Privacy Policy

Introduction

Welcome to Kalla ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our fitness tracking application.

Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Username
• Profile information you choose to provide

Fitness Data

Through our integration with Strava and your manual inputs, we collect:

• Activity data (runs, rides, swims, etc.)
• Performance metrics (distance, time, pace, heart rate, etc.)
• Training plans and workout schedules
• Goals and progress tracking data

Usage Information

We automatically collect certain information when you use our app:

• Log data (IP address, browser type, access times)
• Device information
• App usage patterns and preferences

How We Use Your Information

We use your information to:

• Provide and maintain our fitness tracking services
• Sync and display your Strava activities
• Create personalized training plans and recommendations
• Track your progress toward fitness goals
• Send you notifications about your training
• Improve our services and develop new features
• Communicate with you about your account and our services

Third-Party Services

Strava Integration

We integrate with Strava to sync your activities. When you connect your Strava account, you authorize us to access your Strava data according to the permissions you grant. We only access the data necessary to provide our services. Your Strava data is governed by Strava's own privacy policy.

Service Providers

We use trusted third-party services to help us operate our application:

• Supabase: For authentication and data storage
• Vercel: For hosting and deployment

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

• Access and receive a copy of your personal data
• Update or correct your information
• Delete your account and associated data
• Disconnect your Strava integration at any time
• Opt-out of non-essential communications

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this privacy policy or our practices, please contact us at:

Email: [email protected]
Address: [Your Company Address]

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Consent: For Strava integration and marketing communications
• Contract: To provide our services and fulfill our agreement with you
• Legitimate interests: To improve our services and ensure security

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell your personal information).