Legal
Privacy Policy
Effective April 2, 2026
1. Overview
KIRU is a fitness app designed to help you train smarter using personalized programming and data insights. This policy explains what data we collect, how we use it, and your rights as a user. KIRU is registered in the Province of British Columbia, Canada.
2. What We Collect
- Personal Information: Name, email, birthday — to create and manage your account.
- Fitness & Health-Related Information: Height, weight, biological sex, training history, injury history, movement restrictions, sleep quality, stress level, diet approach — to tailor training programs.
- Activity & Performance Data: Session logs, benchmark data — to track progress and adjust programming.
3. How We Use Your Data
To generate personalized training programs, adapt workouts based on progress, and provide performance insights. AI Processing: some data is processed through Anthropic's Claude API to generate training recommendations. Your data is not used to train external AI models.
4. KIRU Conversations
Conversation data is stored securely while your account is active. Conversations are summarized for long-term coaching context. You can request deletion of your data at any time.
5. Third-Party Services
- Anthropic (Claude API): AI-powered program generation.
- Supabase: Secure database storage (Postgres on AWS).
- Vercel: App hosting.
- Stripe: Payment processing. Card data never touches our servers.
6. Data Storage & Retention
Data retained while account is active. Deleted within 30 days of account cancellation.
7. Your Rights
Access, correction, or deletion requests: hello@trainkiru.com
8. No Selling of Data
We do not sell your data to third parties. Not now. Not ever.
9. Canadian Privacy Compliance (PIPEDA)
We follow PIPEDA principles: limiting collection to what's necessary, using data only for stated purposes, keeping information secure.
10. International Users
Data may be processed in Canada or the United States. We follow basic GDPR principles including data minimization and user control. Your data is processed by Anthropic's Claude API on servers located in the United States. Data is transmitted securely and used only to generate your training programs and coaching responses. Your data is not used to train external AI models.
10a. California Users (CCPA/CPRA)
We do not sell or share your personal information. You have the right to know what data we collect, request deletion, and opt out of data sales (we do not sell data). To exercise these rights, email hello@trainkiru.com.
11. Not a Medical Service
KIRU is not a medical service. We do not provide medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before starting a new training program.
12. Contact
hello@trainkiru.com
13. Updates
We may update this policy as the app evolves and will notify users of significant changes.