Privacy policy
Last updated 4 October 2026
In short:
- KIVO stores your workouts so you can see your progress on any phone you sign in on.
- Health data is used only to show your training. It is never used for advertising, never sold and never shared.
- No ads, no advertising IDs, no tracking across other companies’ apps or websites.
- You can delete your account inside the app at any time (Profile → Settings → Delete account).
Who we are
KIVO is a workout tracker for iPhone, Apple Watch and Android, published by the developer named on its App Store and Google Play pages (“KIVO”, “we”, “us”), based in the United Arab Emirates. For anything about this policy or your data, email [email protected]. This policy covers the KIVO apps, kivofit.app and the KIVO trainer portal.
What we collect
We only collect what KIVO needs to work. You give us most of it directly.
- Account details: first name, last name and email address, or your Sign in with Apple ID (which can be a private relay email), and your mobile number if you choose to add it. If you sign in with Apple, we only receive the name and email Apple shares.
- Profile details, only if you add them: date of birth, gender, height, training experience and main goal.
- Training: the workouts you log (exercises, sets, weights, reps, times, notes), routines, exercises you create, body measurements you enter (such as weight, body fat and waist), and settings such as units, rest time and weekly goal.
- Messages: if you link a trainer, the messages and workout comments between you and that trainer.
- Device and security: a random ID for the phone you use KIVO on and its model name (for example “iPhone 15”), so your account works on one phone at a time; a push notification token if you allow notifications; and, if you create a passkey, its public key only. Face ID, Touch ID and fingerprints never leave your phone.
- App activity: which screens you open and what you tap in KIVO (for example “started a workout”), with the time, phone type and app version. It is linked to your account and used only to fix problems and improve KIVO.
- Workout location, only if you allow it: when you start a workout, the approximate place (coordinates, the place or area name and the city, for example your gym). KIVO asks for location only “while using the app”, never in the background. If you say no, KIVO works the same; it may remind you about once a week, and you can stop this with “Save where I train” in Settings.
- Health summaries, only if you turn this on: average heart rate and active energy for each workout. Off by default.
- Technical logs: our hosting providers record IP addresses and request times for security and to keep the service running.
We do not collect your contacts, photos, browsing history, background location or advertising identifiers.
Apple Health and Health Connect
If you connect Apple Health (or Health Connect on Android), KIVO saves your workouts there and reads heart rate and active energy for those workouts. That data stays in Health and on your phone unless you switch on “Back up heart rate & energy to my KIVO account”; then only the per-workout averages are stored with your account.
Data from Health is used only to show your training to you (and to your trainer, if you link one). We never use it for advertising or marketing, never sell it, never share it with data brokers or other third parties, never store it in iCloud, and never use it to infer anything about you beyond your workouts. You can change or remove access at any time in the Health app (Sharing → Apps → KIVO) or in Health Connect.
How we use your data
- To provide KIVO: save and sync your workouts, show your history, records, charts and suggestions for your next session.
- To keep your account secure, including signing out an old phone when you sign in on a new one.
- To send notifications you allow: rest timer alerts, reminders, messages from your trainer and occasional news. You can turn reminders and news off in Settings → Notifications, and all notifications off in your phone’s settings.
- To show where each of your workouts happened, in your own history.
- To improve KIVO and its exercise library, using app activity and totals across all users (for example, which cities and gyms people train in). Places and exercises used by fewer than three people are never shown in these totals.
- To manage your plan. KIVO is free today; if paid features are added later, purchases in the iOS app go through Apple, and we only receive confirmation of your plan, never your card details.
- To answer you when you contact support.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you that have legal or similar effects.
Who can see your data
You. Your workouts, measurements and the exercises you create are private to your account.
Your trainer, only if you choose. If you enter a trainer’s code (Settings → Trainer), that trainer can see your name, mobile number (if added), the profile details you added (such as age, height and goal), workouts, sets and body measurements on the KIVO trainer portal, send you routines, and message or comment on your workouts. They never see your email address, password or workout locations. Unlink in the same screen and their access ends immediately. Trainers are independent of KIVO and must use your data only to coach you; KIVO can pause a trainer’s access at any time.
The KIVO team, only as needed to run the service, answer support requests, and review exercises or routines you choose to suggest for the KIVO library (published copies never show your name).
Service providers that run parts of KIVO for us, under contracts that require them to protect your data and use it only for that purpose:
- Supabase (database, sign-in and file storage, hosted on Amazon Web Services).
- Expo (delivers push notifications to Apple and Google).
- Apple (Sign in with Apple, push notifications, app delivery) and Google (Android app delivery and notifications).
- Cloudflare (hosts kivofit.app and forwards email sent to kivofit.app addresses).
Your data may be processed on servers outside your country, with the same protections. We may also disclose data if the law requires it, or to protect the safety of our users.
How long we keep it
- Account details and training: while you have an account. Workouts older than two years may be moved to an archive and still count for your records.
- App activity logs: three months, then compressed into an archive used only for long-term product statistics.
- After you delete your account: personal details are erased straight away (see below). Training records are kept only in anonymous form, with the city of a workout but never its exact location.
Deleting your account
In the app, go to Profile → Settings → Delete account. This permanently deletes your account and personal details (name, email address, mobile number, profile details, exact workout locations, sign-in, devices, notification tokens and messages with a trainer) and signs you out everywhere. You can also email [email protected] from your account email and we will delete it for you.
Your training records (workouts, sets, measurements and app activity) are kept only in anonymous form: they are moved to a random identifier with no link to you, your name, email or phone, and used only for product statistics. Workouts already saved in Apple Health stay there; you can remove them in the Health app.
Your rights and choices
Depending on where you live (including under the UAE Personal Data Protection Law and the EU/UK GDPR), you can ask to access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. Most of this you can do in the app: edit your details in Profile → Edit profile, turn notifications, workout location and Health backup off in Settings, unlink a trainer, or delete your account. For anything else, email [email protected] and we will reply within 30 days. You can also complain to your local data protection authority.
Security
Data travels over encrypted connections (HTTPS). Database rules mean only your own account can read your workouts, and your sign-in is kept in your phone’s secure keychain. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
KIVO is not meant for children under 13, and we don’t knowingly collect their data. If you believe a child has created an account, email us and we will delete it.
Changes
If this policy changes, we will update the date above, and tell you in the app before an important change takes effect.