This policy explains what personal data Kolibri collects, why, and the rights you have over it. It covers both this website (trykolibri.com) and the Kolibri iOS app once it launches.
Who we are
Kolibri (“we”, “us”) is operated by Magnus Skovgaard Tech (CVR 46488776), a sole proprietorship (enkeltmandsvirksomhed) registered in Denmark. For anything about your data, email us at [email protected]. We are the data controller for the personal data described below.
What we collect
When you join the waitlist (now)
- Your email address, so we can tell you when Kolibri launches.
- Whether you opted in to marketing updates (the optional checkbox). This starts unchecked, and ticking it is entirely your choice.
- A timestamp of when you signed up.
That is the complete list. The waitlist form does not collect your name, location, or any tracking profile.
When you use the app (after launch)
- Account details — the email (and optional profile name, bio and photo) you use to sign in.
- Training data you log — workouts, sets, reps, weights, holds, skills unlocked and progress. This is the core of what makes the app useful to you.
- Content you choose to share — if you post a workout to the social feed, that post, its stats and any comments or likes are visible to others.
- Apple Health data — only if you turn it on. Kolibri can read and write workout and heart-rate data through Apple HealthKit. This data is handled on your device and is never used for advertising.
- Photos — only ones you attach to a workout yourself.
- Push token — a device identifier used to send you notifications you asked for. You can turn notifications off at any time.
Automatically
Our website is served by Cloudflare, which keeps standard, short-lived server logs (such as IP address) for security and reliability. We do not run advertising trackers or third-party analytics that build a profile of you.
How we use your data
- To email you when Kolibri launches, and to send the optional updates you asked for.
- To run the app’s features: saving your progress, showing your history, and syncing across your devices.
- To generate your training programs. When you use the AI program builder, the answers you give (goals, equipment, capability) are sent to our server and to our AI provider to produce a plan. Your data is not used to train their models.
- To keep the service secure and working, and to respond when you contact us.
Legal bases (GDPR)
- Consent — for marketing updates. You can withdraw it any time by unsubscribing.
- Performance of a contract — to provide the app features you sign up for.
- Legitimate interests — to send you the launch email you specifically requested, and to keep the service secure.
Who we share it with
We do not sell your personal data. We share it only with the service providers that run Kolibri for us:
- Supabase — database and account authentication.
- Cloudflare — website and API hosting.
- Anthropic — the AI model that writes your training programs.
- Apple — the App Store, push notifications and (only if you enable it) HealthKit.
Each of these processes data on our instructions. We may also disclose data if required by law.
International transfers
Some of our providers are based outside the EU/EEA (for example in the United States). Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
We keep your waitlist email until Kolibri launches and for a reasonable period after, or until you unsubscribe or ask us to delete it, whichever comes first. App data is kept while your account is active; if you delete your account we delete your personal data, except where we are legally required to keep it.
Your rights
Under the GDPR you can, at any time:
- access the data we hold about you;
- correct anything that is wrong;
- have your data deleted;
- object to or restrict certain processing;
- withdraw consent to marketing;
- receive your data in a portable format.
To exercise any of these, email us at [email protected]. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet).
Security
We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to keep your data safe.
Children
Kolibri is not intended for children under 16. We do not knowingly collect data from them.
Changes to this policy
If we make material changes we will update this page and, where appropriate, let you know by email. The “last updated” date above always reflects the current version.
Contact
Questions about your privacy? Email [email protected] and we will get back to you.