Privacy Policy

Propal ("we", "us") respects your privacy. This policy explains what we collect, why, and the choices you have.

1. Data we collect

• Account data: email, password hash, display name.
• Fitness data: workouts, steps, heart-rate, sleep and activity records you sync from connected services (e.g. Strava, Fitbit, Apple Health, Garmin, Google Fit).
• Usage data: anonymized analytics about how the app is used, to improve features.
• Device data: browser, OS and IP address for security and abuse prevention.

2. How we use it

To provide the service, sync your devices, calculate XP and progress, send essential service emails, and improve the product. We do not sell your personal data. Ever.

3. Legal bases (GDPR)

We process data under contract (delivering the service you signed up for), legitimate interest (security, analytics), and consent (marketing, optional cookies).

4. Sharing

We share data only with processors who help us run Propal (hosting, auth, analytics) under strict data-processing agreements, and with services you explicitly connect.

5. Your rights

You can access, export, correct or delete your data at any time from your dashboard or by emailing privacy@kon.fit. EU/UK residents may complain to their local DPA. California residents have CCPA rights.

6. Retention

We keep account and fitness data while your account is active and for up to 30 days after deletion (for backups and abuse review), then we erase it.

7. Security

Encryption in transit and at rest, row-level access control, audited backups. No system is perfectly secure — please use a strong, unique password.

8. Children

Propal is not directed to children under 13 (or 16 in the EU). We do not knowingly collect their data.

9. Changes

We'll notify you in-app or by email before material changes take effect.

10. Contact

Questions? Contact us or email privacy@kon.fit.