Privacy policy
Last updated on October 26, 2026.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service.
The Service is intended for adults aged 18 or older in the United States. Our retail store has its own privacy notices. Our separate Health Data Privacy Notice supplements this policy where information qualifies as consumer health data under applicable US state law. This notice does not replace any separate consent required by law.
Interpretation and Definitions
Section titled “Interpretation and Definitions”Interpretation
Section titled “Interpretation”The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
Section titled “Definitions”For the purposes of this Privacy Policy:
- “Account” means a unique account created for You to access our Service or parts of our Service.
- Application means the software program provided by the Company downloaded by You on any electronic device, named Kratos Performance.
- “Company” (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Kratos Flyfitness LLC.
- “Country” refers to the United States (Oregon).
- “Cookies” are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- “Device” means any device that can access the Service such as a computer, a cellphone or a digital tablet.
- “Personal Data” is any information that relates to an identified or identifiable individual.
- “Service” refers to the Application and its related web application, connected personal-training features and support.
- “Service Provider” means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
- “Usage Data” refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- “You” means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Section titled “Collecting and Using Your Personal Data”Types of Data Collected
Section titled “Types of Data Collected”Personal Data
Section titled “Personal Data”While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and optional last name
- Usage Data
Category | Examples and sources |
|---|---|
Account and profile | Your email address, authentication and athlete identifiers, first name, optional last name, unit preferences, and app settings. Height and weight are optional profile measurements. |
Training information | Exercises, workout plans, sessions, exercise setups and their notes, timing and resistance measurements, and calculated performance results. These come from your entries, compatible training hardware, and calculations performed for the service. |
Media and movement analysis | Photos and videos you capture or import, any recorded audio included in your video, editing and annotation information, and derived movement landmarks, measurements, and analysis results. |
Connected devices | Pairing and connection information, device identifiers, device settings, and training measurements needed to connect and operate compatible hardware. |
Payments | Purchase, subscription, transaction, and payment-status information. Stripe handles payment details and any billing information collected through its checkout, as explained below. |
Usage and diagnostics | App interactions, screen views, feature usage, app and operating-system versions, device information, installation and account-linked identifiers, error reports, and technical network information such as IP addresses. Service providers may infer an approximate region from network information. |
Support | Messages you send to us and in-app bug reports. Bug reports include your description, reporter identifier, source screen, app version, phone model, and operating-system information. |
Physical measurements, performance records, videos, and information inferred from movement can be sensitive and may qualify as consumer health information under applicable law. Please only upload media or information about another person when you have the necessary permission.
Usage Data
Section titled “Usage Data”Usage Data is collected automatically when using the Service, subject to Your product-analytics choices and applicable consent requirements.
Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Information Collected while Using the Application
Section titled “Information Collected while Using the Application”While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission:
Photos and videos You capture or select, including any recorded audio.
Camera and microphone information for recording features.
Bluetooth and local-network access needed for compatible hardware.
Notification permissions where You enable notifications.
We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company’s servers and/or a Service Provider’s server or it may be simply stored on Your device.
You can enable or disable access to this information at any time, through Your Device settings.
Permissions: camera, microphone, selected photos/videos, Bluetooth, local network and notifications as required by the feature. Some operating systems require location permission for Bluetooth discovery; the app does not use it to record GPS routes. The optional voice trigger runs on-device. Audio in a video follows that video’s storage/upload choices.
Local storage: preferences, authentication state, media, results and caches. The related web application and third-party tools may use browser storage or cookies for authentication, security and optional analytics. The static support/legal pages contain no analytics or advertising scripts.
Photos, videos and movement analysis
Section titled “Photos, videos and movement analysis”Feature | Storage and processing |
|---|---|
On-device analysis | Source video remains local; successful derived results synchronize to private cloud records. This does not back up the source video. |
Cloud analysis of local video | Temporary upload of the source needed for the requested analysis. |
Cloud video storage | Separate stored source-video copy. |
Derived results | Body-position landmarks and movement measurements for performance analysis; not facial identification. |
Recordings can contain other people, places and conversations. Upload information about another person only with the necessary permission.
Use of Your Personal Data
Section titled “Use of Your Personal Data”The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
- For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
- To contact You: To contact You by email or other applicable forms of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
- To manage Your requests: To attend and manage Your requests to Us.
- For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
- For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, to evaluate and improve our Service, products, services and your experience, subject to Your optional analytics choice.
We use the relevant account, training, device and media information listed above to record and organize Your training, connect compatible hardware, calculate performance and movement results, and store and synchronize the records and media involved in the features You choose.
We do not sell Your Personal Data or share it for targeted or cross-context behavioral advertising. Training of AI models. We do not use private customer videos or health information to train or fine-tune our own AI or machine-learning models, including our movement-analysis models. Running a model to provide the analysis You request is separate from training a model.
We may share Your personal information in the following situations:
With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, for payment processing, to contact You.
For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company. When You export content or use Your device’s sharing tools, the recipient receives the material You select and may retain a separate copy. This policy does not control that recipient’s independent use. The disclosures above are subject to applicable privacy requirements.
Retention of Your Personal Data
Section titled “Retention of Your Personal Data”The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except where We are legally obligated to retain this data for longer time periods. The specific periods below apply to the listed categories.
Account profile, credentials, training history, saved media and analysis results are retained until you delete the information or request account deletion.
Temporary processing files: cleanup after processing; abandoned temporary files have a 7-day maximum.
User-level product analytics is retained for 2 months, without extending retention when new activity occurs. Aggregate reports may have separate lifecycles.
Routine application logs are retained for 30 days, subject to applicable legal obligations.
Support and communication history is retained for 12 months after resolution.
Our disaster-recovery backups: 30-day rolling rotation with deletion-aware restoration.
Transaction and billing records are retained for a 7-year business default, subject to applicable tax, accounting, or financial requirements.
When personal information is no longer required, we delete it. Where deletion is not technically feasible (for example, in encrypted backups), we isolate the data and prevent any further processing until deletion is feasible.
Cancellation or inactivity alone does not trigger deletion of training history. Provider-managed records have separate lifecycles: Firebase documents 90 days before Crashlytics removal begins; Resend documents 30-day email/log retention for specified plans.
Deleting Your Personal Data
Section titled “Deleting Your Personal Data”You have the right to request the deletion of Your Personal Data, subject to certain exceptions. Once We receive and confirm Your request, We will delete (and direct Our Service Providers to delete) Your personal information from our records, unless an exception applies.
Request path: account settings in the app, or the account-deletion page. Deletion runs in the background; completion is confirmed separately by email.
Active-system target: thirty days after a verified account-deletion request, subject to applicable legal deadlines. Restricted backups expire through rotation; necessary financial or legal records follow the schedule above.
Included data: personal account, profile measurements, account-owned training records, cloud media, analysis results and authentication identity. Limited technical course/device definitions may remain without personal labels. The completion email address remains until delivery is confirmed. Copies You exported or sent to others require separate removal; uninstalling the app does not delete a cloud account.
Your choices and privacy requests
Section titled “Your choices and privacy requests”Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
You may exercise Your rights of access, correction and deletion by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You as soon as possible.
Privacy contact: info@kratosflyfitness.com. Do not send passwords or payment-card details. Applicable appeal and authorized-agent rights are handled as required by law. Available profile fields, optional height/weight and device permissions can also be changed through the app or device settings.
Our Service does not respond to Do Not Track signals.
Transfer of Your Personal Data
Section titled “Transfer of Your Personal Data”Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Where applicable law requires separate consent for a transfer, We obtain that consent. This Privacy Policy alone does not supply it.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
A launch limited to US users does not mean every provider processes information only in the United States.
Disclosure of Your Personal Data
Section titled “Disclosure of Your Personal Data”Business Transactions
Section titled “Business Transactions”If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law enforcement
Section titled “Law enforcement”Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
Section titled “Other legal requirements”The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability
Security of Your Personal Data
Section titled “Security of Your Personal Data”The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Detailed Information on the Processing of Your Personal Data
Section titled “Detailed Information on the Processing of Your Personal Data”The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.
We use the following providers for specific operating purposes. The information involved depends on which feature you use.
Authorized Kratos personnel and contracted service providers may access relevant information, including stored training records and media when necessary, to provide the features you request, resolve support issues, diagnose failures, protect the service, and meet legal obligations. Access is limited to the information needed for these tasks. We obtain additional consent where required by applicable law.
Provider | Purpose and information involved |
|---|---|
Google Firebase and Google Cloud | Account authentication, databases, file storage, backend processing, security, analytics, and crash diagnostics. These services process the relevant account, training, media, usage, and technical information. Firebase Analytics and Crashlytics can associate events or reports with your account identifier. Firebase privacy information; Google privacy policy. |
Apple and Google attestation services | Verify that requests come from an authentic app or device. Native apps use Apple App Attest or Google Play Integrity; production web uses reCAPTCHA Enterprise. Apple privacy policy; Google privacy policy. |
Stripe | Process purchases, subscriptions, payment security, and related billing records. Stripe privacy policy. |
Resend | Deliver transactional account emails, including deletion-request and completion messages. This involves recipient email addresses, message contents, and delivery information. Resend privacy policy. |
Modal | Run cloud movement-analysis processing. The worker receives source media needed for your requested analysis, processing parameters, and an opaque request identifier. Modal privacy policy. |
Payment processing
Section titled “Payment processing”We may provide paid products and/or services within the Service. In that case, we may use third-party services for payment processing (e.g. payment processors).
We will not store or collect Your full payment-card numbers or card security codes. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy.
Stripe: Privacy policy. Billing details requested through checkout, including any billing address, are provided directly to Stripe. Our app stores purchase, subscription and payment-status records; an athlete profile does not require a postal address. Authorized staff may see billing information through Stripe. Stripe also processes information for fraud prevention and legal obligations under its own privacy policy.
Analytics
Section titled “Analytics”We may use third-party Service providers to monitor and analyze the use of our Service.
We obtain affirmative prior consent for non-essential product analytics. Where processing relies on consent, You can withdraw consent at any time, without affecting processing already carried out.
Provider: Google Analytics for Firebase.
Choice: off until accepted; changeable in app privacy settings; no loss of app features when declined.
Events: onboarding, screen views and feature adoption.
Excluded: health information, private media, movement results and free-text content. Advertising features are disabled.
Crash reporting
Section titled “Crash reporting”Diagnostic reports are used for troubleshooting.
Provider: Firebase Crashlytics.
Collection: automatic basic crash reporting where permitted; consent and withdrawal controls where required.
Scope: technical information needed to diagnose failures.
Children’s Privacy
Section titled “Children’s Privacy”Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18, We take steps to remove that information from Our servers.
Do not create an account or submit an athlete profile for someone under 18.
Links to Other Websites
Section titled “Links to Other Websites”Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
Section titled “Changes to this Privacy Policy”We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective on the date stated in the updated policy. We obtain new consent where required before introducing a use that needs it.
Contact Us
Section titled “Contact Us”If you have any questions about this Privacy Policy, You can contact us:
By visiting this page on our website: Kratos Performance support
By sending us an email: info@kratosflyfitness.com
Operator: Kratos Flyfitness LLC. Mailing address: 530 South Springbrook Rd, OR 97132, United States.