This policy explains what information Kinectic collects, why, and what we do with it. If anything is unclear or you want your data deleted, email us at support@onealphawork.com.
1. Who we are
Kinectic is a scheduling app for fitness studios and their customers. The app and its backend are operated by OneAlphaWork.
2. What we collect
We collect only what we need to make the app work:
Account information — your name and email address. These come either from a sign-up form you fill in, or from Google when you tap "Continue with Google".
Booking and package data — the sessions you book or cancel, the packages you purchase, attendance status, and any notes you choose to add. If you are a business owner, we also store information about your business, locations, services, and employees.
Device push tokens — if you allow notifications, we store an Expo Push token so we can send you booking confirmations, reminders, and waitlist updates. You can turn this off at any time in Settings.
App telemetry — anonymous, non-identifying events (e.g., screen open, error counts) used to fix bugs and improve performance. No content of bookings is included.
We do not collect:
Passwords from external sign-in providers (Google, etc.) — we never see them.
Payment card details.
Location data, contacts, photos, microphone, or camera content.
Anything for advertising or third-party tracking.
3. How we use the information
We use it only to:
Authenticate you and keep your account secure.
Show you your bookings, packages, and waitlist position.
Send the notifications you've opted into.
Diagnose problems and improve the app.
We don't sell your data. We don't share it with advertisers. We don't use it to profile you.
4. Where it's stored
Account, booking, and package data are stored in Amazon Web Services (AWS) DynamoDB in the eu-north-1 region (Stockholm, Sweden). Communication between the app and our backend is encrypted in transit (HTTPS). Sensitive secrets (encryption keys, tokens) are stored in AWS Systems Manager Parameter Store with AWS-managed encryption.
Push notifications are delivered through Expo's push service, which forwards them to Apple Push Notification service or Firebase Cloud Messaging.
5. Third parties
We use a small number of third parties strictly to provide the service:
Google — when you sign in with Google, Google verifies your identity and gives us your name and email. Google's privacy policy applies to that interaction.
Amazon Web Services — hosting and database.
Expo / Apple / Google — push notification delivery (only if you opt in).
We don't use third-party analytics, advertising networks, or trackers.
6. Your rights
You can:
See, edit, or delete your account from within the app.
Email support@onealphawork.com to request a copy of your data, or to have your account and all associated data permanently deleted.
Disable push notifications at any time in your device's notification settings or the in-app Notifications screen.
If you are in the EU, EEA, UK, or Switzerland, the GDPR applies and the rights above include your rights of access, rectification, erasure, restriction, portability, and objection.
7. Children
Kinectic is not intended for children under 13. If you believe a child has signed up, contact us and we will delete the account.
8. Changes
If we make a material change to this policy, we will update the "Last updated" date and notify you in the app the next time you sign in.