Controller: krloz · hi@krloz.co
This is a translation, provided so you can read the policy in your own language. The Spanish version is the one that governs, and it is the one that applies in case of any difference.
This document says what data we keep, where it is, and who it's shared with. It's written to be understood, not to cover us.
What we keep
Your account. Name, email, language, whether you use kilos or pounds. They come from your identity provider when you sign in.
Your training. The sessions you do and the ones prescribed to you: exercises, sets, reps, weight, rest, how hard each set felt, and when.
Your body, if you record it. Weight, height, date of birth, sex, tape measurements, body fat percentage. And any limitations or injuries you write down. This is health information and we treat it as such.
Where you train. The places you declare and what equipment each one has.
What you talk about with your coach inside the app.
Your connections: who you coach or who coaches you, which gym you belong to, who your training partners are.
What you report to us. If you use the feedback button, we keep your message, which screen you were on, the app version and the phone model — and a screenshot, only if you leave it in. The screenshot is shown before sending and can be removed.
How you use the app. Which screens you open and when, and what you chose when you started. It's tied to your account, stays on our server and carries no advertising or device identifiers; no third party receives it. It tells us where the app is misunderstood. It's in your data export and is deleted with your account.
What we do NOT keep
Photos, video or audio. When you use the camera so the app can recognise a gym's equipment or read a body composition report, the image is processed and discarded. What remains is the result: the equipment list, or the figures you confirm. Never the image.
Your location. When you ask for "gyms near me", your location is used to sort that list and then forgotten. It isn't stored and doesn't go anywhere else. (A gym's coordinates are stored: whoever runs it puts them there, and they're a business address.)
Your address. We never ask a person for it. Only the district, and only if you want to appear in the search.
Health data, and Apple Health
On the watch, during a workout, we read your heart rate and active energy from Apple Health, to adapt your rest periods. When you finish, we save the workout to Apple Health so it stays in your history. On the phone too: when you finish a session we ask your permission —once— to save it to Apple Health, so it counts toward your rings. If you say no, nothing changes inside Sprots. What Sprots itself saved to Health is not brought back when you import your history: it's already here.
Data coming from Apple Health is not used for advertising and is not sold, and it doesn't leave your phone beyond the workout summary you're already recording.
Permissions, one by one
Nothing is shared automatically. Each of these is accepted separately and withdrawn whenever you want from My account:
- That your coach sees how you train.
- That the gym sees it — it's a third party distinct from your coach, which is why it's asked separately.
- Your heart rate data.
- Your body measurements.
Withdrawing a permission cuts off access from that moment on.
Where it is
On Google Cloud. The service runs in Santiago, Chile, and the database is in the United States (us-central1). We tell you because you have a right to know: it was a cost decision and it's written down to be revisited.
Who we share it with
- Google / Firebase, so you can sign in with your account.
- Google Cloud, which hosts the service.
- The people you authorise: your coach, your gym, your training partners.
- An image recognition provider, only at the moment you use the camera. It receives the photo and returns what it sees. We don't keep it; the provider may retain it for a limited time under its own terms.
We don't sell your data. We don't advertise with it. We don't use it to train models.
What you can do
From My account, without writing to anyone:
- See which permissions you granted and when.
- Download everything of yours, in one file.
- Withdraw any permission.
- Delete your account. Your personal data is erased. What you shared with a coach stays anonymised in their work record, because that record is also theirs.
If you'd rather write to us: hi@krloz.co.
How long
For as long as you have an account. When you delete it, your personal data is erased. Feedback reports and their screenshots are deleted when they're resolved.
Minors
Sprots is for people aged 16 or over.
Changes
If this changes, we show it to you in the app and you have to accept it before continuing. The version and the date are recorded.