Privacy Policy

Last updated: 2026-10-08

1. What we collect

• Account info: email address and a display name you choose.
• Logged data you enter: food logs, favorites, weight entries, supplement logs, lifts, training splits, and the goals/profile fields you fill in (age, sex, height, activity level, weight) — used to power the goal calculator and entirely optional beyond what's needed for core tracking.
• AI-related content: text descriptions and photos you submit for macro estimation, questions you ask Ask AI, and — after you end a workout — a summary of that session's lifts plus light recent nutrition context (used to generate your post-workout Session Analysis) are sent to a third-party AI provider (Anthropic), via our server, never directly from your device, to generate a response. We don't use this content to train models. This only happens after you explicitly agree to it in the app's AI consent screen, and only while you have an active subscription — you can withdraw this consent at any time from Profile, which turns these features back off.
• Basic usage counters: a per-day count of AI calls per account, used only to enforce daily usage limits.
• Referral and friend codes: your referral code, and — if you choose to add a friend or accept a friend request — the resulting connection between your account and theirs.
• Purchase records (iOS): if you subscribe from the iOS app, Krafft logs the resulting Stripe checkout session and subscription id against your account, so purchases made outside Apple's in-app purchase system can be reported to Apple as required.

2. What we don't do

• We don't sell your data.
• We don't share your raw logged data (individual food logs, lifts, weight entries, etc.) with other users, ever. Every account's data is technically walled off from every other account at the database level (Row Level Security), not just hidden by the app's interface.
• The one exception: if you add a friend and they accept (or vice versa), that person can see three summary numbers about your training — your current streak, how many distinct exercises you've logged, and your all-time lift volume. That's it: no dates, no individual lifts, no food/weight/supplement data, no photos. Opt-in on both sides; removing a friend stops the sharing immediately.
• We don't use your food/supplement/weight/lift logs for advertising, and AI-sent content is never used for advertising either.

3. How your data is stored

Data is stored in a Supabase-hosted Postgres database. Photos submitted for macro estimation are sent to our serverless function and to our AI provider for processing; we don't retain a separate copy of submitted photos beyond what's needed to complete that single request.

4. Your controls

• Edit or delete any logged entry (food, weight, supplement, lift) at any time from within the app.
• Export your logging history as a file from Settings.
• Withdraw AI consent at any time from Profile — this immediately disables all AI features.
• Remove a friend at any time from Profile, which immediately stops sharing your leaderboard numbers with them.
• Permanently delete your account from Profile → Delete Account. This is irreversible and immediately removes your profile, goals, body stats, food logs, favorites, weight log, supplement logs, lifts, training splits, photos, and every other table that references your account — in-app, not by emailing anyone.

5. Children's privacy

Krafft is not directed at children under 13, and we don't knowingly collect data from users under 13. If you are a parent or guardian and believe your child under 13 has created an account, contact us (see below) and we will delete it.

6. Third parties involved in processing your data

• Supabase — hosts our database and handles authentication.
• Netlify — hosts the app and serverless functions.
• Anthropic — processes AI-estimation and Ask AI requests, only after you've consented and only on the paid tier.
• Stripe — processes subscription payments, including purchases made from the iOS app via the external website checkout. We never see or store your card details; Stripe shares back only what we need to manage your subscription.

We don't add analytics or advertising trackers beyond what's needed to run the app.

7. Changes to this policy

We may update this Privacy Policy as the app changes. Material changes will be noted with an updated "Last updated" date above.

8. Contact

Questions about this policy or a data-deletion request can be directed to odoglusk+platedsupport@gmail.com.