Privacy Policy

Last updated: September 29, 2026

1. Who we are

Kongo ("Kongo", "we", "us") is a workout tracking app for iPhone and Apple Watch, built by Nazareno Alvarez. This policy covers the website at kongofit.com and the Kongo app. For anything about your privacy, write to privacy@kongofit.com.

2. The website (kongofit.com)

The early-access list

If you join the early-access list, we store:

  • your email address;
  • which form you used (for example the home page or a blog post) and when you signed up;
  • your first name, if you chose to give it.

We use it to tell you when Kongo launches. The forms say one email, and we mean it: we won't send you anything else from this list. We delete the list within 12 months after launch, and you can ask us to remove your address at any time by writing to privacy@kongofit.com.

To stop automated sign-ups, the sign-up service keeps a short-lived, one-way keyed hash of your IP address (never the address itself) so it can limit repeated attempts. It can't be turned back into your IP address, and it's set to expire after two hours.

Hosting

The site is served by Cloudflare, which processes your IP address and basic request details (such as the page requested and your browser type) to deliver the page and protect the site from abuse.

No cookies, no trackers

kongofit.com sets no cookies and runs no analytics or advertising scripts. Fonts, images and the trailer are served from our own domain.

The one thing the home page keeps in your browser is your progress through it (which of the page's stickers you've earned and how far down the page you've got), in local storage, so it survives a refresh. It stays on your device and is never sent to us. "Start over" in the sticker sheet, or clearing your browser's site data, removes it.

Invite links

When a friend shares a Kongo invite link, the invite code is part of the address (for example kongofit.com/invites/KNG-XXXX). The page reads it in your browser to show it to you; it isn't stored.

3. The app

Your account

You sign in with Apple. Apple gives us an account identifier and, if you choose to share them, your name and email address. If you pick "Hide My Email", we only ever see Apple's relay address.

Your profile and training

  • Profile details you enter: display name, bio, avatar colour, and, if you fill them in during setup, your birthday, sex, experience level, training goal, preferred split, training days and time, and units.
  • Your training: routines and programs, workouts, sets, reps, weights, rest times, personal records, streaks, achievements (stickers) and related settings.
  • Reminder preferences, your time zone (so reminders arrive at the right hour) and your language.

Friends

If you use the social features, we store your invite code, your friend connections, and the activity you share (such as finished workouts, streak milestones, stickers and banana reactions). Your activity is only shown to people you've added as friends, and only what your privacy settings allow; you can change those settings at any time in the app. Someone you send a friend request to, or who has your invite code, can see your display name.

Photos

If you add a photo to a share card, the app uses it on your device to build the image you share. We don't upload or keep your photos.

Notifications

If you allow notifications, we store a push token for your device so we can send workout reminders and streak alerts. You can turn them off in iOS Settings → Notifications → Kongo.

Subscriptions

Kongo Pro is bought through the App Store. Apple handles payment; we never see your card details. RevenueCat tells us whether your subscription is active, using your Kongo account identifier and the purchase record Apple provides.

Usage analytics and crash reports

  • Firebase Analytics (Google) records how the app is used, such as which screens are opened and when a workout is finished, together with device details (model, iOS version), an app instance identifier and your approximate location derived from your IP address.
  • Mixpanel records the same kind of usage events, linked to your account. Your Mixpanel profile includes your name and email and a few account properties (such as your plan, streak, units, language, experience level, goal, age and sex if you gave them). IP address collection is turned off.
  • Crashlytics (Google) collects crash reports: the error, device details and your account identifier, so we can fix what broke.

We use these to understand what works, fix problems and decide what to build. Not for advertising.

On your devices

Widgets, Live Activities and the Apple Watch app show your data from your own devices. Kongo doesn't read Apple Health data.

4. Why we use it (and the legal basis)

  • To provide Kongo: your account, logging, programs, streaks, stickers and friends. Necessary to deliver the service you asked for.
  • To tell you about the launch: the early-access email. Based on your consent, which you can withdraw at any time.
  • To send notifications: based on your permission in iOS.
  • To improve and fix the app: analytics and crash reports. Based on our legitimate interest in a working, useful app.
  • To keep things safe: preventing abuse and automated sign-ups. Based on our legitimate interest in security.
  • To meet legal obligations, such as record-keeping for purchases.

5. Who else processes it

We don't sell or rent your personal data, and we don't share it for advertising. These providers process it on our behalf:

We may also disclose information if the law requires it, or to protect the rights and safety of our users or others. If Kongo is ever sold or merged, your data would move with it under this policy, and we'd tell you first.

Some of these providers process data in the United States and other countries. Where the law requires it, the transfer is covered by safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Your account and training data: until you delete your account.
  • The early-access list: until 12 months after launch at the latest, or sooner if you ask.
  • Sign-up rate-limit hashes: set to expire after two hours.
  • Crash reports: 90 days.
  • Analytics: up to 14 months in Firebase Analytics. In Mixpanel, until you delete your account and ask us to remove it (see below).

7. Your choices and rights

  • Delete your account: Settings → Account → Delete account. This deletes your profile and training data from our database right away and removes your sign-in.
  • Get a copy of your data: Pro members can export it from Settings → Account. Anyone can ask us for a copy by email.
  • Correct it: most of it you can edit in the app. For anything else, write to us.
  • Leave the early-access list: write to us and we'll remove your address.
  • Notifications and sharing: turn them off in iOS Settings and in the app's privacy settings.

Deleting your account doesn't reach data already held by the analytics and crash-reporting services. Write to privacy@kongofit.com and we'll ask them to delete it too. The same goes for anything that seems to remain after deletion, such as an old item in a friend's activity feed.

Depending on where you live (for example under the EU or UK GDPR, Brazil's LGPD or California's CCPA), you may also have the right to object to or restrict how we use your data, to withdraw consent, and to complain to your data protection authority. Write to us to use any of these rights. We'll answer within 30 days, and we won't treat you differently for asking.

8. Security

Data is encrypted in transit, and access to our database is limited by security rules so each account can only reach its own data (plus what friends have chosen to share). No system is perfectly secure, but we take reasonable measures to protect what you trust us with, and we'll tell you if a breach affects you.

9. Children

Kongo is not meant for children under 13, or under the minimum age for this kind of service in your country, and we don't knowingly collect their data. If you believe a child has given us personal data, write to us and we'll delete it.

10. Changes to this policy

If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you in the app (or by email if you're on the early-access list) before it takes effect.

11. Contact

Questions, requests or complaints: privacy@kongofit.com.