Legal
Privacy Policy
This policy explains what Krovu collects, why, and what you can do about it. It applies to the iPhone app, the Apple Watch app, and krovu.app.
1 · What we collect
We collect three categories of data, and we collect nothing outside them.
| Category | Examples | Basis |
|---|---|---|
| Training data | Sets, reps, weights, routines, timers, body measurements | Contract |
| Account data | Email, display name, handle, subscription status | Contract |
| Diagnostics | Crash traces, anonymised performance timings | Legitimate interest |
Within training data, the following are optional and off unless you turn them on:
- Progress photographs, which are stored encrypted and never used for model training.
- Meal photographs submitted for macro estimation.
- Processed on-device where the model fits;
- sent to our inference provider only when you enable cloud analysis;
- deleted from the provider within 24 hours in all cases.
- Form-check video, which never leaves the device by default.
- Health metrics read from Apple Health, which are read-only and never written back.
2 · How we use it
Training data is used to render your history, records, heatmap and analytics; to synchronise between your devices; and, if you subscribe to Coach, to generate your plans. We do not sell data, we do not share it with advertisers, and we do not build advertising profiles. Krovu carries no third-party analytics SDK.
Aggregate, de-identified statistics — for example the median number of sets per session across all users — may be used to improve defaults and to write about the product. These cannot be traced to an individual.
3 · On-device processing
Krovu prefers the device. Pose estimation for form check, the heatmap computation, personal-record detection and volume aggregation all run locally. This is a deliberate architectural choice, not a marketing position: it means the feature works with no signal, and it means we do not hold the data.
Where a feature genuinely requires a server — AI plan generation, macro estimation from a photograph — it is labelled in the interface at the point of use, and it is opt-in.
4 · Sharing and disclosure
We share data with a small number of processors, each bound by contract:
- Apple — subscription state and receipt validation.
- Our hosting provider — encrypted storage and synchronisation.
- Our inference provider — only for the opt-in cloud features above.
5 · Retention
Training and account data are retained while your account exists. Deleting your account erases them within 30 days, including from backups. Diagnostics are retained 90 days. Meal and form-check media are retained 24 hours and 30 days respectively.
6 · Your rights
You may export everything Krovu holds about you as JSON or CSV at any time, without contacting us and without a paid tier. Open Settings in the iPhone app and choose the account screen; the same screen deletes your account.
Depending on where you live you may also have rights of rectification, restriction and objection. Write to us and we will action them within 30 days.
7 · Contact
Questions go to privacy@krovu.app. If you are in the EU or UK and are unsatisfied with our response, you may complain to your supervisory authority.