Privacy Policy

Scope and the roles of Knetic and trainers

This Policy applies to personal information processed through the Services and direct communications with Knetic. It does not govern an independent trainer’s own website, coaching practice, payment collection, or privacy practices.

Knetic controls personal information we use for our own account administration, website, billing, security, support, and business operations. A trainer or training business controls the client relationship: it decides what client information to collect, what content to provide, who in its workspace may access information, and how long to retain it. For client information in a trainer workspace, Knetic processes information to provide the Services on the trainer’s behalf. Clients should also review and contact their trainer about that trainer’s privacy practices.

Account, contact, and business information

When you create an account or contact us, we collect information such as your name, email address, account credentials, role, workspace or business name, profile information, support communications, and feedback. Trainers may provide the names and email addresses of clients to create profiles and issue invitations. We also collect subscription and billing contact information when billing is enabled.

Workspace, coaching, and wellness information

The Services allow trainers and authorized staff to create and manage client profiles, workout plans, schedules, goals, exercise history, progress, adherence, messages, and related coaching content. Clients may provide or generate information through those features, including workout completion events and messages to their trainer.

Depending on a trainer’s use of Knetic, workspace information may include fitness, wellness, nutrition, injury, body measurement, progress, or similar information. That information can be sensitive under some laws. Trainers are responsible for having an appropriate basis to enter and use client information; users should not enter information that is unnecessary for the Services or that they are not authorized to share.

Branding files and content

A trainer may add workspace branding, including a logo or brand image. We process that content to store and display the trainer’s branded workspace. We also process materials you submit in messages, plans, and support communications. Knetic does not currently provide social-network, wearable, health-platform, precise-location, or advertising-network integrations through the Services.

Technical, usage, and locally stored information

When you use the Services, we collect limited technical and usage information, including IP address, browser and device type, operating system, authentication and security events, pages and features used, timestamps, and diagnostic information. We use Firebase Analytics for product analytics, except that invitation routes are excluded to help avoid capturing invitation codes in page-view analytics or referrer-derived telemetry.

We use cookies, local storage, IndexedDB, and similar browser storage for sign-in and security, feature preferences, and product functionality. If a client chooses to download a workout for offline use, the plan and locally queued workout-completion events are stored on that device until synchronized or cleared. Clearing browser or app storage can remove locally stored information and may limit some functionality.

Payment information

If paid subscriptions are enabled, Stripe processes payment-card and payment-account information. Knetic receives limited payment-related records such as customer and subscription identifiers, billing contact information, payment status, and transaction records; we do not store full payment-card numbers. Stripe’s own privacy policy and terms govern its processing of payment information.

How we use information

We use personal information to create and administer accounts; authenticate users; provide, personalize, and maintain trainer workspaces; deliver plans, messages, progress, and offline-workout features; process subscriptions; respond to support requests; protect users and the Services; detect, investigate, and prevent fraud or misuse; comply with law; and maintain, troubleshoot, and improve the Services.

We may create de-identified or aggregated information that does not reasonably identify an individual and use it for lawful business purposes, such as product improvement and analytics. We will not attempt to re-identify that information except as permitted by law.

AI-assisted features

Some trainer features may use an optional AI service to help draft or analyze coaching-related content. When a trainer chooses to use an enabled AI feature, the request and the relevant context required for that feature—such as plan, exercise, or conversation context—are sent through Knetic’s backend to the configured AI provider. Knetic may use a Cloud Run service and, depending on the configured provider, an AI provider such as OpenAI. The feature is available only to authorized trainers and is not a medical service.

AI output can be incomplete, inaccurate, or inappropriate for a particular person. Trainers must independently review it before using or assigning it and should avoid submitting unnecessary sensitive information. The precise data sent depends on the feature and the trainer’s request; we do not use AI output as a substitute for professional, medical, or emergency judgment.

How information is disclosed

We disclose workspace information to the trainer, the client, and authorized staff in the relevant workspace as required by the feature and the workspace’s access controls. For example, a trainer may access a client’s plans, progress, messages, and AI-assisted analysis made available to that trainer. Trainers are responsible for who they authorize and for their disclosures outside Knetic.

We disclose information to service providers that operate the Services for us, including Google Firebase and Google Cloud for authentication, databases, hosting, analytics, server-side functions, and file storage; Stripe for enabled billing; and configured AI providers for enabled AI features. These providers may process information only as needed to provide their services to us or as otherwise permitted by their agreements.

We may disclose information where we reasonably believe it is necessary to comply with law or lawful process; enforce our agreements; investigate or prevent fraud, security incidents, or abuse; protect rights, property, or safety; or evaluate or complete a financing, merger, acquisition, reorganization, or sale of assets.

Sale, sharing, and targeted advertising

Knetic does not sell personal information for money. We do not disclose personal information for cross-context behavioral advertising or use workspace fitness, wellness, or health-related information for advertising.

Retention and deletion

We retain personal information for as long as reasonably necessary to provide the Services, meet the purposes described in this Policy, maintain security, resolve disputes, and comply with legal, accounting, or reporting obligations. Retention varies based on the type of information, the trainer’s workspace settings and instructions, and applicable law. We may retain de-identified or aggregated information.

Deleting a client from a trainer workspace or closing an account may not immediately remove all information from backups, security logs, payment records, or information we must retain for legal reasons. We will delete or de-identify information when it is no longer reasonably needed, subject to those exceptions.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls intended to limit workspace information to authorized users. No internet service, transmission, or storage system is completely secure. You must use a strong password, keep credentials confidential, secure your device, and promptly report suspected unauthorized access to [email protected].

Your choices and privacy requests

You may request access to, correction of, deletion of, or a copy of personal information we control by emailing [email protected]. We may need to verify your request, and may retain information where required or permitted by law. We will not discriminate against you for making a privacy request.

If you are a client seeking information in a trainer workspace, please contact your trainer first because the trainer controls that client relationship and the purpose of that processing. We will support a trainer’s lawful instructions and respond directly where required by law. You may opt out of non-essential marketing emails using the unsubscribe link in the message; account, billing, service, and security communications may still be sent.

Children and teenagers

The Services are not for children under 13, and we do not knowingly collect personal information from a child under 13. A trainer may invite a person age 13–17 only where the trainer has obtained required parent or guardian permission and authorizes that person’s access. If you believe a child under 13 has provided personal information to Knetic, contact [email protected] so we can investigate and take appropriate action.

U.S. service and changes to this Policy

The Services are offered from and intended for users in the United States. If you access the Services from another location, you understand that information may be processed in the United States, where privacy laws may differ from those where you live.

We may update this Policy to reflect changes in our practices, the Services, or applicable law. We will post the updated Policy with a revised effective date. Material changes may also be communicated through the Services or by email where appropriate.

Contact

For questions, privacy requests, or concerns about this Policy, email [email protected].