RoxKit ("we", "us", or "our") respects your personal privacy. This Privacy Policy explains how our mobile applications (iOS, watchOS) and web services collect, use, and protect your information when you use RoxKit.
1. Information We Collect
We collect information to provide you with functional fitness workout analytics, interval split times, and recovery metrics:
- Account Information: When you register an account, we collect your email address, full name, and encrypted authentication credentials. If you choose to use the app in Guest Mode, no personal account information is stored.
- Workout & Fitness Telemetry: Workout activities, station split times, heart rate averages, peak heart rates, estimated energy burned (calories), distance, and pacing.
- Recovery Metrics: Sleep duration, Sleep Score, Resting Heart Rate, and Heart Rate Variability (HRV) synced from Apple Health with your permission.
Apple HealthKit Data Protection (Guideline 5.1.3 Compliance)
RoxKit accesses your Apple Health data strictly to display and analyze your functional workouts and physiological recovery metrics. In accordance with Apple Developer guidelines:
- Your HealthKit data is NEVER used for advertising, marketing, or promotional purposes.
- Your HealthKit data is NEVER sold, rented, or transferred to third-party data brokers or commercial entities.
- Your HealthKit data is not used for use-based data mining.
- HealthKit telemetry is synced only with your explicit permission and can be revoked at any time in your iOS Settings under Privacy & Security > Health > RoxKit.
2. How We Use Your Information
We use your information exclusively to:
- Calculate station pacing, split deltas, and lactate threshold zone metrics during functional fitness workouts.
- Deliver interactive performance analytics, charts, and recovery tracking in your dashboard.
- Allow you to review historical training logs across Apple Watch, iPhone, and Web.
- Optionally post completed workout summaries to Strava if you explicitly authorize Strava integration.
3. Data Storage and Security
Your account data and workout records are securely encrypted in transit using Transport Layer Security (TLS/HTTPS) and stored in secure cloud database infrastructure provided by Supabase. Access to personal data is restricted by Row Level Security (RLS) policies guaranteeing that only you can access your workout data.
4. Account and Data Deletion (Guideline 5.1.1(v))
You have full ownership of your data. You may delete your account and all associated telemetry at any time:
- In-App Deletion: Open RoxKit > Settings > scroll to Danger Zone > tap Delete Account. Confirming this action will immediately and permanently delete your user profile, all workout split logs, heart rate records, and stored settings from our databases.
- Manual Request: You may also email us at nathancannon@gmail.com with the subject "Delete My Account", and your account and data will be permanently expunged within 48 hours.
5. Children's Privacy
RoxKit does not knowingly collect or solicit personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will immediately delete that information.
6. Changes to This Policy
We may update our Privacy Policy periodically. We will notify you of any material changes by updating the "Last updated" date of this policy and displaying a notice within the app.
7. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:
RoxKit Support
Email: nathancannon@gmail.com