Privacy Policy

Last Updated: 13 April 2026
Effective Date: 13 April 2026

Introduction

Your privacy matters to us. This Privacy Policy explains how GrandPoint Ltd ("we," "us," "our") collects, uses, stores, and protects your personal information when you use the Kinesa fitness and wellness tracking application ("App," "Service").

By using Kinesa, you consent to the practices described in this Privacy Policy.

Key Information

Legal Basis

We process your data under:

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

Fitness and Health Data (voluntarily provided by you):

Payment Information:

1.2 Information from Third-Party Integrations

Wearable Devices and Health Platforms (with your explicit permission):

You control which data types we access through device permissions. You can revoke access at any time in your device settings.

1.3 Information from Third-Party Databases

Nutrition Data:

When you scan a food barcode, Kinesa queries the Open Food Facts database (https://openfoodfacts.org) to retrieve product name and nutritional information. This query includes the barcode number only. Open Food Facts is an open-source, community-maintained database and is not operated by us. Please refer to their privacy policy for how they handle queries.

1.4 Information Collected Automatically

Usage Data:

We use analytics to improve the app, not for advertising.

1.5 Information We Do Not Collect

We do not collect:

2. How We Use Your Information

We use your data to:

3. How We Share Your Information

We do not sell your data. We share data only as follows:

Service Providers:

Community Features (Unity):

Legal Requirements:

We may disclose data if required by law or to protect our rights.

4. AI-Powered Features

Kinesa includes two types of AI features:

4.1 In-Workout AI Coach (On-Device, Rule-Based)

The AI Coach that provides real-time workout guidance, progressive overload suggestions, fatigue awareness, and form reminders during gym sessions:

4.2 AI Fitness Coach Chat (Third-Party AI Sub-Processor)

The AI Fitness Coach chat feature provides personalised fitness coaching, workout recommendations, form guidance, and fitness advice:

Before using the AI Fitness Coach chat for the first time, you will be presented with a consent dialog explaining what data is shared and with whom.

5. Data Retention

We retain your data while your account is active. Upon account deletion:

6. Data Security

We use industry-standard security practices including:

No system is 100 percent secure. If you become aware of a security issue, contact privacy@kinesa.app.

7. Your Rights Under UK GDPR and EU GDPR

You have the right to:

To exercise any right, contact privacy@kinesa.app. We respond within 30 days.

8. Children's Privacy

Kinesa is intended for users 16 years and older. Users aged 13-15 may use Unity community features only with verified parental or guardian consent. We do not knowingly collect personal data from children under 13.

9. International Data Transfers

Your data is primarily stored on Firebase servers. Some service providers may process data outside the UK/EU under appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. Community Features (Unity)

10.1 Data We Collect in Unity

When you participate in Unity features, we collect:

10.2 Who Sees Your Data

Other participants can see:

We never share your email, exact location, or full health data with other participants without your explicit consent.

10.3 Your Choices

You can:

10.4 Data Retention for Unity

11. Camera and Barcode Scanning

Kinesa requests camera access for:

Camera access is requested only when you use these features. You can revoke camera permission at any time in your device settings. Barcode images are processed on-device and are not stored or transmitted; only the decoded barcode number is sent to Open Food Facts.

12. Notifications

Kinesa may send push notifications for:

You can manage notification preferences in Settings or your device settings.

13. Cookies and Tracking Technologies

Kinesa is a native mobile app and does not use cookies. Firebase SDKs may store small amounts of data locally for analytics and crash reporting.

14. Marketing and Communications

We may send occasional marketing communications about new features. You can opt out at any time. Transactional communications (account security, important account changes) cannot be opted out of.

15. Third-Party Links and Services

Kinesa may link to third-party services. Their privacy policies apply when you use those services.

16. Changes to This Privacy Policy

We may update this policy and will notify you of material changes through the app or email. Continued use after changes constitutes acceptance.

17. Contact Us

Document Version: 5.0