LegalBefore the legal language — the short version
We collect what we need to run your training programs and score your sessions honestly: your profile info and your workout logs. We don't sell your data. We use Supabase to store it and Cloudflare to serve the app. You can request deletion of your account and all associated data at any time — see the Account Deletion section below.
1. Who We Are
Krakish is a training app built and operated by Krakish Forge LLP ("Krakish," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use the Krakish web app and any future mobile apps (together, the "App"), why we collect it, and what control you have over it.
By creating an account or using the App, you agree to the practices described here. If you don't agree, please don't use the App.
2. What We Collect
We collect only what's needed to run your training programs, score your sessions, and keep your account working. Specifically:
Account & profile information
- Name and email address (used to create and secure your account)
- Password (stored encrypted — we never see or store it in plain text)
- Optional profile details you choose to add: age, gender, bodyweight, training experience, injury or mobility notes you enter yourself (e.g. wrist or elbow constraints), and equipment access
Training & workout data
- Workout logs: exercises, sets, reps, weights, RPE, and timestamps
- Program and quest selections, progress, and completion history
- XP, levels, badges, streaks, and other progression data derived from your logged sessions
- Custom exercises you create
Technical & usage information
- Device and browser type, IP address, and general location (city/region level, derived from IP — we do not track precise GPS location)
- App usage data: pages visited, features used, session length, crash and error logs — collected to keep the App working and to understand which features are actually useful
We do not collect payment information at this time, as Krakish is currently free during beta. If paid plans are introduced later, this policy will be updated before any payment data is collected, and processing will be handled by a licensed third-party payment processor — we will never store your card details ourselves.
3. How We Use Your Data
We use the information above to:
- Create and maintain your account
- Generate and adapt your training programs based on your logged performance
- Calculate XP, levels, badges, and other progression honestly — based on what you actually logged
- Sync your data across devices and enable offline use
- Diagnose bugs, fix errors, and improve the App's performance and features
- Communicate with you about your account, beta updates, or changes to this policy
We do not use your training or health data to build advertising profiles, and we do not sell it to advertisers or data brokers.
5. How We Secure It
We rely on industry-standard security practices provided by our infrastructure partners, including encryption in transit (HTTPS/TLS) for all data sent to and from the App, and encrypted storage at rest via Supabase. Access to production data is restricted to what's operationally necessary.
No system is 100% secure, and we can't guarantee absolute security — but we take reasonable, industry-standard steps to protect your information and will notify affected users promptly in the event of a data breach that puts your information at risk, as required by applicable law.
6. How Long We Keep It
We keep your account and workout data for as long as your account is active, so your training history and progression remain intact. If you delete your account, we delete your personal data as described in the Account Deletion section below, except where we're required to retain certain records for legal or accounting purposes.
7. Your Rights
Depending on where you live, you may have rights under applicable data protection law — including India's Digital Personal Data Protection Act (DPDPA) and, for users in the EU/UK, the GDPR. These generally include the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data (see below)
- Withdraw consent for processing, where consent is the basis for that processing
- Export your data in a portable format, on request
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us using the details in the Contact section.
8. Account & Data Deletion
You can delete your Krakish account and all associated data at any time, in either of two ways:
In the app
In-app account deletion is on our roadmap and not yet available in the current beta build. Until it ships, please use the request form below — we process these promptly.
By request (available now)
Submit the form below, or email us directly, and we'll delete your account and all personal data associated with it — profile information, workout logs, progression history, and login credentials — typically within a few business days. We'll send a confirmation once it's done.
Request account deletion
Note: some minimal records (e.g. transaction logs required for legal/accounting compliance, if applicable) may be retained for the period required by law, even after account deletion. These are not used for any other purpose.
9. Children's Privacy
Krakish is not directed at children under 16, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy as Krakish evolves — for example, when we ship new features, add new data processors, or launch paid plans. We'll update the "Last updated" date at the top of this page, and for material changes, we'll make reasonable efforts to notify active users directly (e.g. via email or an in-app notice) before the changes take effect.
11. Contact
Questions about this policy, or want to exercise any of the rights above? Reach out to:
Krakish Forge LLP
Email: support@krakish.com