Privacy Policy
Welcome to Kymatiq. We value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile applications (iOS, Android) and web services.
1. Information We Collect
We collect information that you provide directly to us, such as your email address when creating an account. We also collect:
- Indoor workout telemetry — distance, speed, power (watts), stroke rate, heart rate — from connected Bluetooth ergometers.
- GPS location data — precise GPS coordinates, speed, and route during outdoor kayak workouts. Location is collected only while an outdoor workout session is actively running and is never tracked in the background outside of a session.
- Device motion data — gyroscope and accelerometer readings used exclusively to measure boat roll and pitch (stability) during outdoor sessions. Raw sensor data is processed on-device and not transmitted.
- Camera — only if you choose to record paddling footage for AI stroke analysis. Photos and videos are never shared with third parties.
- App Usage & Analytics Data — we collect anonymous, non-personally identifiable usage data (such as page views, button taps, and crash reports) to help us understand how features are used and to improve the app's stability. We do not collect Advertising Identifiers (IDFA/AAID) and we do not track you across other companies' apps and websites.
2. How We Use Your Information
We process your data to provide, maintain, and enhance our services, including: analyzing stroke metrics and GPS routes, syncing your workout logs across devices, delivering personal performance insights, and understanding feature adoption and fixing crashes to improve the overall user experience.
We do not sell, rent, or share your location, personal data, or usage behavior with advertisers or third-party data brokers.
3. Third-Party Integrations (Strava & Intervals.icu)
Kymatiq allows athletes to optionally connect their third-party fitness platforms (Strava via OAuth 2.0 and Intervals.icu via Personal API Key or OAuth 2.0) to streamline their training workflow. Connection is completely optional and initiated solely by you.
- Outbound Activity Uploads: When enabled, finishing an indoor or outdoor workout generates a standard .FIT telemetry file (including distance, duration, speed, power in watts, stroke cadence, split intervals, heart rate, and GPS route) and securely uploads it directly to your linked Strava and/or Intervals.icu accounts.
- Inbound Activity & Calendar Sync: When authorized, Kymatiq can import your own outdoor activities (from Garmin Connect or other GPS devices synced to Strava or Intervals.icu) and structured "Workout of the Day" calendar sessions into your personal Kymatiq training history.
- Single-Athlete Privacy: Your synced third-party data is displayed strictly to you inside your authenticated account on your device. It is never shared with other users, advertisers, or third-party data brokers.
- Zero AI / Model Training Usage: In strict compliance with the Strava API Agreement and Developer Policy (Section 5.3), Strava-sourced data and its derivatives are never ingested, grounded, or used to train, fine-tune, or prompt artificial intelligence (AI) or machine learning models (including CaldeirAI).
- Disconnection & Data Deletion: You can disconnect Strava or Intervals.icu at any time in the app profile settings. Disconnecting immediately deauthorizes access, wipes stored tokens and API keys from your device's hardware-backed secure storage (iOS Keychain / Android Keystore), and permanently deletes locally cached imported activity records from your device. Your workouts already uploaded to Strava or Intervals.icu remain safe and untouched in your respective accounts.
4. Data Storage & Security
We utilize Cloud Firebase services (Google Cloud Infrastructure) to encrypt and store your data securely in transit and at rest. GPS route data and workout sessions are stored in your private Firestore account, accessible only to you. Motion sensor data is processed entirely on-device and never stored in the cloud.
5. Your Rights & Data Deletion
You maintain full ownership of your data. You can delete your account and clear all stored workout telemetry, GPS routes, and personal data at any time directly within the app settings or via our account deletion page at /delete-account.
6. Contact Support
If you have any questions or feedback regarding this Privacy Policy, please contact our support team at: support@kymatiq.com