Privacy Policy

This Privacy Policy explains how KN Digital Solutions LLC (“we”, “us”, “our”), the operator of Living Workout Journal (the “Service”), collects, uses, and shares information when you use it. It should be read alongside our Terms and Conditions.

We collect:

• Account information you give us at signup — your name, email address, and password (stored securely by our authentication provider; we never see your plaintext password).
• Training data you choose to enter — training goals, experience, equipment, injuries or limitations, body metrics (e.g. weight), workout sessions, sets, programs, templates, notes, and progress entries.
• AI conversation data — messages you send to the AI coach, and the journal context (such as your profile and active session) used to generate a relevant response.
• Trainer–client links — if you connect your journal to a trainer (or a client), we record that link and the access it grants.
• Technical data — log data such as IP address, browser/device type, and request timestamps, generated automatically as part of running and securing the Service.

We use the information above to:

• Provide, operate, and maintain the Service, including your journal and AI coach;
• Authenticate you and keep your account secure;
• Enable trainer–client features you set up;
• Diagnose problems, monitor performance, and protect against abuse or security threats;
• Communicate with you about your account or material changes to the Service or these policies; and
• Comply with legal obligations.

We do not sell your personal information, and we do not use your training data to serve you advertising.

We share information only with the service providers that help us run Living Workout Journal, under contracts that limit their use of your data to providing that service to us:

• Supabase — our database, authentication, and backend hosting provider, which stores your account and training data.
• Vercel — hosts and serves the application itself.
• MiniMax (operated by Nanonoble Pte. Ltd., Singapore) — the third-party AI provider that powers the AI coach. We only send it your data if you allow it: you’re asked during sign-up (and existing users the next time they open the app), and you can turn it off at any time in your account settings (web: Profile → Account → AI coach; mobile: More → AI coach & privacy). With your permission, it receives your workouts and sets, goals, training history, the profile and health notes you enter (such as injuries or limitations), journal notes, and what you type in coach chat — both when you chat with the coach and automatically, to write your post-workout reflections, weekly reviews, your onboarding summary, and (if you have a trainer who also uses the AI coach) their weekly digest. It processes this data only to generate those responses.
• We never send your email address to the AI provider. If you set a nickname, it only ever receives your nickname; otherwise it receives your first name only, never your full name. Anything you type yourself (notes, chat messages) is sent as written. If you turn the AI coach off, AI features stop and nothing further is sent; trainers’ digests leave you out.

If you link your journal to a trainer (or a client), the information needed for that relationship — such as your training data — becomes visible to them within the Service, as you’ve directed.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of KN Digital Solutions LLC, our users, or others. If we’re ever involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Policy.

We retain your account and training data for as long as your account is active, so the Service can keep working as intended.

You can delete your account at any time from within the app — on the web under Profile → Account, and in the mobile app under More → Delete account — without contacting us. When you do:

• Your account is disabled and you are signed out immediately, and every trainer/client connection is removed. Trainers or clients you were connected to lose access to your information straight away, including in summaries they had already received.
• Your data is kept, hidden and inaccessible, for 30 days in case you change your mind. You can recover the account during that time by signing in and confirming a code we email you. Recovery does not restore trainer/client connections.
• After those 30 days your account is permanently deleted in our next weekly deletion run, so deletion completes 30 to 37 days after your request, and we email you to confirm it. This removes your account, your training data, your AI coach conversations and any files you uploaded, such as feedback screenshots. Content you added to someone else’s journal (for example, a trainer’s note on a client’s journal) stays with that person, with your name removed.
• Copies in our encrypted backups expire automatically on our providers’ rolling backup schedule. If a backup is ever restored, we re-apply completed deletions before the Service is used again. To do that, we keep a minimal record that a deletion happened (an internal account identifier and dates, with no training data) for 90 days.

We may retain limited data where we need to in order to comply with a legal obligation or resolve disputes.

We use reasonable technical and organizational measures — including encryption in transit, access controls, and row-level security on your data — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our infrastructure providers operate primarily in the United States, so your information is generally processed and stored there. If you access the Service from outside the United States, you understand that your information will be transferred to, and processed in, the United States.

If you allow the AI coach, the data described in Section 4 is also sent to our AI provider, MiniMax, which is operated by a company based in Singapore and may process it outside your country.

Regardless of where you live, you may contact us at support@dodson.me.uk to:

• Request a copy of the personal information we hold about you;
• Ask us to correct inaccurate information;
• Ask us to delete your account and associated personal information (you can also do this yourself in the app — see Section 5); or
• Ask a question about how your information is handled.

We will respond within a reasonable time and may need to verify your identity before acting on a request.

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 16. If you believe a child under 16 has provided us with personal information, contact us at support@dodson.me.uk and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you (for example, by email or an in-app notice) before they take effect.

KN Digital Solutions LLC
Georgia, United States
Email: support@dodson.me.uk