Privacy Policy

Kiwi Labs LLC — Updated October 5, 2026

This policy covers the TRAK iOS app and trakfit.app, built by Kiwi Labs LLC (“we”). Short version: we collect what the product needs to work, we don’t sell it, and there are no ads.

What we collect

Account information. Your email address and authentication identifiers when you create an account.

Fitness data you log. Workouts, sets, reps, loads, runs, food, and body metrics you enter in the app. This is the product — TRAK stores it in order to analyze it.

Apple Health data (optional). With your permission, TRAK reads workout and activity data from HealthKit to complete your training picture. You control this in iOS Settings and can revoke access at any time.

Photos you submit. Equipment and food photos you take in the app are used to generate the result you asked for — identifying an exercise swap or logging a meal.

Chat messages. Conversations with Ask TRAK are stored on our servers and linked to your account so your history is available across sessions.

Purchases. Apple processes all payments. We receive your subscription status, never your payment details.

Website. If you join the waitlist, we collect the email address you submit and use it for a launch announcement.

How we use your data

To run TRAK: sync your data, generate training and recovery analysis, answer your questions, and manage your subscription. We do not sell your data. We also measure which ads bring people to TRAK, as described below.

Advertising measurement

We use Meta and RevenueCat to measure installs, app interactions and subscription events associated with TRAK ads. This can include app and device identifiers and purchase status. Access to the advertising identifier requires your permission through Apple’s tracking prompt. You can change that permission in iOS Settings. HealthKit data is not used for advertising measurement.

Product analytics

To learn which features help people and where the app gets in the way, TRAK records usage events, such as opening the app, viewing a screen or finishing a log. They are stored in our database and sent to PostHog, our product analytics provider. After you sign in, these events are linked to your account’s user id. They do not include your name or email address, TRAK does not record your screen or taps, and they are not used for advertising.

AI processing

TRAK sends AI requests through OpenRouter to Anthropic’s Claude or Google’s Gemini, depending on the feature. Claude generates programs, chat answers, workout voice edits, file imports and body scan analysis. Gemini analyzes food and equipment photos and descriptions, and generates AI workouts, coaching notes and insights.

TRAK also uses TypeSafe’s Jev, reached through OpenRouter, to make quick decisions about requests. Jev reads your newest Ask TRAK message to decide whether answering it needs a web search and whether it is something TRAK can help with. Jev returns a decision, not text, and it is only used after you acknowledge the Ask TRAK disclosure that names it.

After you acknowledge the relevant in-app disclosure, the data needed for that AI feature — which can include your profile, goals, body metrics, injuries, logged training, nutrition, recovery, messages or photos — is sent through our servers and OpenRouter to the AI provider. You can decline the disclosure and continue using features that do not require that AI processing. Material changes to the disclosed recipients require a new acknowledgment.

Food logging accuracy

When you analyze a food description or photo, TRAK sends it through OpenRouter to Google’s Gemini to list the items, then matches each item to its food database. After you acknowledge the food analysis disclosure that names it, the item names and portions, and the database entries they could match are also sent through OpenRouter to TypeSafe’s Jev, which checks each match. Jev never receives your full description or photo. It returns a decision and never writes text.

Each analysis, including your description, the items, their matches and how confident TRAK is in them, is kept for 90 days to measure and improve accuracy, then deleted. Edits and deletions of food logs are also recorded to measure accuracy.

TRAK remembers the foods and portions you log so your next log can match them. Which food people choose for a description is also counted across accounts without showing anyone’s identity. Your picks leave that count when your account is deleted, and your remembered foods are deleted with it.

You can report a wrong database entry. Reports are kept with your account. A branded or community entry that two people report is hidden until our team reviews it, and USDA reference entries stay visible while we review them.

Voice input

Voice features (logging a meal, editing a workout by voice) use your microphone only while you hold the button. Speech is converted to text on your device where supported; otherwise Apple’s speech service processes the audio. Only the resulting text — together with the workout context needed to understand it — is sent to our servers and through OpenRouter to Anthropic (workout edits) or Google (food logging) to work out your request; the audio itself is never sent to TRAK, OpenRouter or those AI providers, and transcripts are not stored on our servers. When you correct a misheard exercise name, we save that correction to your account so it resolves right next time; corrections are deleted with your account.

Social features and the Everyone feed

TRAK’s social features (friends, feed posts, comments, Trakkie reactions, messages, challenges and shared programs) share what you choose with other people on TRAK. A post is shared with your friends only unless you choose Everyone for that post.

The Everyone feed. Members 18 and over can share a post with Everyone. Anyone on TRAK aged 18 or over can then see that post, with its photos, caption and workout, your @handle and your profile photo. Your name is shown only to your friends. People who are not your friends can send a Trakkie reaction on your Everyone posts, and only friends can comment. We use the age or date of birth on your profile to decide who can share with or see the Everyone feed; members under 18, or without an age on their profile, cannot do either.

You can move a post back to friends only, or delete it, at any time. You can hide someone’s posts from your feed, block them, or report a post, and our team reviews reports. Photos you post are resized and stripped of location and other metadata on your device before upload.

Content moderation

Text you share with other people in TRAK (comments, post captions, custom nudges, chat messages, and challenge titles and descriptions) may be screened automatically for harassment, hate, sexual content, threats, self-harm and spam, and photos you post are screened before anyone else can see them. Text is screened by TypeSafe’s Jev and photos by Anthropic’s Claude, both through OpenRouter. Screening can hide a comment from others until our team reviews it, and our team reviews anything it flags. Screening results are kept with the content they describe and deleted with your account.

Apple Health

HealthKit data is used only to provide TRAK’s features. It is never used for advertising or marketing, never sold, and never shared with third parties except as needed to deliver the service you requested.

Service providers

We use Supabase (database and authentication), OpenRouter (AI request routing), Anthropic and Google (AI processing), TypeSafe (AI decisions, food match checks and content screening), Apple (payments, HealthKit and speech recognition), RevenueCat (subscription status and attribution), Meta (advertising measurement), PostHog (product analytics), Crisp (support chat), and Resend (email). Each processes data only as needed to provide their service to us.

Retention and deletion

We keep your data while your account is active. Deleting your account in the app (Settings → Account → Delete Account) permanently removes your account, logged data, and chat history. You can also email contact@trakfit.app to request deletion or a copy of your data. Waitlist emails are used for a single launch announcement and deleted on request.

Children

TRAK is not directed at children under 13, and we do not knowingly collect their data. The Everyone feed is available only to members 18 and over.

Changes

We’ll post updates to this page and flag material changes in the app.

Contact

contact@trakfit.app — Kiwi Labs LLC