KanGymDeutsch

Privacy Policy

KanGym · Last updated: October 2026

1. Controller

Özkan Yilmaz, Buckower Damm 159, 12349 Berlin, Germany
Email: oezkan.yilmaz.de@gmail.com

2. Overview

The KanGym app stores all workout data exclusively on your device. The app transmits no personal data to our or third-party servers, uses no analytics or tracking services and shares no data with third parties. Exceptions that do not originate from the app are listed below: purchases via Apple, crash reports via Apple, contact, this website and our social media profiles.

3. What Data Is Stored?

The app stores the following data locally on your device:

  • Exercises (name, category, notes)
  • Workouts (date, duration, sets, weights, reps)
  • Workout plans (name, exercises, set counts)
  • Notes and ratings of workouts
  • Settings (weight unit, appearance, rest timer, haptics)

4. Local Storage

All data is stored exclusively on your device and protected by iOS device encryption. No data is transmitted to external servers.

Legal basis: Art. 6(1)(b) GDPR (performance of contract – providing app functionality).

5. In-App Purchases

KanGym offers in-app purchases via Apple's StoreKit. Payment processing is handled entirely by Apple. We do not receive any payment data, credit card numbers, or personal account information. Apple (Apple Distribution International Ltd., Cork, Ireland) is an independent controller for downloads, purchases, billing and subscriptions. Apple's privacy policy applies.

6. No Tracking & No Analytics

KanGym does not use any analytics, tracking, or advertising SDKs. No usage data, device IDs, or advertising identifiers are collected. No profiling takes place.

7. Widgets & Live Activities

The home screen widget displays aggregated workout statistics. This data is shared locally on your device via a secure App Group. Live Activities display the rest timer on the Lock Screen and Dynamic Island. Notifications (rest end, monthly recap on the 1st of the month) are scheduled locally on the device – only with your permission, and can be turned off in the iPhone settings or in the app. All data remains on the device.

8. Apple Health (HealthKit)

KanGym can optionally sync completed workouts to Apple Health. This feature is disabled by default and must be explicitly enabled by the user in the app settings.

When enabled, the app:

  • Writes completed strength training workouts (type, duration, start/end time, total lifted volume) to Apple Health
  • Reads existing workouts to detect duplicates (e.g., from Apple Watch) and avoid double entries

Apple Watch (from version 1.2): If you follow a workout with the KanGym app on Apple Watch and allow access in the Health dialog, the watch starts a strength-training workout in Apple Health. During the workout it reads your heart rate and active energy (calories) to show them on your wrist, and saves the workout to Apple Health. Between the watch and the iPhone only workout data (exercise, set, weight, reps, rest) is exchanged, over Apple's encrypted connection between your own devices.

No health data is transmitted to external servers. All HealthKit data remains on your devices and is protected by iOS and watchOS. Apart from workout records and – only on Apple Watch during a workout – heart rate and active energy, the app reads no health data (e.g. no step count).

Legal basis: Art. 6(1)(a) and Art. 9(2)(a) GDPR (explicit consent – workout data in Apple Health can be health data; you enable the feature yourself and confirm access in the iOS dialog). You can revoke access at any time in iOS Settings > Privacy & Security > Health.

9. Data Import

KanGym allows you to import workout data from CSV files exported by other fitness apps. The import is performed entirely on your device. No data is uploaded to any server. Imported data is stored locally alongside your existing workouts.

10. Data Export & Backup

You can export all your data as a JSON file at any time via the Settings. The export is performed locally and is not transmitted to any server. You have full control over your data and can delete it at any time.

11. Retention

App data stays on your device until you delete it in the app, reset the app or uninstall it. You manage exported backup files yourself.

12. Crash Reports and App Statistics via Apple

If you have agreed in the iOS settings to share analytics with app developers, Apple provides us with aggregated crash reports and usage statistics. Apple collects this data; we only receive it in aggregated form without reference to you. You can turn this off at any time under iOS Settings > Privacy & Security > Analytics & Improvements. If you take part in test versions via TestFlight, we also receive what you voluntarily send us there (e.g. feedback, screenshots) and your name and e-mail address if you joined via an invitation. Legal basis: Art. 6(1)(a) and (f) GDPR.

13. Our Instagram Profile

We run the Instagram profile @kangymapp. For its statistics feature (Insights) we are joint controllers with Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (Art. 26 GDPR; agreement: Page Insights Controller Addendum). Meta takes primary responsibility, including for access and erasure requests. We only receive aggregated statistics without personal reference. Legal basis is our legitimate interest in promoting the app (Art. 6(1)(f) GDPR). Meta also processes data in the USA, based on the EU-US Data Privacy Framework. More information: Instagram Privacy Policy.

14. Our YouTube Channel

We run the YouTube channel @kangymapp. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the channel or watch our videos, Google processes your data as an independent controller under its privacy policy, also in the USA (EU-US Data Privacy Framework). We only receive aggregated statistics without personal reference. Legal basis is our legitimate interest in promoting the app (Art. 6(1)(f) GDPR).

15. Our TikTok Profile

We run the TikTok profile @kangymapp. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland. When you visit the profile or watch our videos, TikTok processes your data as an independent controller under its privacy policy, also outside the EU. We only receive aggregated statistics without personal reference. Legal basis is our legitimate interest in promoting the app (Art. 6(1)(f) GDPR).

16. Email contact

If you write to us, we use your email address, your name (if given) and your message only to reply and delete them once the request is closed and no retention duty applies. The mailbox is provided by Google (Gmail; Google Ireland Ltd., Dublin, and Google LLC, USA); data may also be processed in the USA, based on the EU-US Data Privacy Framework (Art. 45 GDPR). Legal basis: Art. 6(1)(b) or (f) GDPR.

17. Contact form (Tally)

The contact form on the contact page is provided by Tally (Tally BV, Brussels, Belgium). When you open the page, your browser loads the form from Tally, which processes technically necessary data (IP address, browser). What you enter (name, email, message) is stored by Tally in the EU and emailed to us; we only use it to reply and delete it afterwards. To prevent spam, Tally may use Google reCAPTCHA (Google Ireland Ltd., possible transfer to the USA, EU-US Data Privacy Framework). A data processing agreement is in place with Tally (Tally privacy policy). Legal basis: Art. 6(1)(b) and (f) GDPR. You can always email us instead.

18. This website

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data (IP address, time, page, browser details) as our processor (Art. 28 GDPR) to deliver the site and protect it against attacks. Cloudflare may transfer data to the USA and is certified under the EU-US Data Privacy Framework (Art. 45 GDPR; Cloudflare Privacy Policy). Fonts and images are served from this site itself. No cookies, no tracking, no analytics. Legal basis: Art. 6(1)(f) GDPR (secure, fast operation of the website).

19. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR). An email to oezkan.yilmaz.de@gmail.com is enough. You can also complain to a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

20. Changes

If the app changes (e.g. new services), we update this policy. The version published here applies.