Privacy Policy

1. Introduction

Kymera ("we", "our", "us") operates the Kymera mobile application and web platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password. If you sign in with Apple or Google, we receive your name and email from those providers.

2.2 Profile Information

You may optionally provide additional details such as phone number, date of birth, height, weight, bio, and a profile photo. Studio owners may provide facility details including name, address, phone, and logo.

2.3 Booking & Activity Data

We store data related to your use of the Service, including bookings, waitlist entries, training logs, goals, fitness metrics, and injury records you choose to enter.

2.4 Health Data

With your explicit permission, the mobile app may read data from Apple Health (steps, heart rate, calories) and write completed workouts back. This data is only accessed on-device and is not sent to our servers.

2.5 Push Notifications

If you enable notifications, we store a device token to deliver booking reminders, confirmations, and status updates. You can disable notifications at any time in your device settings.

3. How We Use Your Information

• Provide and maintain the Service (bookings, schedules, waitlists)
• Send transactional emails (booking confirmations, cancellations, waitlist updates)
• Display your profile information to studio owners when you make a booking
• Generate calendar feeds (iCal) for studio schedules
• Improve and personalize the Service
• Communicate with you about your account and respond to support requests

4. Data Sharing

We do not sell your personal information. We share data only in these limited cases:

• With studios you book: Your name, email, phone, and injury information are visible to the studio for the purpose of managing your booking.
• Service providers: We use Supabase for data storage and authentication, and Resend for transactional emails. These providers process data on our behalf under strict data processing agreements.
• Legal requirements: We may disclose information if required by law or to protect the rights, property, or safety of our users.

5. Data Storage & Security

Your data is stored securely on Supabase infrastructure with row-level security policies ensuring users can only access their own data. All data is transmitted over HTTPS. We implement industry-standard security measures, but no method of transmission or storage is 100% secure.

6. Your Rights

You have the right to:

• Access and review the personal data we hold about you
• Update or correct inaccurate information via your profile settings
• Request deletion of your account and associated data
• Withdraw consent for optional data processing (e.g. health data, notifications)

To exercise these rights, contact us at privacy@kymera.fit.

7. Data Retention

We retain your data for as long as your account is active. Booking history is kept for record-keeping purposes. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. Third-Party Services

The Service integrates with Apple Sign In, Google Sign In, Apple Health, and calendar applications (via iCal). Each of these services has its own privacy policy. We encourage you to review their terms.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

privacy@kymera.fit
Contact form