Privacy Policy

Information you provide to us

Personal information you may provide to us through the Service or otherwise includes:

• Contact and account data, such as your name, email address and username. If you sign in with Apple, Apple gives us your name and either your email address or a private relay address that forwards to it.
• Profile data, such as your display name, profile and cover photos, bio, pronouns, website and any place you choose to show, and your settings: your time zone, language, units and currency (which the app reads from your device when you sign up), whether your account is public or private, who may send you friend, challenge and group requests, and whether you appear in search and suggestions.
• Activity and goal data, such as the activities you log or import (their titles, captions, times, measurements, photos, places, workout routes and the friends you tag), the niches you join, your goals, plans, programs, tasks and races, and the progress, streaks, records and badges that follow from them.
• Health and fitness data, such as the workouts you log or import and their distance, duration, pace, elevation, calories and heart rate; daily step counts; and measurements you choose to log, such as body weight, body fat, resting heart rate, heart rate variability, blood pressure, sleep, nutrition, fasting and mood. See consumer health data below.
• Social data, such as the people you follow, friend, block or mute, your reactions, comments, shares, bookmarks and mentions, the clubs, groups, meetups, challenges and events you create, join or RSVP to, the invitations you send and accept, and the reports you make about content or other users.
• Library data, such as the books, recipes, videos, races and other items you save, rate, review or take notes on, and the links you share to the app.
• Communications data based on our exchanges with you, including when you contact us by email.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources

We may combine personal information we receive from you with personal information falling within one of the categories identified above that we obtain from other sources, such as:

• Apple Health. If you connect Apple Health on your iPhone, the app reads the workouts you allow (runs, rides, walks, hikes and swims), their distance, duration, active energy and, if you allow it, their routes, along with your daily step counts and the name of the app and device that recorded each workout, and sends them to us. It reads in the background so new workouts arrive on their own. The first time, it reads the last 30 days.
• Strava. If you connect Strava, Strava sends us, with read-only access, your Strava athlete ID and name, and for each activity its name, sport, time, distance, moving and elapsed time, elevation gain, average and maximum heart rate, calories, a summary of its route, and its main photo. The first time, we read the last 30 days, and Strava tells us when you add new activities.
• Sign-in providers. If you sign in with Apple (or another sign-in provider we offer), it tells us who you are as described above.
• Other users, who may mention or tag you, invite you, add you to a club or challenge, or report you.
• Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction, for example from an entity we acquire or are acquired by, a successor, or an assignee, and/or in the context of an insolvency, bankruptcy, or receivership.

Automatic data collection

We and our service providers may automatically log information about you, your mobile device, and your interaction with the Service, such as:

• Device data, such as your device's platform, model, operating system and app version, its language and time zone, and, if you turn on notifications, a push notification token.
• Session and security data, such as when you signed in, and the IP address and user agent of each signed-in session, which we use to keep your account secure.
• Service log data, such as the requests your device makes to our servers, their timing and their outcome, which we use to operate, secure and debug the Service.
• Crash and diagnostic data, such as errors and crashes in the app, the steps and screens that led up to them, how long screens take to load, and, for some sessions, a recording of the app's screens with all text and images masked. These reports carry your account ID and IP address, and we use them to find and fix problems in the Service.

Location. If you allow it, the app reads your location once to show races near you first. It rounds it to about a kilometer before sending it, and we do not store it. The app does not track your location in the background. Workout routes come from Apple Health or Strava, not from the app, and we cut the first and last 250 meters off every route before we store it, so it never shows exactly where you started or stopped.

Microphone and speech. In cook mode, the app listens for spoken commands such as “next step.” Speech is recognized on your device where it supports that, and otherwise by your phone's speech service (Apple's on iPhone). We do not receive or store what you say.

Photos. The app only sees the photos you choose to add.

Data about others

You can tag friends in an activity, mention people, and invite people to join you. Please do not share someone's personal information with us, including in a photo, unless you have their permission.

Service delivery and operations

We may use your personal information to:

• provide the Service, including showing your activities and progress, counting your workouts toward your goals, importing from the apps you connect, building your feed, running challenges and leaderboards, and looking up the links you share;
• enable security features of the Service, such as sign-in codes;
• establish and maintain your user profile on the Service;
• facilitate social features, such as following, friends, clubs, meetups, challenges, invitations, comments and reactions, and show your content to the audience you choose;
• communicate with you about the Service, including by sending sign-in codes, in-app and push notifications you have not turned off, Service-related announcements, security alerts, and support and administrative messages; and
• provide support for the Service, and respond to your requests, questions and feedback.

Service personalization

We may use your personal information to:

• understand your interests, such as the niches you join and the goals you set;
• personalize your experience, such as suggesting people, clubs, programs and races; and
• remember your selections and preferences as you use the Service.

Service improvement and analytics

We may use your personal information to analyze your usage of the Service, improve the Service, help us understand how the Service is used, and develop new products and services. We do this with our own service logs and aggregated data; we do not use third-party analytics services.

Marketing and advertising

We do not show ads, we do not use your personal information for interest-based or targeted advertising, and we do not allow advertising partners to collect information through the Service. We never use information from Apple Health for advertising. We do not currently send marketing emails. If we start, we will give you a way to opt out of them.

Compliance and protection

We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims), including by reviewing reports and moderating content;
• audit our internal processes for compliance with legal and contractual requirements or our internal policies;
• enforce the terms and conditions that govern the Service; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

To create aggregated, de-identified and/or anonymized data

We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect, such as how many people are working on a program or have read a book. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you, and we will not attempt to reidentify any such data. We may use this data and share it with third parties for our lawful business purposes, including analyzing and improving the Service and promoting our business.

Further uses

In some cases, we may use your personal information for further uses, in which case we will ask for your consent if they are not compatible with the initial purpose for which the information was collected.

Your privacy rights

The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and some State Privacy Laws do not provide these rights to their residents. Therefore, we may decline your request in certain cases as permitted by law.

• Information. You can request the following information about how we have collected and used your Personal Information:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting and/or selling Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we sold or disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.
• Access. You can request a copy of the Personal Information that we have collected about you.
• Appeal. You can appeal our denial of any request validly submitted.
• Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You can ask us to delete the Personal Information that we have collected from you.
• Opt-out.
  • Opt-out of certain processing for targeted advertising purposes. We do not process your Personal Information for targeted advertising purposes.
  • Opt-out of or appeal profiling/automated decision making. We do not use your Personal Information to engage in profiling or to perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts. Suggesting people, clubs, programs and races, and counting workouts toward goals, are done for you, and never to make decisions about you.
  • Opt-out of other sales of personal data. We do not sell your Personal Information within the meaning of State Privacy Laws.
• Consumers under 16. We do not sell or share the Personal Information of anyone, including consumers under 16 years of age.
• Sensitive Personal Information. Some State Privacy Laws treat health information, and precise location such as a workout route, as Sensitive Personal Information. We process it only to provide the Service you ask for, and with your consent where the law requires it, which you give by choosing to log it or to connect Apple Health or Strava. We do not process Sensitive Personal Information for the purpose of inferring characteristics about consumers under the CCPA.

Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

Opting out of the “sale” or “sharing” of your Personal Information

We do not sell personal information, and we do not use services that deliver interest-based ads, so we do not “sell” or “share” your Personal Information as the State Privacy Laws define those terms. If we ever start, we will update this Privacy Policy first and give you a way to opt out. We nonetheless treat a Global Privacy Control (“GPC”) signal from your browser as a valid request to opt out of the sale or sharing of your Personal Information, and you may also send an opt-out request by email to support@kaizen.inc.

Exercising other state privacy rights

You may submit requests to exercise any of the other state privacy rights listed above via email to support@kaizen.inc.

Verification of identity; authorized agents

We may need to verify your identity in order to process your information, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law.

Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent's identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Laws rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Information practices

The following describes our practices currently and during the past 12 months:

• Sources and purposes. We collect all categories of personal information from the sources and use them for the business/commercial purposes described above in the Privacy Policy.
• Retention. The criteria for deciding how long to retain personal information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this notice, including complying with our legal obligations.
• Deidentification. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Personal information that we collect, use and disclose

We have summarized the Personal Information we collect, the purposes for which we collect it and the third parties to whom we may disclose it by reference below to both the categories defined in the Personal information we collect section of this Privacy Policy above and the categories of Personal Information specified in the CCPA (Cal. Civ. Code §1798.140). This chart describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in emails to us or in your posts, may contain other categories of personal information not described below.

Additional information for California residents

Shine the Light law. Under California's Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. We do not disclose personal information to third parties for their own direct marketing purposes. You may send us requests for this information to support@kaizen.inc. In your request, you must include the statement “Shine the Light Request,” and provide your first and last name and mailing address and certify that you are a California resident.

Additional information for Nevada residents

Nevada residents have the right to opt-out of the sale of certain personal information for monetary consideration. While we do not currently engage in such sales, if you are a Nevada resident and would like to make a request to opt out of any potential future sales, please email support@kaizen.inc.