Privacy Policy

1. Overview

Kiimra is a mobile application (iOS and Android) that connects you with an AI trainer powered by Anthropic Claude, tools to track your workouts, and nutrition features. This policy explains what data we collect, how we process it, and what rights you have.

2. Data We Collect

Kiimra collects the following categories of data:

• Authentication data: email, password (if you sign up with email), or data from your Google or Apple ID account (if you use social sign-in)
• User profile: name, training goal, experience level, injuries, chronic conditions, dietary preferences, equipment, location, sleep quality, stress level
• Chat history: all messages exchanged with the AI trainer and their responses
• Photos: body photos (for physique analysis) and meal photos (for nutrition analysis)
• Plans and workouts: generated training plans, logged exercises, completion times, difficulty ratings
• Analytics: app usage data, errors, crashes (via Firebase Crashlytics and Firebase Analytics)
• Language and settings: preferred app language, theme (light/dark)

3. Where We Store Your Data

All data is stored on Google Firebase (Firestore, Cloud Storage). Firebase servers are located in the European Union (region europe-west1). Data is encrypted in transit (TLS) and at rest.

4. Processing by AI (Anthropic Claude)

Your text messages and photos are sent to the Anthropic Claude API for:

• Generating trainer responses
• Analyzing photos (physique, meals)
• Creating training plans
• Providing nutrition advice

Anthropic may process data according to their privacy policy. Messages are processed by the AI model but are not used to train the model without your consent.

5. Google and Apple Sign-In

If you sign in using Google or Apple ID, we receive access to your email address. We do not have access to your password. Google and Apple have their own privacy policies.

6. Data Security

We implement standard security measures:

• TLS encryption for data transmission
• Firestore security rules limiting access to your account only
• No storage of passwords in plain text
• Firebase Authentication handles authentication

However, no method of transmission over the internet is completely secure. By using Kiimra, you acknowledge this risk.

7. Your Rights

You have the right to:

• Access: request a copy of your data
• Correction: correct inaccurate data
• Deletion: request deletion of your data (right to be forgotten)
• Portability: receive your data in a structured format
• Objection: object to processing

To exercise these rights, contact us at the address provided below.

8. Data Retention

We retain your data as long as you have an active account. If you delete your account, most data will be deleted within 30 days. Some data may be retained longer for legal or operational reasons (e.g., error logs).

9. Policy Changes

We may update this policy. We will notify you of significant changes via in-app notification or email.

10. GDPR and Compliance

If you are in the European Union, your data is processed in accordance with GDPR. You have additional rights as outlined in section 7.

11. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

Email: privacy@kiimra.com
Address: Kiimra, Poland

12. Health Disclaimer

Kiimra does not replace the advice of a doctor, clinical dietitian, or healthcare professional. If you have serious health concerns, consult with a professional. By using Kiimra, you acknowledge this limitation.