Privacy policy

Version 1 · Effective from the app's release

Kilo Club is an app for adults (18+) who lose weight together with their team. This page explains which data we collect, why, where we store it, how long we keep it and how you export or delete it. For any question, write to moderation@kiloclub.gr.

What we collect

• Account: name, email address, password (stored only as a hash), language, time zone and, if you choose, a profile photo.
• Health data: your weigh-ins, height, goal weight and target date. This is data concerning health, a special category under Article 9 GDPR, and we process it only with your explicit consent.
• Teams: the teams you belong to, your role, your privacy mode (percentage, kilos or absolute weight), posts, photos, reactions, quotes, the invites you send, reports and blocks.
• Notifications: your device's push token and your reminder time. Notifications never contain weight values.
• Subscription: if you buy Team Plus, the status and expiry of the subscription. Payment details are handled by Apple or Google; we never see them.
• Consent: when, and for which text version, you gave or withdrew your consent.

Why we process it

We process health data only to show you your progress and, in the way you choose, your team's progress. The legal basis is your explicit consent (Article 9(2)(a) GDPR), which we ask for before your first weigh-in. The other data is needed to provide the service you asked for (Article 6(1)(b)) and to keep it secure, for example per-IP request limits (legitimate interest). We do not sell data, we show no ads and we use no analytics tools.

You can withdraw your consent at any time: Account → Consent to health data. Because the app cannot work without weigh-ins, withdrawing deletes your account and all your data, exactly like deleting your account.

What your team sees

Your team sees progress, not numbers: by default only the percentage change. You decide whether kilos or your absolute weight are shown, and the rule is enforced on our server.

Where it is stored

The database, photos and backups are stored on servers in the European Union (EU). Processors acting on our behalf: the email provider for confirmation and invite emails, Expo's push service (only the device token and the notification text), RevenueCat for the subscription status and, only when enabled, Sentry error reporting in the EU, with health data removed. Where data leaves the EU, standard contractual clauses apply.

Retention

We retain your data for as long as you have an account. Exceptions: invites are deleted 30 days after they expire, notification history after 30 days, send markers after 60 days, deleted teams are purged after 30 days and reports are anonymised 12 months after they are closed. Backups rotate and the oldest are removed after 30 days.

Export and deletion

Export: Account → Export data. You immediately get a zip file with all your data as JSON and your weigh-ins as CSV (one export per hour).

Delete: Account → Delete account and data, confirmed with your password. Deletion is immediate and permanent. Instructions, also for people who no longer have the app, are on the Delete account page.

Cookies

We do not use cookies or tracking tools, neither in the app nor on these pages, so there is no cookie banner. No cookies are set when you read this page.

Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw your consent. Most of these you can exercise in the app; for the rest, write to moderation@kiloclub.gr and we reply within one month. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Changes

If anything material in this policy changes, we tell you in the app before it takes effect. See also the Terms of use.