Privacy Policy

Who we are

KinForm is operated at kinform.app. Contact: hello@kinform.app.

What we collect

• Account info: name, email, and sign-in details (email/password or Google).
• Trainer & client data: profiles, programs, sessions, notes, habits, body metrics, progress photos, and cardio logs that trainers and clients choose to enter.
• Invite emails: addresses you send invites to, so clients can join.
• Email preferences: whether you have asked for or opted out of a particular kind of email, and when. If you unsubscribe, we keep a record of your email address so we can honour it.
• Usage & diagnostics: which screens and features are used, and error reports, so we can keep the app working and see whether changes help. See “Analytics” below for exactly what this does and does not include.

How we use it

We use this information to:

• Run the product: accounts, programs, sessions, and client progress
• Send invite emails and service messages about your account — session changes, reminders, password resets. These are part of the service, so they don’t have an unsubscribe link
• Send a weekly summary to trainers who have turned it on. That one is optional, has an unsubscribe link in every message, and is off until you ask for it
• Fix bugs, improve reliability, and understand how the product is used
• Protect the service against abuse

We do not sell your personal information. We do not use client health or training data for advertising.

Analytics

We use PostHog to understand how Kinform is used — which screens get opened, which features get used, and whether a change made things better. This only happens if you agree to it. We ask once, nothing is stored before you answer, and saying no is one click. You can change your mind any time in Settings.

We also use Vercel Analytics for basic traffic, which sets no cookies, and Sentry for crash reports when it is switched on.

Because Kinform holds health and training information, we have deliberately limited what analytics can see. Kinform is configured so that:

• No session recordings. We do not record or replay your screen. A recording of this app would be a recording of someone’s health information.
• No text from the page. The words on screen — client names, notes, messages, exercise names, what you asked the assistant — are removed before anything is sent.
• No identifying web addresses. Page addresses are stripped of names and ID numbers first, so we see that someone opened a client page, not which client.
• No IP address. We tell PostHog not to store it, so we are not building a record of where you are.
• No health or coaching data. We record that a session was logged and roughly how big it was — never the notes, the weights, the exercises, or how it felt.

Analytics events are linked to your account ID and whether you are a trainer or a client. They are not linked to your name or email address, and we do not sell this information or use it for advertising.

If your browser sends a “Do Not Track” signal, Kinform does not collect any analytics about you and does not ask.

Cookies and similar technology

Kinform uses cookies and browser storage for two things: keeping you signed in, and analytics. The sign-in ones are essential — the app cannot work without them, so we don't ask about those.

The analytics one stores a random ID so we can tell whether the same person came back, without knowing who they are. It is not essential, so we ask before storing it. If you say no, nothing is stored and nothing is collected.

To change your answer later: trainers in Settings → Email, clients in Settings. Turning it off removes what was stored. You can also clear cookies in your browser at any time, or turn on “Do Not Track”, which switches analytics off and stops us asking.

Who can see client data

Client information is shared with the trainer who invited them, and with KinForm only as needed to operate the service. Trainers are responsible for how they use information about their clients.

Where it lives

We store data using trusted cloud providers, including Firebase (Auth, Firestore, Storage), Resend (email), Vercel (hosting), PostHog (analytics), Sentry (error reports), and Anthropic (the AI features). Analytics is sent to PostHog’s European servers. Other processing may occur in the United States or other regions where those providers operate.

How long we keep it

We keep account and coaching data while your account is active. If you ask us to delete an account, we remove or anonymize associated personal data within a reasonable time, except where we must retain records for legal or security reasons.

Your choices

• Update profile details in the app
• Clients can delete their account from inside the app: Profile → Settings → Delete my account
• Request a copy of your data, or deletion of a coach account, by emailing hello@kinform.app
• Unsubscribe from optional email using the link in it, or from the app: trainers in Settings → Email
• Turn on “Do Not Track” in your browser to stop analytics being collected
• Clients who want changes to coaching data should start with their trainer

Kids

KinForm is built for adult trainers and their clients. We do not knowingly collect personal information from children under 13. If you think a child has signed up, tell us and we will remove the account.

Changes

We may update this policy as the product grows. We will change the “Last updated” date above and, when changes are meaningful, share a notice in the product or by email when we can.