Privacy Policy

1. Who We Are and What This Policy Covers

Kratex Fitness & Health (“Kratex,” “we,” “us,” or “our”) is currently operated by an individual developer based in the Philippines, who decides how and why the personal information described here is processed. This Privacy Policy covers the Kratex mobile application, this website, and related services.

It explains what information we collect, how we use it, who receives it, how long we keep it, how we protect it, and the choices and rights you have, including under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Kratex is intended for adults aged 18 and over (see Section 27).

Kratex is currently offered only to people located in the Asia-Pacific region. We do not offer the Service in other regions, and it is not intended for use by people located outside the Asia-Pacific region.

2. Information We Collect

Depending on the features you use and the permissions you grant, Kratex processes:

• account and authentication information;
• profile and fitness profile information, including your date of birth, sex, height, weight, activity level, and goals;
• body measurements and progress information that you enter;
• workout and exercise information;
• running and cardio information, including location and route information;
• nutrition and meal information;
• photographs you choose to upload (food, run, and profile photographs);
• information you type to the AI coach;
• device and technical information;
• anonymous application usage information, which is not linked to your account (see Usage and Telemetry Data), and crash information (only if you opt in);
• crash and diagnostic information;
• subscription and purchase information; and
• information you provide when contacting support or sending feedback in the app (feedback is stored with your account if you are signed in, and is deleted with it).

We do not necessarily collect every category for every user. Health and fitness information you can read from Apple Health or Health Connect is shown on your device and is not uploaded to our servers (see Section 7).

3. Account and Authentication Information

If you create an account, we process your name or display name, email address, a securely stored password credential (we do not see or store your password in readable form), authentication identifiers, your account identifier, and login and security information. After you sign up, we email you a one-time code to confirm your email address; until you enter it, some features (AI features, buying Premium, and email sign-in codes) stay locked. If you turn on email sign-in codes, we email one each time you sign in.

If you use Sign in with Apple or Google, we receive the information that provider makes available based on your authorization and its policies. We do not request or collect your Apple ID or Google password.

4. Fitness Profile and Body Measurements

You may provide your date of birth (used to calculate your age), sex, height, weight, fitness goals, activity level, training experience, and preferred workout types. You may also record body measurements such as weight, body-fat percentage, muscle mass, waist, chest, neck, arm, and thigh measurements, and your resting heart rate.

We use this information to provide and personalize the Service, for example to estimate calorie needs, track progress, and tailor recommendations. This information is stored in your Kratex account so it can sync across your sessions.

Some of this information is health information and is treated as sensitive personal information (see Section 8).

5. Workout and Exercise Data

Kratex processes exercises performed, sets, repetitions, weight or resistance, duration, rest periods, workout dates and times, workout history, notes, training progress, and other information you choose to record.

If you track a free workout with the Kratex app for Apple Watch, Kratex saves the activity type, start and end times, active time, pauses, and any notes to your account. Heart rate and calorie readings from these workouts are handled as described in Section 7.

We use this information to provide workout tracking, progress tracking, summaries, recommendations, and related functionality.

6. Running, Cardio, and Location Data

If you use running or cardio tracking, Kratex processes your precise location while tracking is active (and in the background if you allow it), together with distance, duration, pace, speed, route, splits, pauses, and timestamps. Runs are saved to your account, including the route, so you can view them later.

Maps are displayed using map tiles requested from a third-party map provider (see Section 18). When your device requests map tiles, that provider receives your IP address and the map area being viewed, which can indicate your approximate location.

You can control location permissions in your device settings. Some features will not work if you deny location access. We do not sell precise location information or use it for advertising.

7. Health and Fitness Platform Data

Where supported and with your permission, Kratex can read from Apple Health (HealthKit) or, on Android, Health Connect: workouts, active energy, exercise time, stand hours, heart rate, steps, and distance. Kratex can also write your finished strength workouts to Apple Health or Health Connect.

If you use the Kratex app for Apple Watch and give permission, the Watch measures your heart rate and calories during free workouts you track and writes those workouts, with their measurements, to Apple Health. We do not upload these heart rate and calorie readings to Kratex servers, and we do not send them to analytics, crash-reporting, AI, or other third-party services.

Data read from these platforms is displayed on your device. We do not upload it to Kratex servers, and we do not send it to analytics, crash-reporting, AI, or other third-party services.

Access is permission-based, and you can change or revoke it at any time in your device or platform settings.

We do not sell HealthKit data. We do not use HealthKit data for advertising, marketing, behavioral advertising, or unrelated data mining. We do not disclose HealthKit data to third parties except as permitted by applicable law and Apple’s requirements.

8. Sensitive Personal Information

Some information Kratex processes is sensitive personal information under Philippine law and other privacy laws, including health-related information such as body measurements, resting heart rate, weight, workout and nutrition records, and precise location.

We process sensitive personal information only for the specified purposes described in this policy and, where the law requires your consent, only after you give it. When the app first needs your consent for a sensitive use, for example before sending a food photo or coaching message to an AI provider, it will ask you, and you can withdraw consent later in the app’s privacy settings.

We apply organizational, physical, and technical safeguards designed to protect sensitive information against unauthorized access, alteration, disclosure, loss, or destruction (see Section 25).

9. Nutrition and Food Information

You may record food items, meals, serving sizes, quantities, calories, protein, carbohydrates, fats, fiber, other nutritional information, meal times, nutrition goals, and notes.

Nutritional information may be estimated using databases, your input, automated analysis, or other sources. These values are estimates and may not reflect the actual nutritional content of your food.

10. Food Photos and Image Processing

If you use food-photo analysis, the photo is uploaded to a private storage area in your Kratex account. To analyze it, our server creates a temporary link that expires within minutes and sends the photo to our AI provider (see Sections 12 and 18), which returns nutrition estimates. The photo is used to provide the requested analysis and is not used by Kratex for advertising.

Your food photos stay in your account until you delete them or delete your account. Please avoid photographing other people or sensitive documents.

11. Photos and Other Content You Upload

Kratex lets you upload a profile photograph and photographs attached to your runs, and to save food photographs. These are stored in your Kratex account. Food and run photographs are kept in private storage that only you can access through your signed-in account.

Your profile photograph is stored in a way that is not publicly listed, but the image can be opened by anyone who has its exact web address. Kratex does not currently show your profile or content to other Kratex users.

You may create images of your workouts and runs and share them through other apps. Content you share outside Kratex is outside our control (see the Terms).

If we introduce features for sharing content with other Kratex users, we will update this Privacy Policy and explain the privacy controls before those features take effect. We do not sell your personal photographs.

12. AI-Powered Features and Automated Processing

Kratex uses artificial intelligence for features including food-photo analysis and the AI fitness coach. The AI service provider we currently use is OpenAI. We may change or add providers and will update this policy.

Depending on the feature, the following is sent to the provider:

• for food-photo analysis: the photo you chose to analyze;
• for the AI coach: your recent training data for the relevant exercises, your schedule and training recommendation for the day, exercise names from our catalogue, and the messages you type, including the earlier messages in the conversation.

We do not send your name, email address, or account identifier to the AI provider as part of these requests. Because you may type anything into a message, please avoid including information you do not want processed.

The provider processes this information on our behalf to generate a response. Depending on the provider’s terms and how we configure our requests, the provider may keep requests for a limited period for safety and abuse monitoring. We do not permit AI providers acting on our behalf to use Kratex personal information for unrelated advertising, and we do not use your information to train our own AI models.

AI-generated information may be inaccurate, incomplete, or unsuitable for your circumstances and is not medical diagnosis or professional healthcare advice.

13. Camera and Photo Library Access

Kratex may request access to your camera or photo library for features such as food photography, run photographs, profile photographs, and workout-sharing images. Kratex accesses a photograph only when you choose to use one of these features.

You can control these permissions in your device settings.

14. Device and Technical Information

We process device type, operating system and version, app version, language and region, network information, IP address, crash and diagnostic information, performance information, and security-related technical information, including a device-integrity check (Apple App Attest or Google Play Integrity) that helps confirm requests come from a genuine copy of the app.

We use this information to operate, secure, troubleshoot, maintain, and improve Kratex.

15. Usage and Telemetry Data

We collect anonymous statistics about how Kratex is used, such as which screens and features are used, sign-in and onboarding steps, and paywall and purchase events. These statistics are sent under a random identifier that the app creates on your device. The identifier is not linked to your account, name, email address, or health, food, or workout content, and we do not connect the two. Each event also carries basic technical details such as the app version, device type, operating system, and language. This helps us maintain reliability, understand how features are used, and improve the Service.

You can turn these anonymous usage statistics off at any time in Profile → Privacy settings. Our analytics provider necessarily receives your device’s IP address when the app connects; we ask it not to look up a location from it and not to keep it with the statistics. We do not use health information obtained through HealthKit for analytics, advertising, or unrelated data mining, and we do not use these statistics for advertising or sell them.

Crash reporting is likewise optional and off unless you turn it on. Crash and error reports, which help us fix bugs, contain technical details about the problem and are stripped of account identifiers before being sent.

16. How We Use Personal Information

Depending on the information and feature involved, we process personal information to:

• create and manage accounts and authenticate users;
• provide workout, nutrition, running, and cardio functionality;
• provide Apple Health and Health Connect functionality;
• provide AI-powered features;
• personalize the Service and calculate fitness and nutrition estimates;
• track progress and display maps and routes;
• provide customer support;
• process subscriptions and purchases;
• prevent fraud and abuse and protect security;
• diagnose technical problems and maintain and improve the Service;
• comply with legal obligations and respond to lawful requests;
• enforce our Terms; and
• protect the rights, safety, and security of Kratex, our users, and others.

We do not process personal information for purposes incompatible with those described in this policy unless permitted or required by law.

17. Legal Bases and Processing Principles

We process personal information under the principles of transparency, legitimate purpose, and proportionality. Depending on the circumstances and applicable law, we rely on:

• your consent;
• the necessity of processing to provide a service you request or to carry out a contract with you;
• compliance with legal obligations;
• protection of vital interests where legally applicable;
• legitimate interests, where permitted and not overridden by your rights and freedoms; and
• other lawful bases recognized by applicable law.

For sensitive personal information, including health information, we rely on the basis permitted by law for the specific activity, which is generally your consent.

Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect processing already lawfully performed.

18. How We Share Personal Information

We share personal information with the service providers below, which process it on our behalf to run Kratex. Each receives only what is reasonably necessary for its function. These providers may be located outside the Philippines (see Section 26).

We may also disclose information when required by law; in response to lawful government or regulatory requests; to protect the rights, safety, and security of Kratex or others; to investigate fraud, abuse, or security incidents; or to establish, exercise, or defend legal claims.

We do not sell your health or fitness information.

19. Third-Party Services

Some services you use with Kratex, such as Apple, Google, the App Store, and Google Play, act independently and process information under their own privacy policies.

Where a provider processes information on our behalf, we take reasonable steps to require appropriate privacy and security protections.

20. Payments and Subscriptions

When you buy through Apple’s App Store, Google Play, or another marketplace, the marketplace processes your payment. Kratex does not receive your full payment card number.

We receive information such as product identifier, subscription status, transaction identifier, purchase and renewal dates, expiration information, and entitlement information, which we use to provide and manage paid features.

21. Data Retention

We keep personal information only as long as reasonably necessary for the purposes in this policy. In particular:

When information is no longer required, we delete, anonymize, or securely dispose of it in accordance with our practices and applicable law.

22. Account and Data Deletion

You can delete your Kratex account in the app under Profile. You can also contact us at support@kratex.fit.

When you delete your account, we delete your account and the personal information stored in it, including your photographs, unless we are required or permitted to retain certain information for legal obligations, security, fraud prevention, dispute resolution, or enforcement of agreements. At the same time we ask our subscription provider to delete the records linked to your account, and analytics data is not linked to your account in the first place; if one of those requests fails, we keep retrying it until it succeeds.

If you signed in with Apple, the app asks you to confirm with Apple during deletion so we can remove Kratex from your Apple ID connection. If you skip that step, the account is still deleted and you can remove Kratex yourself under Settings → your name → Sign in with Apple.

Deleting the Kratex app from your device does not delete your account or your server-side information. Deleting your account does not cancel an Apple App Store, Google Play, or other third-party subscription; you must cancel that separately with the provider.

23. Your Privacy Rights

Subject to applicable law and any lawful limitations, you may have the right to:

• be informed about the processing of your personal information;
• access the personal information we hold about you;
• request correction of inaccurate information;
• object to certain processing;
• request erasure or blocking where legally applicable;
• data portability where legally applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the appropriate privacy regulator; and
• claim damages or other remedies available under applicable law.

In the Philippines, these rights are recognized by the Data Privacy Act of 2012 and the National Privacy Commission.

You can edit much of your information directly in the app. If your email address is confirmed, you can also download a copy of the information we hold about your account (in JSON format) from Profile → Privacy → Download my data. The download does not include photo files, which you can request from us, or information that Apple Health or Health Connect holds and that Kratex does not store.

To exercise any other right, or to ask for photo files, email support@kratex.fit. We may need to verify your identity first, and we will respond within a reasonable time.

24. Privacy Choices and Permissions

Depending on the features you use, you can:

• update account and profile information;
• turn anonymous usage statistics off, and choose whether to allow crash reports and AI features, in the app’s privacy settings;
• download a copy of your account information;
• delete your account;
• control location, camera, and photo-library access in your device settings;
• revoke Apple Health or Health Connect permissions in your device or platform settings;
• manage your subscription in your App Store or Google Play account; and
• contact us with privacy requests.

Some features may not work if the permission they need is denied or withdrawn.

25. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, destruction, misuse, or other unlawful processing. Measures include encrypted connections, sign-in authentication with an optional email-code second step, database access rules that limit each account to its own data, private storage for food and run photographs with short-lived access links, and a device-integrity check.

No electronic system or transmission can be guaranteed to be completely secure.

If a personal data breach occurs that the law requires us to report, we will notify the National Privacy Commission and affected individuals within the applicable legal timeframes.

26. International Data Transfers

Kratex and its service providers may process or store information in countries other than the country where you live. Depending on the service involved, information may be processed by cloud, AI, analytics, authentication, infrastructure, payment, or other providers located outside the Philippines.

Where personal information is transferred internationally, we take reasonable steps, including contractual protections with our providers, to apply the safeguards required by applicable law.

27. Age and Children’s Privacy

Kratex is intended for adults aged 18 and over (or older, where the age of majority where you live is higher). We do not knowingly collect personal information from anyone below that age.

If you are below the required age, please do not use Kratex or provide personal information. If we learn that we have collected personal information from someone below the required age, we will take reasonable steps to close the account and delete the information, subject to applicable law. If you believe a child has provided us information, contact support@kratex.fit.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Kratex, applicable law, technology, or our processing practices.

For material changes, we will notify you through the app, website, email, or another reasonable method before the change takes effect where appropriate. The updated policy will include a revised “Last updated” date. Where the law requires your consent to a change, we will ask for it.

29. Contact Us

Kratex Fitness & Health
For privacy questions, requests, or concerns, email support@kratex.fit
Website: kratex.fit

If you are in the Philippines and believe your privacy rights have not been properly addressed, you may also contact the National Privacy Commission, subject to its procedures.

Our website does not currently use advertising or analytics cookies or trackers.