Privacy Policy

1. Introduction and Scope

Kyool LLC ("Kyool," "we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to all of the following, which we refer to together as the Services:

• the Kyool marketing website at kyool.app
• the Kyool mobile app for iOS and Android, including the Kyool Apple Watch app
• the Kyool backend services that support the website and the app

Kyool is a fitness accountability product built around small private groups called FABs (Fitness Accountability Buddies). Kyool provides Services to users globally, including users in the United States, European Union, United Kingdom, and other international regions.

2. Data Controller

Kyool LLC is the entity responsible for the personal information described in this Privacy Policy. For purposes of applicable data protection laws, Kyool LLC is the data controller for personal information collected through the Kyool website and the Kyool mobile app.

Kyool LLC is a limited liability company that operates from Virginia, United States.

Privacy contact:
privacy@kyool.app

General support:
support@kyool.app

3. Information We Collect

The information we collect depends on which parts of the Services you use and which device permissions you grant.

3.1 Account and Profile Information

When you create a Kyool account in the mobile app, we collect and store:

• your name
• your email address
• a Kyool user ID that identifies your account
• your profile photo or avatar, if you add one
• optional profile details you choose to provide during onboarding or in settings, such as a display name, height, weight, or unit and timezone preferences
• your account creation date and account settings

Optional profile details can be skipped, and can be changed or cleared later in the app.

3.2 Authentication Information

Kyool uses Firebase Authentication to sign you in. You create an account and sign in using one of:

• Sign in with Apple
• Sign in with Google

When you use Sign in with Apple or Sign in with Google, the provider confirms your identity to us and gives us a stable account identifier along with the name and email address you agree to share. If you use Apple’s Hide My Email option, we receive Apple’s private relay address instead of your personal address, and that is what we store.

Kyool does not receive or store your Apple or Google password. Firebase Authentication issues and manages the sign-in tokens that keep you signed in.

3.3 Health and Fitness Data

With your explicit permission, the Kyool app reads health and fitness data from your device:

• On iOS, from Apple Health (HealthKit): workouts, steps, walking and running distance, active energy burned, and heart rate associated with your workouts.
• On Android, from Health Connect: exercise sessions, steps, distance, active calories burned, heart rate, floors climbed, and elevation gained.
• Motion and step data from your device’s motion sensors, used to count steps during a workout.

If you use the Kyool Apple Watch app, workouts you record with it are written back to Apple Health so those sessions appear alongside the rest of your activity.

Granting health permissions is optional. If you decline, Kyool still works, but features that depend on your activity data will be limited. You can change or revoke these permissions at any time in Apple Health settings or Health Connect settings.

3.4 Location and Route Data

With your permission, the Kyool app collects precise location data while you are recording an outdoor activity, such as a run, walk, or ride. This is used to measure your route, distance, pace, and elevation for that activity.

Location is collected only while an activity recording is running, including when the recording continues in the background. Kyool does not track your location when you are not recording an activity.

3.5 Photos and Media

With your permission, Kyool can access your camera and photo library so you can:

• set or change your profile photo
• attach a photo when you log a completed activity
• share images with your FAB group
• save images from Kyool to your photo library

Kyool accesses only the photos you select. Photos you upload are stored in Kyool’s cloud storage under your account and are visible to the members of the FAB group you shared them with.

3.6 Fitness and Activity Records

Kyool stores the activity and fitness records that make the product work, including:

• workouts, routines, exercises, sets, reps, and rest timers you log
• activity completions, streaks, goals, and progress history
• summary metrics such as duration, distance, pace, active energy, steps, and heart-rate summaries
• hydration and other activity entries you choose to record

3.7 Group Activity and User-Generated Content

Kyool is a group product, so some information is created in order to be shared with the people in your group. This includes:

• FAB membership — which groups you belong to, your role in them, and your invitations
• Group activity — group missions and goals, shared streaks, and your completion status
• Sparks — the encouragement nudges you send and receive, including any custom Spark text you write
• Completion content — notes, captions, photos, and results you attach to a completed activity
• Other user-generated content — profile content, group names and descriptions, journal entries, and messages or feedback you submit

3.8 Subscription and Purchase Information

If you buy a Kyool Plus subscription, the purchase is processed by the Apple App Store or Google Play. Kyool uses RevenueCat to manage entitlements and receive purchase status.

We receive and store subscription and purchase-status information such as your plan, entitlement status, renewal and expiry state, trial status, and store transaction identifiers.

Kyool never receives or stores your credit card number or payment credentials. Payment is handled entirely by Apple or Google.

3.9 Device Identifiers and Technical Data

To operate the app we collect and store:

• a device identifier and app-installation identifier
• push notification tokens for each device you sign in on
• device platform, operating system version, and app version
• general technical information such as IP address and language or region settings

3.10 Analytics, Crash, and Performance Data

Kyool uses Firebase Analytics, Firebase Crashlytics, and Firebase Performance Monitoring to understand how the app is used, to diagnose crashes, and to find performance problems.

This includes:

• product interaction events, such as which screens are opened and which features are used
• crash reports, error logs, and diagnostic stack traces
• performance data such as app start time, screen rendering, and network request timing

Analytics events are filtered before they are sent so that identifying content, such as email addresses and free-text content, is not included. Kyool does not use the Apple advertising identifier (IDFA), does not present an App Tracking Transparency prompt, and does not track you across other companies’ apps or websites.

3.11 Connected Third-Party Accounts

If you choose to connect a third-party fitness account, such as Fitbit, Kyool receives the activity data that account shares with us, which may include activity sessions, heart rate, and sleep data. Connecting an account is optional, and you can disconnect it at any time in the app under Connected Devices. Disconnecting stops future syncing; activities already imported remain in your Kyool history until you delete them or delete your account.

3.12 Website Information

On the Kyool website, you may voluntarily provide personal information when you join the waitlist, request early access, subscribe to product updates, submit a feature idea, or contact us. This information may include your name, email address, and message content.

When you visit the website, certain information is collected automatically, including IP address, browser type, device type, operating system, pages visited, referring URL, and time spent on pages.

4. How We Use Information

We use the information described above for the following purposes:

• To provide the Services — create and maintain your account, sign you in, and keep your data available across your devices
• To power core features — record activities, calculate streaks and progress, run FAB groups, and deliver Sparks
• To show your results — display your workouts, steps, distance, active energy, heart-rate summaries, routes, and trends back to you
• To enable group accountability — share the activity and content you post with the members of the FAB groups you join
• To manage subscriptions — verify your Kyool Plus entitlement and unlock paid features
• To send notifications — deliver reminders, group activity alerts, and Sparks you have chosen to receive
• To keep the Services safe — investigate reports, enforce our Terms of Service, prevent abuse and fraud, and secure our systems
• To improve the Services — analyze aggregate usage, diagnose crashes, and improve performance and reliability
• To communicate with you — respond to support requests and send service, account, and product messages
• To meet legal obligations — comply with applicable law and respond to lawful requests

Kyool does not sell personal information, and does not share personal information with data brokers or advertising networks.

6. Location Data

Kyool collects precise location and route data only while you are recording an outdoor activity, and only after you have granted location permission.

We use location data to:

• measure your route, distance, pace, and elevation during a recorded activity
• show your route map and activity summary after the recording ends
• include distance and pace in the activity results you choose to share with your FAB group

Recording continues in the background while an activity is in progress, so a run does not stop measuring when your screen locks. Location collection stops when the recording ends.

Kyool does not use location data for advertising, and does not sell location data.

You can decline location permission or revoke it at any time in your device settings. Without it, outdoor route and GPS distance features will not be available, and you can still log activities manually or through connected health data.

7. User-Generated Content and Group Visibility

Kyool is built around small groups, so some of what you create is shared by design.

• Your name, profile photo, and completion status are visible to members of the FAB groups you join.
• Photos, notes, and captions you attach to a completed activity are visible to the members of the group you share them with.
• Sparks you send, including custom Spark text, are visible to the recipient and may be visible to the group.
• Group missions, goals, and shared streaks are visible to all members of that group.

Please do not upload content you are not comfortable sharing with your group. You are responsible for the content you post, and it must comply with our Terms of Service.

Kyool provides tools to report content or another member and to block another member. When you submit a report, we store the report, the reason you selected, any details you add, a copy of the reported content as you saw it, and the identifiers of the reporter and the reported account, so that the report remains actionable. We use this information to review the report and to enforce our Terms. Blocks are stored on your account so they persist across devices and reinstalls.

8. Notifications

With your permission, Kyool sends push notifications for things like activity reminders, FAB deadlines, group updates, and Sparks from your group. To deliver them we store a push notification token for each device you are signed in on, along with the device platform and app version.

Push notifications are delivered through Firebase Cloud Messaging, which uses the Apple Push Notification service on iOS and Google’s push service on Android.

You can turn notifications off at any time in your device settings, and manage notification preferences inside the app. Kyool may also send service and account emails, such as security and account-related messages; product and marketing emails include an unsubscribe link.

9. Service Providers

Kyool works with a small set of service providers that process information on our behalf and only as needed to provide their service to us. These are:

• Google Cloud and Firebase (Google LLC) — our core infrastructure. This includes Cloud Run for our backend services, Cloud Firestore for our database, Firebase Storage / Cloud Storage for photos and media, Cloud Tasks for background jobs, and Firebase Hosting for the website.
• Firebase Authentication (Google LLC) — account creation and sign-in, including Sign in with Apple and Sign in with Google.
• Firebase Cloud Messaging (Google LLC) — push notification delivery.
• Firebase Analytics, Crashlytics, and Performance Monitoring (Google LLC) — product analytics, crash reporting, and performance monitoring.
• Google Analytics (Google LLC) — website traffic analytics on kyool.app.
• RevenueCat, Inc. — subscription and entitlement management for Kyool Plus.
• Apple Inc. — Sign in with Apple, App Store purchases and subscriptions, HealthKit on your device, and push notification delivery on iOS.
• Google (Google Play) — Sign in with Google, Google Play purchases and subscriptions, and Health Connect on Android devices.
• Featurebase — the in-app feedback and feature-request portal. When you open it, we pass a signed token containing your account identifier so your submissions are attributed to you.
• Loops — email delivery for product, lifecycle, and account emails.
• Sanity — the content management system that delivers help articles, changelog, and blog content into the website and the app.
• Fitbit (Google LLC) — only if you choose to connect a Fitbit account.

These providers are required to protect the information they process for us and may not use it for their own independent purposes. This list may change as our infrastructure evolves; we will update this page when it does.

10. Data Sharing

Kyool does not sell or rent personal information, and does not share it with data brokers or advertising networks.

We share information only in these situations:

• With members of your FAB groups — the profile details, activity results, and content you post to a group, as described in Section 7.
• With service providers — the providers listed in Section 9, acting on our instructions.
• With your direction — when you connect a third-party account or use a share feature to send content outside Kyool.
• For legal reasons — when we believe in good faith that disclosure is required by law, or is necessary to respond to a lawful request, enforce our Terms, investigate a report, or protect the rights, safety, or property of Kyool, our users, or the public.
• In a business transfer — if Kyool is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify users of any such change and of any change in how their information is handled.

Health, fitness, and location data are never shared for advertising or marketing purposes.

11. Legal Basis for Processing (GDPR)

For users located in the European Economic Area (EEA), United Kingdom, or Switzerland, Kyool processes personal data on the following legal bases:

• Performance of a contract — to provide the account, group, and activity features you sign up for.
• Consent — for health and fitness data, precise location data, photo library access, push notifications, non-essential cookies, and marketing emails. Health data is treated as a special category of personal data and is processed on the basis of your explicit consent. You may withdraw consent at any time.
• Legitimate interests — to keep the Services secure, prevent abuse, investigate reports, and improve reliability and performance, balanced against your rights.
• Legal obligations — where processing is required to comply with applicable law.

12. Data Retention

We retain personal information for as long as your account is active, or as long as needed to provide the Services.

• Account, profile, activity, and group data is retained while your account exists, so your history and streaks remain available to you.
• Photos and media are retained until you delete them or delete your account.
• Health, fitness, and route data is retained as part of your activity history until you delete the activity or delete your account.
• Analytics, crash, and performance data is retained according to the retention settings of the relevant Firebase and Google Analytics products.
• Moderation records, including content reports and blocks, are retained so we can act on repeat abuse and meet legal obligations.
• Security and audit logs are retained as an operational and security record, referenced by account identifier.
• Website waitlist and contact submissions are retained until you ask us to delete them or they are no longer needed.

Where information must be kept to comply with legal, tax, accounting, or dispute-resolution obligations, we retain it for as long as those obligations require and then delete it.

13. Account and Data Deletion

You can delete your Kyool account and its associated data at any time.

From inside the app

Go to Settings > Profile & Personal Details > Delete Account, and confirm. No email or support request is required.

From the website

You can also request deletion through our Delete Account page, or by emailing privacy@kyool.app.

What deletion removes

• your user profile and account settings
• your workouts, routines, activity history, completions, streaks, and goals
• your health, fitness, and route data stored by Kyool
• your profile photos and completion photos in Kyool cloud storage
• Sparks and friend or connection requests associated with your account
• your sign-in credential, so the account can no longer be used to sign in

Your FAB memberships are ended in the same way as if you had left each group manually. Deleting your account does not delete the groups themselves or content posted by other members.

What is not removed by deletion

• Your subscription. Deleting your Kyool account does not cancel an active App Store or Google Play subscription. You must cancel it in your Apple or Google account settings, and purchase records held by Apple, Google, and RevenueCat are their records, not ours.
• Security and audit logs, retained as an operational and security record.
• Moderation records relating to reports you filed or reports filed about you.
• Data held by other members, such as a group history that references activity you completed, and any information other users have separately saved or exported.
• Backups and logs, which are purged on their ordinary rotation cycle.

Deleting the app from your device does not delete your account. Kyool never deletes data from Apple Health or Health Connect — that data belongs to you and remains on your device unless you remove it yourself.

14. Security

We take reasonable technical and organizational measures to protect your information, including:

• encryption in transit using industry-standard TLS for all network communication
• encryption at rest for data stored in Google Cloud and Firebase
• authenticated, per-user access controls so members can only reach data they are entitled to
• access tokens for connected third-party accounts stored in encrypted form
• restricted internal access to production systems and secrets
• logging and monitoring for security-relevant events

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us at support@kyool.app.

15. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• access the personal information we hold about you
• correct inaccurate or incomplete information
• delete your personal information
• restrict or object to certain processing
• withdraw consent where processing is based on consent
• receive a copy of your data in a portable format
• not be discriminated against for exercising these rights

Many of these can be exercised directly in the app: you can edit your profile, delete individual activities and photos, revoke device permissions, and delete your entire account.

For anything else, contact privacy@kyool.app. We will respond in accordance with applicable data protection laws. If you are in the EEA or UK and believe your rights have been violated, you also have the right to lodge a complaint with your local data protection authority.

16. Children and Age Requirements

Kyool is not intended for children under the age of 13, and you must be at least 13 years old to create a Kyool account or use the Kyool website. In jurisdictions where a higher minimum age applies to the processing of personal data, you must meet that higher age, or have the consent of a parent or legal guardian.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information and the associated account promptly.

If you believe a child has provided us with personal information, contact privacy@kyool.app.

17. International Users and Data Transfers

Kyool operates globally. Information we collect may be transferred to and processed in the United States or other countries where we or our service providers operate.

These countries may have data protection laws that differ from those in your country. Where required, Kyool relies on appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism offered by our service providers.

By using the Services, you understand that your information may be processed in these locations.

18. Cookies and Website Analytics

The Kyool website uses cookies and similar technologies to analyze traffic, improve performance, and understand visitor behavior. Some cookies may be placed by analytics providers or hosting platforms.

For visitors located in the European Union or United Kingdom, non-essential cookies are only placed after consent through our cookie banner. You can control or disable cookies through your browser settings, or through Cookie Settings in the site footer.

For more information, please see our Cookie Policy.

The Kyool mobile app does not use advertising cookies or cross-app tracking technologies.

19. Do Not Track Signals

Some web browsers include a Do Not Track (DNT) feature. There is currently no universal standard for responding to these signals, and Kyool does not currently respond to Do Not Track browser signals.

20. Third-Party Links

The website and the app may contain links to third-party websites or services. Kyool is not responsible for the privacy practices or content of those external services. We encourage you to review their privacy policies.

21. Changes to This Privacy Policy

Kyool may update this Privacy Policy from time to time.

When updates occur, the revised version will be posted on this page with an updated “Last Updated” date. If a change materially affects how we handle your personal information, we will provide a more prominent notice, such as an in-app notice or an email, before the change takes effect where required by law.

22. Contact Information

If you have questions about this Privacy Policy, your personal information, or the Kyool app, you may contact us:

Kyool LLC
Virginia, United States
Privacy: privacy@kyool.app
Support: support@kyool.app
Support page: https://kyool.app/support
Website: https://kyool.app

We aim to respond to privacy requests within 30 days.