Privacy Policy

Last updated: September 24, 2026

This policy explains what Kaha Trainer collects, why, and what you can do about it. Kaha Trainer ("the app") is published by CloudArbitration LTDA ("we", "us"). You can reach us at info@kahatrainer.com.

1. The short version

2. Data we collect

2.1 Account information

To create an account we collect your email address and a display name. If you use Sign in with Apple, we receive whatever Apple sends us — which may be a private relay address rather than your real email, at your choice. Passwords are handled by our authentication provider and are never visible to us.

You may explore the app without an account. In that mode the app is read-only and nothing is saved.

Shared with DietCoach. Kaha Trainer and DietCoach, our nutrition app, use the same account. Signing in to either gives access to the same profile, body weight and measurements, and deleting the account in either app deletes it in both. What DietCoach collects is described in the DietCoach Privacy Policy.

2.2 Training data

Everything you create in the app, which is the point of the app:

• Programs, training splits, exercises, sets, reps, loads and rest settings
• Completed workout sessions, including duration and reps in reserve
• Body measurements you record: weight, body-fat percentage, and circumference per muscle group
• Gyms you register and the equipment you mark them as having
• Competitions you create or join, and the results that feed their standings
• Your settings: units, language, weekly goal, reminder preferences

2.3 Apple Health data

Apple Health integration is optional and off until you grant it. If you do:

• We read body weight, body-fat percentage, height, date of birth and biological sex. These are used on your device to estimate workout calories and to prefill measurement screens. Age and biological sex are used for the metabolic-rate formula and nothing else.
• We write your completed workouts (duration and active energy), and the values the app itself derives — body mass index, lean body mass — plus waist circumference if you record it in the app.

Data obtained from Apple Health is never used for advertising or marketing, is never sold, and is not shared with third parties. Measurements you explicitly save in the app are stored in your account like any other training data.

2.4 Usage analytics

To understand which screens are worth keeping, the app records product events: which screen was opened, whether a workout was started or finished, whether a program was generated. Each event carries:

• a random identifier generated on your device at install time
• a session identifier that changes every time the app cold-starts
• the event name, app version and platform, and the time it happened

This identifier is not linked to your account, your email, or any measurement you have logged. It is deliberately isolated so that usage statistics cannot be traced back to a person. It resets if you delete and reinstall the app.

2.5 Advertising

Kaha Trainer is free and supported by ads served by Google AdMob. Depending on your choices and your region, AdMob may process your device's advertising identifier (IDFA), coarse device and network information, and ad interaction data.

On iOS, the advertising identifier is only available to us if you allow tracking when the system asks. If you decline, the app still works identically and you will still see ads — they will simply be less relevant. Apple's SKAdNetwork may also report aggregated, non-identifying install attribution.

Google's handling of this data is governed by its own policies. See How Google uses information from sites or apps that use our services.

2.6 Notifications

Workout reminders are scheduled locally on your device. Their time is stored on the device, not on our servers, and no notification content passes through us.

2.7 What we do not collect

• We do not collect your precise location.
• We do not access your contacts, photos, microphone or camera.
• We do not collect payment information — there is nothing to buy.

3. Why we process it

Purpose	Data	Legal basis (GDPR)
Provide the app: build programs, log workouts, sync across devices	Account, training data	Performance of a contract
Estimate calories and body metrics	Apple Health data, measurements	Consent (you grant Health access)
Understand product usage and fix what is broken	Anonymous usage events	Legitimate interest
Fund the app through advertising	Advertising identifier, ad interactions	Consent, where required
Competitions: show your name and results to other participants	Display name, competition results	Performance of a contract

4. Who we share it with

We do not sell personal data. We share it only with the providers that make the app run:

• Supabase — hosts our database, authentication and file storage. It processes your account and training data on our instructions.
• Google AdMob — serves the ads, as described above.
• Apple — provides Sign in with Apple and, if you enable it, HealthKit. Apple receives only what is inherent to those services.

Other participants in a competition you join can see your display name and your results in that competition. That is the purpose of a competition; if you do not want that, do not join one.

We may also disclose data where required by law, or to protect our rights and the safety of users.

5. International transfers

Our providers operate infrastructure that may be located outside your country, including in the United States. Where required, transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism offered by the provider.

6. How long we keep it

Account and training data are kept while your account exists. When you ask us to delete your account, we delete it and its associated training data. Anonymous usage events are retained in aggregate; because they are not linked to your identity, they cannot be isolated and removed per person.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these, write to info@kahatrainer.com from the address associated with your account. We answer within 30 days.

Deleting your account. Email us at info@kahatrainer.com with the subject "Delete my account". We will delete your account and its training data and confirm when it is done.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Practical controls — turning off tracking, revoking Health access, managing notifications — are listed on Your Privacy Choices.

8. Security

Data in transit is encrypted with TLS. Access to the database is restricted by row-level security rules so that an account can only read its own records. No system is perfect, and we do not claim otherwise — but the app is built so that a leaked public key does not expose anybody else's training history.

9. Children

Kaha Trainer is not directed at children under 13 (or under the minimum age set by your country's law, where it is higher). We do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top and, for changes that matter, tell you in the app before they take effect.

11. Contact

CloudArbitration LTDA
info@kahatrainer.com
kahatrainer.com