Privacy Policy

Effective and last updated: September 6, 2026

1. Scope and contact

This policy explains how FlexKia and its developer (“FlexKia,” “we,” “us”) handle information through the FlexKia mobile app, flexkia.com, and the services that support them. Questions and privacy requests can be sent to support@flexkia.com. See our Support page for other help.

2. Information we collect

Account information

When you sign in with Apple, Google, or Microsoft, we receive a provider account identifier, email address, authentication provider, and—when the provider supplies them—your display name, first name, and last name. We record account creation and last-login times. The provider may give you a private relay email address. We do not receive your provider password.

Preferences and FlexKia activity

We store the active days and hours, time zone, reminder settings, workout frequency, and body-focus selections you choose. We also store assigned workout identifiers and times, completion or cancellation status, and records needed to generate and display your workout history and statistics. Calorie figures shown by the app are estimates attached to the workout catalog; they are not measurements from your body.

AI assistant conversations

The FlexKia assistant uses OpenAI to interpret a request and select from a fixed set of FlexKia tools; it does not generate new workouts. Changes are limited to allowed app actions and require confirmation where indicated. If you use the assistant, we store your messages, the assistant’s replies, tool results, proposed actions, and related timestamps in your account. Recent conversation messages and the FlexKia account data needed to answer your request—such as preferences, focus selections, schedules, or activity summaries—are sent to OpenAI to generate the response. Do not enter medical records or other sensitive information that is not needed for your FlexKia request.

If you report an assistant response, we also store the reported response, the reason and optional comment you provide, and its review status so we can investigate safety and quality concerns.

Step data and on-device information

If you enable optional sedentary reminders, FlexKia reads step counts from Apple HealthKit or Android Health Connect to decide on your device whether a reminder may be useful. Raw step samples, step totals used by that feature, and its local diagnostic counters stay on your device. They are not uploaded to FlexKia’s servers, sent to OpenAI, or used for advertising. FlexKia does not write data to HealthKit or Health Connect.

The app also keeps authentication credentials in secure device storage and stores local onboarding, notification, paused-video, and sedentary-reminder state. Your operating system controls access to HealthKit, Health Connect, and notifications.

Support and technical information

If you email support, we receive your email address and anything you include in the message. Our servers create limited request and error logs, such as request identifiers, authenticated account identifiers, operation names, timing, and error details. Website hosting providers may also process standard request information such as IP address and browser information to deliver and secure the site. FlexKia does not include an advertising SDK or third-party analytics SDK in the mobile app.

3. How we use information

• Authenticate you and maintain your account.
• Schedule and display movement workouts, reminders, preferences, and progress.
• Generate assistant responses and carry out actions only after any required confirmation.
• Send a transactional welcome email and respond to support or privacy requests.
• Operate, secure, troubleshoot, and prevent abuse of the service.
• Comply with applicable law and enforce our terms.

We do not sell personal information, serve behavioral advertising, or track you across other companies’ apps or websites.

4. Service providers and disclosures

• Apple, Google, and Microsoft: provide sign-in and process authentication according to the provider you choose.
• OpenAI: processes assistant prompts, recent conversation context, and tool data to generate assistant responses. OpenAI states that API data is not used to train its models unless the API customer opts in, and default abuse-monitoring logs may be retained for up to 30 days.
• Resend: receives the destination email address, name when available, message content, and delivery metadata to send FlexKia’s transactional email. Resend may store email content and delivery records under its service settings and policies.
• Hosting, database, and content-delivery providers: process account records, service requests, and media delivery as needed to operate FlexKia.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to this policy. Providers may process data in the United States or other countries where they operate.

5. Retention

• Account, preferences, and activity: kept while your account exists, then deleted from the live database when the account is deleted.
• AI chat: a chat session expires after 24 hours without activity, but stored messages and expired proposed actions may remain until you delete your account.
• Assistant reports: kept with your account until deletion.
• Welcome-email records: kept with your account until deletion. Resend retains its copy according to its account settings and policies.
• Support email: normally kept for up to 24 months after the request is resolved, unless a longer period is needed for an ongoing dispute or legal obligation.
• Operational logs: normally kept for no more than 30 days.

Deleted information may remain in restricted infrastructure backups for up to 30 additional days before normal backup rotation removes it. We do not use backup copies to recreate a deleted account.

6. Your choices

• Change workout, body-focus, schedule, and notification preferences in the app.
• Disable notifications in the app or device settings.
• Disable Health access in Apple Health or Health Connect settings.
• Delete your account from Menu → Account → Delete account.
• Request access, correction, or deletion by emailing support@flexkia.com.

Additional rights may apply based on where you live. We may need to verify your identity before completing a request.

7. Account deletion

Deleting your account permanently removes its linked preferences, assigned and completed workout history, generation records, AI sessions and messages, assistant reports, pending assistant actions, and FlexKia’s email-outbox records from the live database. The app then signs you out and cancels local reminders. Provider-side sign-in records, messages already delivered by email, support correspondence, short-lived logs, and rotating backups follow the retention rules above.

Confirm Delete permanently to delete your account and associated data. This cannot be undone. Signing in again creates a new account.

If you cannot access the app, follow the instructions at Delete account.

8. Security

We use HTTPS for data in transit, authenticated access controls, secure device storage for credentials, and limited administrative access. No system can guarantee absolute security; please contact us if you believe your account has been compromised.

9. Children

FlexKia is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it.

10. Changes

We may update this policy as the service changes. The current version and update date will remain at this URL. If a change materially affects how existing account data is used, we will provide an appropriate notice in the app, by email, or both.