Privacy Policy

Last Updated: 14 September 2026

1. Introduction

Serkit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workout tracking application. Serkit is operated from New Zealand.

2. Information We Collect

We collect information that you provide directly to us:

• Account Information: Email address and display name when you create an account
• Billing Information: Stripe customer and subscription identifiers, subscription status, plan and billing period. Stripe collects the payment details you provide at checkout; Serkit does not receive or store your full card details.
• Workout Data: Exercise routines, workout sessions, sets, reps, weights, and progress tracking data
• Scheduling Data: Workout schedules and calendar information
• AI Coach Conversations: The questions you ask the AI Coach and the context sent with them, if you use it

We automatically collect:

• Usage Information: Features used, session duration, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers for sync functionality
• App Analytics: Page visits, supported interface interactions and feature outcomes collected through PostHog to improve the Service. Signed-in activity is associated with your account identifier; we do not send your email address or display name to PostHog.
• Optional Feedback: If you submit an in-app survey, PostHog receives your answers and associates them with your usage identifier so we can understand and improve your experience. Please avoid including personal health information in feedback.
• Session Replay: Masked reconstructions of app interactions that help us investigate confusing flows. Text and input values are masked, and images and embedded media are excluded. We do not record network request bodies, headers or console logs.
• Push Tokens: If you enable workout reminders, a Firebase Cloud Messaging token for each device you enable them on. Disabling reminders removes the token.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Sync your workout data across your devices
• Enable AI Coach features to provide personalized workout guidance
• Send workout reminders you have asked for, plus technical notices, updates, and support messages
• Respond to your inquiries and provide customer support
• Process Pro subscription payments through Stripe and manage billing and subscription access
• Analyze usage to improve user experience and develop new features

4. AI Coach and Data Processing

The AI Coach feature analyzes your workout history to provide personalized guidance and recommendations. This analysis is performed using AI services, and your workout data may be processed by our AI service provider (OpenAI) to generate responses. We do not use your data to train AI models.

5. Coaching and Sharing Between Users

Serkit shares your data with another user only through the coaching feature, and only after you opt in by accepting an invite. If you connect with a coach:

• Your coach can see the workouts you log, including sets, reps, weights and personal records, and can view a session while you are training
• Your coach can send you routines and schedules, and edit ones they created for you
• You and your coach can leave comments on specific workouts, which are visible to both of you
• You choose what your coach may do, and you can change those permissions or disconnect at any time from Settings, which immediately revokes their access

Coaching data is stored in the cloud rather than on your device, because it is shared between two accounts. If you coach others, the same applies in reverse for the clients who accept your invite.

6. Data Storage and Security

Your data is stored using Firebase (Google Cloud Platform) with encryption in transit and at rest. For offline functionality, data is also stored locally on your device. We implement industry-standard security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We share your information only:

• Service Providers: With Firebase/Google Cloud for hosting, storage and website analytics, PostHog for app analytics and masked session replay, OpenAI for AI Coach features, and Stripe for payments and subscription management. We share your account identifier with Stripe to link your subscription to your account. Stripe collects the billing and payment information you provide at checkout under its Privacy Policy.
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

8. Your Rights and Choices

You have the right to:

• Access: View all your data within the app
• Export: Export your workout data at any time
• Delete: Delete your account and all associated data through the app settings
• Correct: Update your information through your account settings
• Withdraw: Turn off push reminders, or stop using the AI Coach, at any time
• Opt Out: Unsubscribe from promotional communications
• App Analytics: PostHog collection respects your browser's Do Not Track setting. You can also contact us about your analytics data using the address below.

9. Data Retention

We retain your information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it. Aggregated, anonymized data may be retained for analytics purposes.

App analytics events are retained for up to one year and session recordings for up to 30 days. Page URLs sent to app analytics exclude query values, fragments and routine, workout or client identifiers.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where Google Cloud and OpenAI operate), the European Union or United States for PostHog processing, and New Zealand (where we operate). By using the Service, you consent to these transfers. We ensure appropriate safeguards are in place for international data transfers.

12. On-Device Storage

Serkit is offline-first: your routines, workouts and schedules are written to IndexedDB on your own device, and local storage holds authentication state and preferences. If you use Serkit without an account, that on-device copy is the only copy — clearing your browser data deletes it, and we cannot recover it. We also use analytics cookies on our website and local storage for app analytics to understand how the Service is used; you can manage these through your browser settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last Updated" date at the top indicates when this policy was last revised.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@serkit.co.