated fatigue and lowers the recommended training intensity.
• Heart rate variability (android.permission.health.READ_HEART_RATE_VARIABILITY) — 7-day average and trend, an input to the recovery assessment.
• Sleep sessions (android.permission.health.READ_SLEEP) — 7-day average duration; an average below 6.5 hours is treated as compounding fatigue.
• Weight (android.permission.health.READ_WEIGHT) — most recent value, imported into your body weight history and used for training-load context.
• Exercise sessions (android.permission.health.READ_EXERCISE) — strength-training sessions from the last 30 days (duration and activity type only). Only Strength Training, HIIT, and Calisthenics sessions are included.

We do not read VO2 Max, calories, steps, location, blood oxygen, or any other Health Connect data type. The TrueIntensity Score does not use Health Connect data.

How it is used and stored: the same as Apple Health (section 3f) — body weight is stored and synced with your training data; heart rate, HRV, sleep, and exercise sessions are sent to Anthropic for Coach AI analysis and are not stored on our servers as raw readings. Health Connect data is never used for advertising and is never sent to analytics providers. You can revoke access in Android Settings → Apps → Health Connect → App permissions → KOBP Strength.

3h. Coach Memory

Coach Memory is a short list of durable facts about your training that Coach AI uses to personalize future analyses and plans — for example "left shoulder pain on overhead press," "trains at home with dumbbells only," or "wants to hold squat at 225 lb." Facts are extracted by Anthropic's Claude API from your session notes during Coach AI analyses (including the Premium weekly analysis), or added by you directly.

• Coach Memory is stored on our servers until you delete it — there is no automatic expiry
• You can view, add, delete individual facts, or clear all of Coach Memory in Settings
• When you delete a fact, we keep a one-way hash of it (never the text) for up to 12 months so it isn't re-extracted from the same notes
• All Coach Memory, including those hashes, is deleted when you delete your account

4. How We Use Your Information

• To provide the Service: store and sync your training data, generate Coach AI analyses and plans, run leaderboards and badges if you opt in
• To manage your account and subscription, verify your email, and reset your password
• To send service emails (section 5)
• To understand how the Service is used and fix errors (product analytics and error reports — never including health values)
• To protect the Service against abuse, including rate limiting
• To comply with legal obligations

5. Email Communications

We send account and service emails — email verification, password resets, subscription status notices, and account deletion notices — through Brevo. New Premium subscribers receive a one-time welcome email sent from our Google Workspace account through the Gmail API. These are not marketing emails.

If you joined our waitlist, your email address is stored in Google Forms / Google Sheets and used to send product updates and launch announcements. You can unsubscribe at any time using the link in those emails or by contacting hello@kobpfitness.com.

6. Data Sharing and Service Providers

We do not sell your personal information or share it for targeted advertising. We share information only with the service providers below, who process it on our behalf, and when required by law.

• Anthropic, PBC — AI processing for Coach AI, Coach Memory, Import AI, and Quick Log, as described in section 3
• Cloudflare, Inc. — hosting, databases, and storage for all account, training, leaderboard, and share data (privacy policy)
• PostHog, Inc. — product analytics (US hosting); no health values, email addresses, or names (privacy policy)
• Functional Software, Inc. (Sentry) — error reporting (privacy policy)
• Brevo — delivery of account and service emails (privacy policy)
• Google LLC — Gmail API (welcome email), Google Forms / Sheets (waitlist), and Google Play Billing for Android subscriptions (privacy policy)
• Apple Inc. — App Store in-app purchases for iOS subscriptions. We receive a transaction identifier and subscription status, never your payment details.
• Stripe, Inc. — payment processing for subscriptions purchased on the web; Stripe receives your email address and handles your card details, which we never receive (privacy policy)
• Legal requirements — if required by law, court order, or governmental authority, or to protect the rights and safety of our users or others

7. Data Retention

• Account and training data (including notes and body weight history) — until you delete it or delete your account
• Coach Memory — until you delete it or delete your account; hashes of deleted facts for up to 12 months
• Coach AI results — latest analysis cached up to 7 days; Premium weekly history (up to 8 analyses), adherence scores, and predictions until you delete your account
• Import AI results — 30 days
• Leaderboard data — 90 days from last activity; removed immediately when you opt out or delete the lifter
• Share links — up to 90 days, or until you revoke them
• Raw Apple Health / Health Connect readings other than body weight — not stored on our servers
• Server error logs — 90 days
• Sign-in sessions — 30 days from last use
• Purchase records — kept for accounting and tax purposes after account deletion, with your email address replaced by an anonymous placeholder
• Waitlist email — until you unsubscribe or ask us to delete it
• Product analytics and error reports — according to PostHog's and Sentry's retention settings

8. Deleting Your Account

You can delete your account in the app. Deletion takes effect after a 30-day grace period: during that time you can cancel by signing back in, and automated Coach AI processing of your data stops immediately. After 30 days your account, training data, Coach Memory, AI results, leaderboard entries, share links, and other personal data are permanently deleted, and purchase records are anonymized as described above. You'll receive an email when deletion is complete.

9. Your Rights

Depending on where you live, you may have the right to:

• Access — get a copy of the personal information we hold about you
• Deletion — ask us to delete your personal information
• Correction — ask us to correct inaccurate information
• Withdraw consent — turn off AI sharing (Coach AI, Import AI, Quick Log), Coach Memory, or Apple Health / Health Connect access at any time in Settings → Privacy, or revoke health platform access in your device settings. See our Consumer Health Data Privacy Policy for how this is handled.
• Opt out — of waitlist and marketing emails, and of product analytics (Settings → Privacy → Product Analytics)
• Appeal — if we decline your request, you can appeal by replying to our decision

To exercise these rights, email hello@kobpfitness.com from the address on your account. We will respond within 30 days (or sooner if your state's law requires). We will not discriminate against you for exercising your rights.

10. Age Requirement

The Service is intended only for people who are at least 18 years old, as stated in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it promptly.

11. Security

We use reasonable safeguards to protect your information, including encryption in transit (HTTPS), salted password hashing, access controls on our systems, and limits on how long we keep data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time and will update the "Last Updated" date above. If we make a material change — especially one that affects how we use or share health data or data we have already collected — we will notify you in the app or by email before the change takes effect, and will ask for your consent where the law requires it.

13. Contact Us

• Email: hello@kobpfitness.com
• Website: kobpfitness.com
• Business: KOBP Fitness LLC, Brookfield, Illinois