Kairox (trykairox.com) is operated by FTQ SYSTEMS LIMITED. You can contact us at support@trykairox.com for any privacy question relating to this policy.

Kairox is a phone-first, installable workout timer (PWA). It helps you build, save, share and run structured workout sessions with voice cues, sets, rounds, rests, transitions, reps and sides.

Kairox is a workout timer and workout-organisation tool. It is not medical advice, exercise instruction, personalised coaching or a fitness guarantee. Presets are timing templates only. Use exercises you already know and train within your ability.

• We store as little personal data as possible.
• Anonymous use keeps saved workouts and preferences on your device.
• Signed-in use stores account metadata and (on Pro) saved workouts and session history with your Kairox account.
• Payments are processed by Stripe.
• We do not sell personal data and do not run third-party advertising trackers in this build.
• You can clear local data, export local data, and delete your Kairox account from inside the app.

By default Kairox stores your activity locally in your browser or installed PWA. This can include:

• Saved workouts and workout drafts.
• Exercise names, custom exercise names and custom cue labels.
• Local workout/session history and timer settings.
• Local preferences (voice cue settings, wake-lock preference, install state, UI state).
• Service-worker / app-shell caches needed for offline use and installability.

Clearing your browser data, uninstalling the PWA, or using the in-app Clear local data control will remove local Kairox data from that device. Local-only data may be lost if your browser/app storage is cleared, your device is lost, or PWA storage is evicted by the operating system.

Creating a Kairox account stores basic account/profile metadata with our authentication provider, Supabase. This typically includes:

• Your account identifier (user id).
• Your email address.
• A display name if you choose to set one.
• Account created/updated timestamps.
• Subscription entitlement status (for example active, trialing, past due, cancelled) so the app knows whether to unlock Pro features.

Kairox Sync is a Pro feature. When enabled, your saved workouts and workout session records are stored with your Kairox account so you can restore them on another device you sign in on. Kairox Sync is account-based sync only; it does not connect to iCloud, Google Drive or Dropbox.

Sync-related data can include:

• Saved workouts and workout structures (rounds, sets, rests, transitions).
• Exercise names and custom exercise names.
• Custom cue labels and timer settings.
• Session/history records and sync metadata.
• Other account-scoped data needed to restore your library on another device.

Session Cards are shareable workout timer cards. When you create one, Kairox may store:

• The card title and the creator/display name you typed in.
• A workout summary / snapshot used to recreate the timer.
• The import code.
• Active, disabled or deleted state.
• Import count.
• Affiliate-safe footer metadata when affiliate mode is enabled.

Session Card import codes are designed to be shared. Anyone with a valid active code can import the associated workout snapshot. Please do not include sensitive personal or medical information in card titles, workout names, custom exercise names, custom cue labels or any text that may be shared.

Payments for Kairox Pro are processed by Stripe. Kairox does not see or store your card number, CVC or full payment details. We only receive non-sensitive billing status from Stripe (such as whether a subscription is active, past due or cancelled, and when the current period ends).

Stripe may retain billing, tax and fraud-prevention records in line with its own obligations and legal requirements. Cancellations and payment-method updates are handled inside Stripe's Customer Portal, accessible from the Billing screen.

When you arrive at Kairox through an affiliate link or promo-code flow, PromoteKit may process referral/attribution data so the referring affiliate can be credited if you later subscribe. We do not use PromoteKit for behavioural advertising.

When you send a support request, our support tooling (including email delivery via Resend) processes your reply email, your message and any diagnostics you explicitly choose to include.

Diagnostics are opt-in and intentionally minimal. They never include workout names, exercise names, custom cue text, payment secrets, authentication tokens, full error stack traces or raw contents of the on-device database.

Kairox uses necessary browser storage, local storage and a service worker cache to make the app function, to support PWA installability, to cache the app shell for offline use, and to remember your preferences. This storage is functional — it is not used for third-party advertising or behavioural tracking.

The service worker / offline cache is intended for app-shell and local functionality only.

• We do not sell personal data.
• We do not run third-party advertising trackers or third-party behavioural analytics SDKs in this build.
• We do not embed Meta, TikTok or similar ad-tracking pixels in this build.
• We do not attach diagnostics to support requests unless you opt in.
• We do not access health-app or fitness-platform data.

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract — to provide the Kairox service, manage your account, and deliver Pro features and Kairox Sync.
• Legitimate interests — to keep the service secure, prevent abuse, debug issues you report, and improve reliability.
• Legal obligation — for tax, accounting and fraud-prevention records held by us or our payment processor.
• Consent — for opt-in diagnostics attached to support requests.

• Local-only data lives on your device until you clear it, uninstall the PWA, or the operating system evicts the storage.
• Account and synced data are kept while your account exists. Deleting your account removes app-owned cloud data where supported.
• Support tickets are kept for as long as needed to handle your request and any follow-up.
• Billing and tax records may be retained by us and/or Stripe for as long as required by law.

From inside the app you can:

• Clear local Kairox data from this device.
• Download a basic JSON export of your local data.
• Contact support.
• Permanently delete your Kairox account along with app-owned cloud data (profile, saved workouts, session/history records, sync records, subscription record and support tickets).

Deleting your Kairox account does not, by itself, cancel an active Stripe subscription and does not issue a refund. If you want billing to stop, cancel in Billing (Stripe Customer Portal) first. For refund review, use Support → Refund request. Some records may remain where required for legal, tax, fraud-prevention, dispute-handling, accounting or security reasons, and Stripe billing records may remain with Stripe in line with its own obligations.

We use a small number of processors to operate Kairox. These currently include:

• Supabase — authentication, account metadata and account-scoped data storage (including Kairox Sync).
• Stripe — payment processing, subscription management and billing portal.
• PromoteKit — affiliate / referral attribution.
• Resend (email) — delivery of support replies and transactional emails.
• Cloudflare — hosting, edge delivery and basic platform-level abuse protection.

Our processors may store and process data in jurisdictions outside the UK / EEA, including the United States. Where this happens we rely on the relevant transfer mechanisms our processors provide (such as Standard Contractual Clauses or equivalent safeguards).

We use industry-standard transport encryption (HTTPS) for traffic between your device and our services, scoped row-level security on account-owned data, and access controls on administrative tooling. No internet service can be guaranteed completely secure, so please keep your account password safe and use a strong, unique password.

Kairox is not intended for children under 13. If you believe a child under 13 has created a Kairox account, please contact us at support@trykairox.com and we will take appropriate steps.

Depending on where you live, you may have rights under UK GDPR, EU GDPR or other applicable data-protection laws, including:

• Access to a copy of your personal data.
• Correction of inaccurate personal data.
• Deletion of your personal data.
• Portability of your personal data, where applicable.
• Objection to or restriction of certain processing.
• Lodging a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

To exercise these rights, contact support@trykairox.com from the email associated with your Kairox account.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top. Material changes will be highlighted in-app or by email where appropriate.

For privacy questions, contact support@trykairox.com. Please include the email address associated with your Kairox account so we can locate it.