Effective Date: February 18, 2026
X2machines, LLC ("Company," "we," "us," or "our") operates the Korza Training mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. We are committed to protecting your privacy, especially given the sensitive nature of health and fitness data.
With your explicit permission, we read and write the following Apple Health data:
Apple Health data is never sold, shared with advertisers, or used for purposes other than providing App functionality. You can revoke Apple Health access at any time in your device Settings.
If you connect a wearable device (e.g., WHOOP, Oura), we collect recovery, strain, and sleep data through their authorized APIs. This data is used solely to enhance your readiness and recovery insights within the App.
WHOOP Integration: If you choose to connect your WHOOP account, we may collect heart rate variability (HRV), strain scores, recovery scores, and sleep performance data from your WHOOP device via the WHOOP API. This data is used to calculate daily readiness scores and provide personalized recovery insights within the App. Connecting your WHOOP account is entirely optional. You may disconnect your WHOOP account at any time through the App's Settings, at which point we will cease collecting new data from WHOOP. Previously synced WHOOP data will be retained in accordance with Section 5 (Data Retention) of this policy unless you request its deletion.
| Purpose | Data Used |
|---|---|
| Provide workout programs and tracking | Profile, workout logs, exercise data |
| Calculate daily readiness scores | HRV, sleep, self-reported assessments |
| Generate recovery recommendations | Health data, workout history, readiness |
| Enable therapist-patient communication | Workout data, progress metrics, notes |
| Improve App stability and performance | Crash reports, performance metrics |
| Process subscriptions and purchases | Apple ID (via StoreKit — we never see payment details) |
| Send workout reminders and notifications | Notification preferences, schedule data |
We do not sell your personal information. We share data only in these limited circumstances:
We implement industry-standard security measures to protect your data:
You have the following rights regarding your data:
The App is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us.
The App integrates with the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Apple Health | Health data sync | HRV, sleep, workouts, heart rate |
| Supabase | Backend infrastructure | All app data (encrypted) |
| Sentry | Crash reporting | Device info, crash traces (no health data) |
| Apple StoreKit | Subscription management | Transaction IDs (no payment details) |
| Apple Sign In | Authentication | Email (can be hidden via Apple relay) |
| WHOOP | Wearable data sync (optional) | HRV, strain, recovery scores, sleep data |
We do not track you for advertising purposes. We do not use advertising identifiers (IDFA), and our App does not contain any third-party advertising SDKs. Our privacy manifest declares NSPrivacyTracking = false.
Your data is processed and stored on servers located in the United States. If you access the App from outside the United States, your data will be transferred to and processed in the United States. By using the App, you consent to this transfer.
If you are a California resident, you have the right to:
If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. Our legal basis for processing is your consent (for health data) and legitimate interest (for App functionality and security).
We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
X2machines, LLC
Email: privacy@getkorza.app