Privacy Policy

Summary

KUVVET is local-first. Workout plans, logs, body-weight entries and app preferences stay on your device unless you explicitly connect the app to a compatible server or enable a Pro cloud service. Core workout logging does not require an account.

Data we process

• Local fitness data you enter, stored on your device.
• If you create or connect an account: profile name, passkey public credential, synced fitness data and session security records.
• If you enable notifications: push endpoint and cryptographic delivery keys.
• If you subscribe: Google Play product and lifecycle data. The purchase token is sent over HTTPS for verification and retained by the KUVVET service using authenticated encryption, together with a one-way ownership hash.
• If free-tier advertising is enabled and your privacy choice permits an ad request: IP address, app interactions, diagnostic information, and device or account identifiers (which can include the Android advertising ID) processed by Google Mobile Ads.
• Limited security audit records. The standard retention window is 90 days; network information is recorded only when the server operator enables that option.

Why we process it

We use this data to provide workouts, optional synchronization and backup, authenticate accounts, deliver requested notifications, verify purchases, prevent fraud and keep the service secure. We do not sell personal information.

Services and sharing

Google Play processes purchases under its own privacy terms. A server you choose for synchronization processes the data you send to that server. KUVVET 1.1 includes Google Mobile Ads and Google's User Messaging Platform. For eligible free users, one restrained banner may be requested on Library, Plan, or Stats only after production configuration and the applicable privacy choice permit it. Home, active Workout, History, Settings, and Pro do not request advertising; verified Pro access suppresses all ads. Google may use ad data for advertising, measurement, diagnostics, and fraud prevention under its own privacy terms.

Where required, the in-app privacy message lets you accept, reject, or revisit advertising choices from Settings. Non-personalized advertising can still use local or mobile identifiers for frequency limits and aggregated reporting. Denied or unresolved consent produces no KUVVET ad request and does not limit workout features.

Control, export and deletion

You can export or erase local workout data from Settings. Managed cloud is opt-in: before its first upload, KUVVET identifies the plans, workout history, body-weight entries and settings that leave the device. You can export or delete the managed remote copy from Settings, even when local training remains offline. Advanced insights are calculated locally from completed workouts. Signed-in users can permanently delete their profile and synced data from Settings. See the account deletion guide for the exact steps. Google may retain purchase records under its own legal obligations.

Contact

Privacy and data-rights requests can be sent through the publisher's contact page. Include “KUVVET privacy” in your message and do not include a purchase token or password.