KR Español

Privacy Policy

Last updated: July 27, 2026 · Controller: José Tomás Acuña (KOR) · Contact: [email protected]

This Policy explains how KOR (“the App”, “we”) processes your personal data when you use the KOR mobile app and the site kortraining.app. It is written under Chile’s Law No. 19.628 on privacy protection and anticipates the structure of Law No. 21.719, which takes full effect on December 1, 2026.

1. Who we are

KOR is a training app that builds and adapts workouts from your profile, preferences, and available equipment. We currently operate as a natural person. Privacy and support contact: [email protected].

2. Data we process

• Account: email and password (hashed by our auth provider). Sign-in is email/password only today.
• Profile: name, date of birth (optional), sex (optional; you may choose “prefer not to say”), weight, height, experience level, goals, measurement system, and language.
• Training usage: sessions, exercises, sets, reps, weights, RIR and intensity feedback, training spaces and equipment, logged additional sports, equipment-scan logs, and AI-usage events (rate limiting, not advertising).
• Equipment photos: when you scan gear, the image is compressed and sent transiently to a vision model. We do not store those photos in our database or permanent storage.
• Minimal technical data: information needed for app updates (e.g. version and platform) via Expo’s update service.

Some profile and training data (weight, height, sex, workout history) may be considered health-related. We process them only to generate and adapt training — not for clinical or diagnostic purposes.

3. Purposes and legal bases

• Create and manage your account.
• Generate, adapt, and show training plans and sessions.
• Remember your equipment and preferences.
• Prevent abuse of AI features (per-user limits).
• Respond to support and rights requests.
• Comply with applicable legal obligations.

The main basis is performing the service you request by creating an account and using the App, and your consent when you provide optional profile data or use the camera.

4. Who we share data with

We do not sell your data. We use processors acting on our behalf:

• Supabase — authentication, database, and server functions.
• Anthropic — language and vision models for equipment detection and workout generation/adaptation. We send the necessary context (e.g. body weight in kg, level, exercise history, scan images). We do not send your email, name, or date of birth.
• OpenAI — embeddings for training-knowledge retrieval when that feature is enabled. No direct identity data.
• Replicate — synthetic catalogue images of equipment (not your photos).
• Expo — delivery of app updates.

These providers may process data in the United States or other countries. By using the App you accept that international transfer to the extent needed to provide the service.

We do not use advertising SDKs, third-party analytics, or third-party crash reporters in the current App build.

5. Retention

We keep your data while your account remains active. There is no automatic inactivity purge. When you delete your account, we remove your auth user and associated rows in our user tables (profile, sessions, set logs, spaces, programs, scan logs, AI-usage events, and related data).

6. How to delete your account and data

• In the App: Profile → Delete my account (double confirmation). Deletion is immediate.
• Without the App: use the account-deletion request page or email [email protected] from your account address. We will respond within 30 days.

7. Your rights

You may request access, rectification, erasure, objection and, where applicable, portability by writing to [email protected]. You can also edit much of your profile inside the App.

When Law No. 21.719 is fully in force, these rights will follow that statute and, where applicable, Chile’s Data Protection Agency.

8. Security

We use encryption in transit (HTTPS/TLS), token-based auth, database access control (RLS), and identity checks on server functions. No system is perfectly secure; if we detect a relevant breach we will notify you and, when required by law, the competent authority.

9. Children

KOR is intended for people 16 years or older. We do not knowingly collect data from children under 16. If you believe a minor registered, contact us to delete the account.

10. Device permissions

The App may request camera and photo-library access solely to scan equipment. You may deny these permissions; scan features will then be unavailable.

11. Changes

We may update this Policy. We will post the last-updated date on this page. For material changes we will use a reasonable notice (e.g. in-app or email).

12. Contact

[email protected]