Coach KongCoach Kong

Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Coach Kong processes personal data when you use the Coach Kong mobile application, our website, and related services (together, the “Service”).

1. Controller

The Service is operated by Karl Koeppen (“Coach Kong”, “we”, “us”, or “our”). Karl Koeppen is the controller responsible for the processing described in this policy.

Email: support@coachkong.app
Postal contact details: Impressum

2. Personal Data We Process

Depending on how you use the Service, we process the following:

  • Account data: your Apple sign-in identifier and, if Apple provides them, your name and email address.
  • Profile, fitness, nutrition, and health-related data: information you choose to provide, such as birth date, gender, height, weight, body-fat information, fitness level, activity and training preferences, goals, limitations or injuries, dietary preferences, allergies, meal preferences, and schedule.
  • Service data: generated meal and workout plans, selected meals and exercises, progress, preferences, reminders, and other interactions with the Service.
  • Subscription data: product, entitlement, purchase, trial, renewal, and subscription-status information. We do not receive your full payment-card details.
  • Technical and usage data: app version, operating system and device information, app-scoped identifiers, IP address, timestamps, screen or feature interactions, diagnostic information, crash reports, and performance data.
  • Notification data: notification preferences and the device token needed to deliver push notifications.
  • Support data: your email address and the content of messages you send us.

3. Why We Process Personal Data

We process personal data to:

  • create and manage your account;
  • generate and maintain personalized meal and workout plans;
  • provide subscriptions, reminders, support, and other requested features;
  • operate, secure, troubleshoot, and improve the Service;
  • understand feature usage and Service performance;
  • measure our advertising campaigns where you have given any consent required by law or by Apple; and
  • comply with law and protect the Service against fraud or abuse.

Coach Kong is a fitness and nutrition planning service, not a medical service. We do not use your health-related profile data to make medical diagnoses or for advertising, and we do not sell your health-related profile data.

4. Legal Bases in the EEA and UK

  • Contract: we process account, Service, and subscription data as necessary to provide the Service you request (Article 6(1)(b) GDPR).
  • Consent: we rely on consent where required, including explicit consent for health-related data and consent for advertising tracking or optional communications (Articles 6(1)(a) and 9(2)(a) GDPR). You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.
  • Legitimate interests: we process limited technical, usage, security, and diagnostic data to operate, protect, understand, and improve the Service (Article 6(1)(f) GDPR). Our interests are reliable operation, security, fraud prevention, and product improvement.
  • Legal obligations: we process data when required to comply with applicable law (Article 6(1)(c) GDPR).

Providing account and relevant profile information is necessary to create and personalize your plans. If you do not provide it, the corresponding personalized features may not be available.

5. Service Providers and Other Recipients

We disclose personal data only as needed to provide, protect, and improve the Service or where required by law. Our principal recipients are:

  • Apple: sign-in, App Store purchases and subscriptions, push notifications, and privacy-preserving advertising attribution.
  • Supabase and Cloudflare: authentication, database, storage, content delivery, security, and backend processing. These providers may process account, profile, Service, technical, and health-related data on our behalf.
  • OpenAI: AI-assisted workout generation. The information sent may include fitness level, workout duration and focus, limitations and limitation notes, and exercise options. We do not intentionally include your name or email address in these requests.
  • RevenueCat: subscription identifiers, entitlement, and subscription-status information.
  • PostHog and Sentry: limited usage, diagnostic, crash, and performance information used for product analytics and reliability.
  • Meta: limited app-event and device information for advertising attribution and campaign measurement. Access to Apple’s advertising identifier is subject to your App Tracking Transparency choice.

These companies process data under their own terms and, where they act for us, under contractual data-protection obligations. We may also disclose data to authorities or professional advisers where legally required or necessary to establish, exercise, or defend legal claims.

6. International Transfers

Some recipients may process personal data outside your country, including in the United States. Where the GDPR or UK GDPR applies, we use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

7. Retention

We retain account, profile, and plan data while your account is active and delete or anonymize it when the account is deleted, except where limited retention is required for legal obligations, security, fraud prevention, or legal claims. Subscription records, support correspondence, analytics, and diagnostic data are retained only for the period reasonably necessary for their purpose or for an applicable legal retention period. Deleted data may remain for a limited time in protected backups until those backups are replaced. Data that has been irreversibly anonymized is no longer personal data and may be retained for statistical purposes.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data; restrict or object to processing; and withdraw consent. You may also complain to the data-protection authority where you live, work, or believe an infringement occurred.

You can delete your account from Coach Kong’s in-app settings or contact us at support@coachkong.app. Deleting your Coach Kong account does not cancel an App Store subscription; subscriptions must be managed separately through Apple. We may need to verify your identity before completing a request.

You can manage push notifications and Apple tracking permission in your device settings.

9. Website Data

Our website does not currently use advertising cookies, analytics cookies, or account forms. Cloudflare processes ordinary connection and security data, such as IP address, request details, and browser information, to deliver and protect the website. If this changes, we will update this policy and request consent where required.

10. Children

The Service is not intended for anyone under 16. If you are under 16, do not use the Service or provide personal data. If we learn that we have received personal data from someone under 16, we will take appropriate steps to delete it.

11. Security

We use technical and organizational safeguards designed to protect personal data, including encrypted transmission, access controls, and restricted administrative access. No system can be guaranteed completely secure.

12. Changes and Contact

We may update this policy when the Service or applicable law changes. We will update the date above and provide additional notice where legally required.

For privacy questions or requests, contact support@coachkong.app.