Privacy Policy
The short version
- Your workout data lives in a local database on your device. It is never sent to a Kerge server.
- There is no cloud sync, no account, and no Kerge backend.
- Apple Health data stays on your device. We read and write it through Apple's HealthKit, never through our own servers.
- The app sends anonymous crash reports so we can fix bugs. No workouts, no health data, no personal identifiers.
- You can stop everything by uninstalling the app — that deletes all your Kerge data.
1. Who we are
Kerge is built and operated by an individual developer based in Estonia (European Union). For the purposes of the EU General Data Protection Regulation (GDPR), that developer is the data controller for any personal data this Privacy Policy refers to.
You can reach us at privacy@kerge.app.
2. What this policy covers
This policy describes how the Kerge mobile app for iOS and Android handles your information. It also covers the marketing website at kerge.app on which this policy is hosted.
It does not cover third-party services we link to (such as the App Store, Google Play, or external websites), or the Kergekava web planner, which is a separate product.
3. Data the app stores on your device
The app keeps everything you create — workouts, sets, plans, exercises, settings — in a local SQLite database stored in the app's private storage on your phone. This database is not uploaded anywhere by Kerge. It is included in your device backups (iCloud Backup or Google's device backup) only because the operating system backs up app data; we do not control or access those backups.
This local data may include:
- Workouts you log (exercises, sets, reps, weights, RPE, notes, timestamps)
- Plans and templates you build or import
- App settings and preferences (units, language, theme)
- Optional body-weight or measurement entries you choose to record
Because it is stored only on your device, you can delete all of it at any time by uninstalling the app.
4. Apple Health (HealthKit)
On iOS, Kerge can integrate with Apple Health if you grant permission. When you do:
- Reading: Kerge can read certain health data (for example, workouts, body weight, heart-rate context) so the app can show it alongside your training.
- Writing: When you finish a workout, Kerge can write the completed workout (and active energy) to Apple Health so it appears in the Health app.
All HealthKit data is read from and written to Apple's on-device Health store. Kerge never transmits HealthKit data to its own servers or to any third party. Health data also is not used for advertising, shared with data brokers, or used for any purpose other than providing the app's training features.
You can review or revoke Health permissions at any time in iOS Settings → Privacy & Security → Health → Kerge. There is no equivalent system on Android — Kerge does not currently integrate with Google Fit or Health Connect.
5. Other device permissions
Camera
The app can use your camera to scan QR codes when you import a shared training plan. The camera feed is processed only on your device, only while the QR scanner is open, and never recorded or transmitted.
Notifications
If you enable notifications, the app schedules local notifications on your device (for example, rest-timer alerts). Local notifications do not involve a Kerge server or a push-notification service.
6. No accounts and no cloud sync
Kerge does not have user accounts. There is no sign-up, no login, no Kerge-operated cloud, and no syncing across your devices through Kerge. We do not collect your email address, name, phone number, or any other identifier through the app.
7. Crash and error reports
To find and fix bugs, the app uses Sentry (operated by Functional Software, Inc.) to report crashes and errors. When the app crashes or hits an unexpected error, Sentry transmits diagnostic information so we can investigate. This typically includes:
- The error message and stack trace
- Device model, operating system version, and app version
- The approximate time the error occurred
- Anonymous identifiers Sentry uses to group related events
We have configured Sentry not to attach your workout content, your Apple Health data, or any data you have entered into the app. We do not knowingly send personally identifying information to Sentry. Sentry processes this data on our behalf as a processor under GDPR; you can read Sentry's own privacy notice at sentry.io/privacy.
Our legal basis for this processing is our legitimate interest in keeping the app stable and secure (Article 6(1)(f) GDPR).
8. App stores
The app is distributed through the Apple App Store and Google Play. When you install or update the app, those stores may collect data about you under their own privacy policies. Kerge does not receive identifying information about individual installs from those stores.
9. The kerge.app website
The marketing site at kerge.app is a static page. It does not set tracking cookies, does not run analytics, and does not have a comments or contact form.
For typography it loads web fonts from Google Fonts; doing so causes your browser to make a request to Google's servers, which can see your IP address and user-agent. See Google's privacy policy at policies.google.com/privacy.
10. Children
Kerge is not directed at children under 16. We do not knowingly process the personal data of anyone under 16. If you believe a child has used the app in a way that has caused us to process their data, please contact us at privacy@kerge.app and we will help you delete it (typically by uninstalling the app, which removes all locally stored data).
11. Your rights under GDPR
Because almost all of your data lives only on your device, most GDPR rights you can exercise yourself: you can access, correct, or delete your data directly inside the app, and you can erase all of it by uninstalling the app.
For the limited data we do process — namely Sentry crash reports — you have the right to:
- Request access to data we hold about you
- Request that we correct or delete it
- Object to processing or request that we restrict it
- Lodge a complaint with your local data protection authority (in Estonia, the Andmekaitse Inspektsioon, aki.ee)
To exercise any of these rights, email privacy@kerge.app. Note that because Sentry events are not tied to a real-world identity, we may need additional information (such as the approximate time of a crash and your device model) to find data relating to you.
12. International transfers
Sentry stores data in regions selected by us; processing may take place outside the European Economic Area. Where it does, we rely on the safeguards Sentry provides (including the European Commission's Standard Contractual Clauses) under GDPR Article 46.
13. Data retention
Data on your device is retained until you delete it or uninstall the app. Sentry crash events are retained for up to 90 days, after which they are deleted automatically.
14. Changes to this policy
If we change how the app handles your data we will update this page and bump the "Last updated" date above. Material changes will also be flagged in the app's release notes.
15. Contact
Questions, requests, or concerns about privacy: privacy@kerge.app.