Kasya Privacy Policy

Last updated November 2, 2026

Kasya ("we", "us") helps you check your walking and running form, find shoes, track your activities, follow races, and compete with friends and running clubs. This policy explains what data the Kasya app uses, what leaves your phone, and the choices you have.

In short: we don't sell your data, show ads or track you across other apps. Camera video is never uploaded. GPS routes and your Apple Health data stay on your phone — the only fitness data that leaves it is the daily totals you choose to share by joining a group or running club.

1. What stays on your phone

Camera (gait scans). The camera is analyzed live on your device as body-landmark positions; only derived numbers (such as steps per minute) are kept. No video is uploaded. If you turn on "keep a clip for review", the clip stays on your device and is deleted right after you view it.
Activities and GPS routes. Runs, walks, rides and hikes you record — including routes and location — are stored on your device only. Location is used only on the Record screen and while you are recording an activity.
Maps. Maps in Kasya are provided by Mapbox. To draw a map, your phone requests map images (tiles) for the area on screen directly from Mapbox, which receives that area and your IP address. Your recorded routes and activities are not sent to Mapbox or to us, and Mapbox usage telemetry is turned off.
Apple Health. If you connect Apple Health, Kasya reads workouts, workout routes, walking/running and cycling distance, steps, active energy, exercise minutes, heart rate and resting heart rate so activities from your Apple Watch or other watches (for example Garmin or COROS through their Apple Health sync) appear in Kasya, and it saves the activities you record back to Apple Health. This data stays on your device. It is never used for advertising or marketing, never sold, and never stored in iCloud by Kasya. The only exception is the daily totals described under Groups and running clubs below, which are sent only if you join a group or club.
Motion and fitness. Step counts and cadence from your iPhone's motion sensors are processed on your device.
Your dashboard. Daily goals, scores, heart-rate charts and activity history are kept on your device.

2. What we collect and why

Account

When you sign in with Apple or Google we receive your name, email address (Apple may give us a private relay address instead) and an account identifier, to create and run your account. If you sign in with Apple we also store a token used only to revoke Apple sign-in when you delete your account.

Gait scan results

For signed-in users, scan results are backed up as derived numbers only — cadence, rhythm, symmetry and similar scores — so you keep your history across devices. No images or video.

AI coach

When you ask the AI coach a question, your message and de-identified scan numbers are sent to our AI provider (through OpenRouter) to generate the reply. We keep a daily usage counter to apply limits. We don't use your coach messages to identify you or for advertising.

Subscriptions

Kasya Premium is sold through the App Store. Subscription status is managed by RevenueCat and Apple. We never see your payment details.

Race submissions and race reports

If you submit a race or report wrong race information, we store what you entered, the time and your account identifier, so we can review it before anything is published.

Groups and running clubs (only if you join one)

While you are a member of at least one group or club, Kasya uploads your daily totals: steps, active minutes, active calories, and the distance and moving time of your runs. We also store your first name (as your display name), your memberships, your lifetime step total (for levels) and your monthly totals.

Members of your groups and clubs can see your first name, level, steps, active minutes and run distance and time for the current week or month on the leaderboards.
A club's public page and the club rankings show only club-level totals (sums across members) — never individual members.
We never upload your routes, locations, heart rate or other Health records.
When you leave your last group or club, your uploaded daily totals are deleted. Club totals for past months keep only the anonymous sums they already include.

Club content

If you create a running club, its name, country, city, description, emblem and the photo you choose are public: anyone using Kasya can see them in club rankings and search. Photos are resized on your phone before upload.

Reports

If you report a club, we store the reason, any note you add, and your account identifier so we can review it.

Support

If you email us, we use your email and message to help you.

3. How we use data

Only to provide and improve Kasya's features, keep accounts secure, enforce our Terms of Use and meet legal obligations. We do not sell personal data, do not use it for advertising, and do not track you across other companies' apps or websites.

4. Who we share it with

Service providers that run Kasya for us: Convex (database and hosting), RevenueCat (subscriptions), Apple and Google (sign-in), our AI provider through OpenRouter (AI coach), Mapbox (maps), and Expo (delivering app updates, which involves standard technical data such as app version and IP address).
Other Kasya users, only as described for groups and running clubs above.
Authorities, if the law requires it.

5. Keeping and deleting data

Delete account: in the app go to Profile → Delete account. This removes your account, sign-in records, scan results, race submissions and reports, group and club memberships, uploaded daily totals and stats, and revokes Sign in with Apple. Clubs you own pass to the next member, or are deleted with their photo when no one is left.
Leave groups and clubs at any time; leaving your last one deletes your uploaded daily totals.
You can also email us at joshualadero0121@gmail.com and we'll delete your data for you.

6. Your rights

You can ask to access, correct or delete your personal data, or object to how we use it, by emailing joshualadero0121@gmail.com. If you are in the Philippines, you have these rights under the Data Privacy Act of 2012 (Republic Act No. 10173) and may also contact the National Privacy Commission.

7. Security and storage

Data is sent over encrypted connections (HTTPS) and access is restricted. Our servers may be located outside your country, including in the United States.

8. Children

Kasya is not directed to children under 13, and we do not knowingly collect their personal data.

9. Changes

We'll update this page when Kasya changes how it uses data, and change the date at the top.

10. Contact

Questions or requests: joshualadero0121@gmail.com