Privacy Policy

Effective 2026-05-12 · Applies to the SirKegel mobile app (com.evolvra.kegelman)

This policy describes what data the SirKegel app collects, how we use it, and what we never collect. The policy is byte-aligned with the data-handling contract enforced in the app's source code (the R12 closed-set, verified by 109 privacy unit tests).

Data we collect (linked to your account)

Identifiers

User ID — assigned at registration. Used to associate exercise records with your account.

Contact info

Email address — used for registration, sign-in, and transactional messages (e.g. email verification, password reset).

User content

Training-session records — hold seconds, repetitions, completion timestamps, and any voluntary mood/anxiety/energy logs or notes you choose to add.

Usage data

Product interaction — which exercises you complete, which plan tasks you interact with, your streak day count, and weekly check-in submissions. Used for personalization and our own analytics only. The app includes the PostHog analytics SDK in its binary, but it is disabled at launch (see Diagnostics & analytics SDKs) and sends nothing.

Health & Fitness (optional, user-controlled)

Apple Health / Health Connect — active calories burned, heart rate, and step counts. Sync is off by default; you enable and revoke it from Settings at any time.

Subscriptions / Purchases

Subscription status — active/inactive and plan tier (free/premium). V3 ships with a mock paywall only; no real billing is collected at launch.

Data we never collect

Precise or coarse location
Browsing or search history
Audio recordings, photos, or videos
Contacts
Crash data, performance data, or diagnostics at launch (see Diagnostics & analytics SDKs below — the app includes the Sentry and PostHog SDKs, but they are disabled at launch and send nothing)
Advertising data or third-party advertising identifiers

Diagnostics & analytics SDKs (Sentry, PostHog)

For transparency: the app includes two third-party SDKs in its binary — Sentry (crash and performance diagnostics) and PostHog (product analytics). At launch both are disabled: no Sentry DSN and no PostHog key are configured, so both initialize as no-ops and no crash, diagnostic, performance, or analytics data leaves your device.

If these are enabled in a future release, we will: host the data in the EU; identify you only by an anonymous, non-reversible hashed id (never your email, name, or IP); keep Sentry's PII auto-attach turned off; keep session and screen recording turned off; and never send any health, clinical, or sexual-wellness data to them. We will update this policy and our App Store / Google Play privacy declarations before any such data collection begins.

Clinical questionnaire data

SirKegel uses validated screening instruments (IIEF-5, PEDT-5, AUA-SI, NIH-CPSI-subset) to personalize your plan. Raw answers and computed instrument scores are processed on-device or transiently server-side and are never persisted in any HTTP response payload, local storage, or analytics event. Only derived persona axes (e.g. "beginner / intermediate / advanced") flow back to your device. This is enforced by automated tests in the app's source code (the "R12" closed-set).

AI chat

The in-app AI chat uses an on-device static FAQ adapter at V3 launch — no external LLM API is called. Chat content stays on your device for the duration of your session and is removed when you delete your account. A clinical disclaimer is appended to every AI chat response.

Apple Health scope

Read (NSHealthShareUsageDescription): active calories burned, heart rate, steps.
Write: none — the app does not write any data back to Apple Health / Health Connect in v1.0. Health sync is one-way (read only).
Never: clinical conditions, medications, allergies, or lab results.

Children's privacy

SirKegel is rated 16+ and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe a child has provided data, contact us and we will delete it.

Account deletion

You can delete your account and all associated data from the app: Settings → Account → Delete Account. Email evolvra91@gmail.com as a fallback. See Delete Account for the full flow.

Contact

Questions about this policy or a specific data request: evolvra91@gmail.com.

Türkçe özet

Gizlilik politikası özeti (TR)

SirKegel uygulaması yalnızca uygulamanın çalışması için gerekli verileri toplar: kullanıcı kimliği, e-posta, antrenman kayıtları (tutma süresi, tekrar, zaman damgası) ve kullanım verileri (tamamlanan egzersizler, seri günleri). İsteğe bağlı olarak Apple Health / Health Connect senkronizasyonu açabilirsin (kalori, nabız, adım). Konum, tarama geçmişi, ses/foto/video, rehber veya reklam verisi toplanmaz.

Şeffaflık için: uygulama, ikili dosyasında iki üçüncü taraf SDK içerir — Sentry (çökme/performans tanılaması) ve PostHog (ürün analitiği) — ancak her ikisi de lansmanda devre dışıdır (Sentry DSN'si ve PostHog anahtarı yapılandırılmamıştır) ve cihazından hiçbir çökme, tanılama, performans veya analitik verisi çıkmaz. Gelecekte etkinleştirilirse veri AB'de barındırılacak, yalnızca anonim ve geri döndürülemez bir karma (hash) kimlik kullanılacak, oturum/ekran kaydı kapalı kalacak ve onlara hiçbir sağlık, klinik veya cinsel sağlık verisi gönderilmeyecektir; bu başlamadan önce politika ve App Store / Google Play beyanları güncellenecektir.

Onboarding sırasında kullanılan klinik tarama enstrümanlarının (IIEF-5, PEDT-5, AUA-SI, NIH-CPSI) ham cevapları ve hesaplanan skorları herhangi bir kalıcı yere yazılmaz; cihazda veya sunucuda anlık olarak işlenir, sonra çıkarılmış kişisel-eksen değerleri (örn. "başlangıç / orta / ileri") cihazına döner. Bu kural uygulamanın kaynak kodunda otomatik testlerle (R12 closed-set, 109 test) zorunlu kılınır.

Uygulamayı silmek istediğinde: Ayarlar → Hesap → Hesabımı Sil. Alternatif olarak evolvra91@gmail.com adresine e-posta atabilirsin. Bu özet sadece bilgilendirme amaçlıdır — bağlayıcı metin yukarıdaki İngilizce sürümdür.