Privacy Policy

1. Who controls your information

The controller of your personal information is:

Kelesto
India

Email for privacy requests: contact@kelesto.com

2. Information we collect

Information you give us

We may collect:

• Account and profile information, such as your name, email address, account identifier, password credential handled through our authentication provider, username/handle, and optional profile image.
• Onboarding and fitness-profile information, such as date of birth or age, height, current and goal weight, activity level, preferences, and goals.
• Training information, including workout plans, exercises, sets, repetitions, weights, completed sessions, workout history, personal records, goals, achievements and levelling progress.
• Social information and content, including friend requests, club membership and invitations, profile information, reactions, reports, blocks, selected metric-sharing preferences, and information you choose to post or share through a Kelesto social feature.
• Support and feedback information, when you contact us or report a user or content.
• Subscription and entitlement information, such as the subscription product, trial or renewal status, transaction identifiers, purchase-verification information and entitlement history. Apple processes App Store payment-card information; Kelesto does not receive or store your full card number.

Health and fitness data from Apple Health

With your permission, Kelesto reads the Apple Health / HealthKit data types that you authorise. Depending on your device, the permissions you grant and the features you use, this may include steps; active and basal energy; walking and running distance; heart rate; resting heart rate; heart-rate variability (SDNN); VO₂ max; blood oxygen saturation; wrist temperature; sleep analysis and sleep stages; workouts and workout metadata; and related health, fitness and wellness observations available through HealthKit.

Kelesto has read-only HealthKit access. It does not write data to Apple Health. You can refuse, limit or revoke HealthKit permission at any time in Apple Health or iOS Settings. Removing permission may make parts of Kelesto unavailable or less personalised.

We may process authorised health and fitness data on your device and in Kelesto’s cloud systems when needed to provide account sync, metrics, trends, workout history, wellness insights, goals, reports and the limited social features you choose to use. We do not sell HealthKit data, use it for advertising, use it for cross-context behavioural advertising, or permit it to be used for unrelated data mining.

Information collected automatically

When you use the Services, we may collect:

• device, operating-system, app-version, language, time-zone, IP-address and technical identifier information;
• app use, diagnostic and performance information, such as feature interactions, crash reports and error logs;
• security information, such as sign-in events, abuse-prevention signals and service logs; and
• a push-notification token, preferences and delivery information if you enable notifications.

Kelesto uses Firebase Analytics and Crashlytics to understand app performance and diagnose faults. We do not include raw HealthKit data or direct account identifiers in those analytics or crash-reporting fields.

Information from third parties

If you choose Sign in with Apple or Google Sign-In, we receive the information that you authorise that provider to share, such as your name, email address or relay address, and provider account identifier. We also receive App Store subscription and transaction-status information from Apple to provide and protect your entitlement.

3. How we use information

We use personal information to:

• create and secure your account and provide the Services you request;
• personalise fitness and wellness views, calculations, plans, trends, reports and goals;
• sync and restore account information across your authorised devices;
• operate Friends, Clubs, reactions, reporting, blocking and other social features you choose to use;
• administer trials, subscriptions, purchase restoration, refunds, support and entitlement protection;
• send service, security and transactional messages, and push notifications that you enable;
• provide support, investigate reports and enforce our Terms;
• monitor, troubleshoot, protect and improve the Services; and
• comply with law, respond to lawful requests and protect the rights, safety and security of Kelesto, our users and others.

Kelesto may create aggregated or properly de-identified information for service measurement and improvement. We will not attempt to re-identify de-identified information except where permitted by law to test or maintain the de-identification process.

Kelesto’s wellness scores, trends and recommendations are generated from the information available to the Service. They are not medical diagnoses and are not used to make legal, employment, insurance, credit or other similarly significant decisions about you.

4. Social features and your controls

Social participation is optional. You control whether to create a social profile, accept a friend connection, join a Club, or share a permitted metric. Club administrators may select the categories a Club supports, but you choose which available metrics you share and can change that choice later.

Other users can see only the profile, content and metric summaries you choose to make available through the relevant audience setting. Kelesto does not expose raw HealthKit samples, routes, heart-rate streams or detailed HealthKit history through social features. You can change sharing settings, leave a Club, remove a connection, block a user, or report content or behaviour. A change stops future sharing through that setting, but cannot remove information another person has already seen, copied or shared outside Kelesto.

5. How we share information

We do not sell personal information or share it for cross-context behavioural advertising. We share information only:

• with other users when you direct us to do so, through the social audience, profile, Club, friend connection or sharing setting you select;
• with service providers that process information for us to provide, secure and support the Services, including Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics and App Check) and Apple (HealthKit, App Store, StoreKit and App Store Server Notifications);
• with professional advisers, regulators, courts, law enforcement or other parties when reasonably necessary to comply with law, enforce our rights, investigate fraud or abuse, or protect people’s safety;
• in a business transaction, such as a financing, merger, acquisition, restructuring or sale of assets, subject to applicable law; or
• with your consent or at your direction.

Our service providers may process information only to provide services to us and subject to appropriate contractual and security obligations. We do not permit them to use Kelesto health and fitness data for their own advertising or independent purposes.

6. Website technologies

Our website may use strictly necessary cookies or similar technologies for security, functionality and preventing abuse. We do not use website cookies for cross-site behavioural advertising. If we introduce optional analytics or advertising technologies that require consent under applicable law, we will provide notice and obtain consent before using them.

7. International processing and security

Kelesto and its service providers may process information in countries other than the country in which you live, including countries where our cloud and platform providers operate. These countries may have different data-protection laws. Where required, we use a lawful transfer mechanism and appropriate safeguards for international transfers. You may contact us to request information about the safeguards relevant to your information.

We use reasonable administrative, technical and organisational measures designed to protect personal information, including access controls, authenticated access, encryption in transit where supported, monitoring and least-privilege controls. No system is completely secure. Please protect your password and device, and contact us promptly if you suspect unauthorised account access.

8. Retention and deletion

We keep personal information only for as long as reasonably necessary for the purposes in this Policy, including providing the Services, protecting security, resolving disputes and complying with legal obligations.

When you delete your account through the in-app account-deletion control or submit a verified deletion request to contact@kelesto.com, we will delete or de-identify account information associated with it within 30 days, unless particular information must be retained for a lawful purpose such as fraud prevention, security, dispute resolution, tax or legal compliance. Encrypted backup copies may persist for up to 90 days before being overwritten. Content already shared with other users may remain in their activity history where necessary to preserve that history, but will no longer be associated with an active Kelesto account where feasible.

We may ask you to verify your identity before completing a request.

9. Your privacy rights and choices

Depending on where you live and subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal information; to withdraw consent; and to appeal a decision about a privacy request where law provides that right.

To exercise a right, use the available in-app controls or email contact@kelesto.com with the subject line “Privacy Request.” We will verify your request and respond within the period required by applicable law. We will not discriminate against you for exercising applicable privacy rights. You may also authorise an agent to submit a request where local law permits, subject to verifying the agent’s authority and your identity.

For HealthKit data, you can also change access through Apple Health or iOS Settings. For social data, use the relevant sharing, connection, Club, block or report control in the app.

10. United States privacy disclosures

This section applies to U.S. residents where applicable law requires it. In the preceding 12 months, Kelesto may have collected identifiers; account and profile information; health and fitness information; commercial and subscription information; internet or network activity; approximate location inferred from IP address; user content; and inferences or wellness calculations generated from those categories. Some of this information, including account credentials and health and fitness information, may be sensitive personal information under applicable law.

We collect this information from you, your device, Apple Health when you authorise access, sign-in providers you choose, Apple’s subscription services and our service providers. We use and disclose it as described in Sections 3 and 5. We do not sell or share personal information as those terms are defined by California privacy law, and we do not knowingly sell or share the personal information of anyone under 16.

California residents may have rights to know/access, correct, delete and limit certain uses or disclosures of sensitive personal information. Submit a request using the method in Section 9.

11. Children

Kelesto is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe that a person under 18 has created an account or provided personal information, contact us at contact@kelesto.com and we will take appropriate steps to delete it.

12. Third-party services

Apple, Google and other third-party services that you choose to use may collect and process information under their own policies and terms. This Policy does not govern their independent practices. We encourage you to review their notices, including Apple’s and Google’s privacy information.

13. Changes to this Policy

We may update this Policy to reflect changes to the Services, our data practices or applicable law. We will post the updated Policy and revise the “Last updated” date. If a change is material, we will provide additional notice or request consent when required by law.

14. Contact us

For questions, concerns, support or privacy requests, contact:

Kelesto
India

contact@kelesto.com