Privacy Policy

Kinetix Fitness is operated by Refined Designs Digital, which acts as the data controller for the personal data described in this notice.

We collect the account details you provide (email, display name), the assessment metrics you enter (age, gender, height, weight, goals, schedule, dietary preference, equipment), workout and meal logs you record, weight entries, and any progress photos you choose to upload. We also process basic device and usage data (IP address, browser type) for security and product improvement. This data is used to create your account, generate and improve your personal plan, provide customer support, and keep the service secure.

Legal basis for processing is the performance of our contract with you, your consent (for optional data such as progress photos), and our legitimate interests in security and product improvement. We do not sell personal data or share it with advertisers.

We share data only with: service providers who host and operate the service (cloud hosting and database infrastructure); Paddle, our Merchant of Record, which processes payment data for the sale of subscriptions, payment processing, tax compliance and invoicing — your payment card details are collected and stored by Paddle, never on our servers; professional advisers where needed; and authorities where required by law.

Progress photos are stored in a private, access-controlled storage area. Only your authenticated account can read, add, or delete your images — they are never public and are never used for marketing. We apply appropriate technical and organisational measures, including encryption in transit and access controls.

We retain your personal data for as long as your account is active. If you delete your account, your metrics, logs and photos are permanently deleted within 30 days, except where we must retain records to meet legal or accounting obligations (for example transaction records, which Paddle retains as Merchant of Record). Data no longer needed is deleted or anonymised.

Under GDPR and applicable data protection law you may request access to, correction of, export of, restriction of, or deletion of your data, object to processing, or withdraw consent at any time; you also have the right to complain to your supervisory authority. We respond to requests within one month. Contact us through the in-app support channel to exercise these rights.