KONKI Privacy policy

What Konki collects, and what it does not.

Last updated 14 August 2026

Konki is built by Systems Atlas Project. This policy explains what data is collected, how it is used, and your rights over it.

Konki requires an account. Signing in is what lets your training sync between your devices, and signing out removes it from the device — your account is where your data lives.

What is collected

When you create an account:

Your email address
A hashed version of your password — the password itself is never stored
Your training data: workout logs, exercise plans, templates, set and rep records, body-weight entries and goals
Your nutrition entries: what you type to describe a day's food, the calorie and macronutrient figures for that day (whether you typed them or accepted an estimate), and an optional daily target

If you use Konki's social features, also:

A username, if you choose one. This is public to other Konki users — it is how people find you, and anyone can search for it.
Your connections — who you have added as a friend or coach, and who has added you.
Messages you send to and receive from your connections, stored as written.
Templates and programmes you share, including anything you have written in them.
Groups — the groups you belong to, posts you make on their boards, and, for private groups, the invite code used to request entry.
Blocks — a record of accounts you have blocked.
Reports you file, including a copy of the content you reported, taken at the moment you report it.
Log sharing consent — a record of which coaches you have chosen to share your training log with.

No analytics, crash reports, location data, or any other personal information is collected.

How your data is used

Solely to provide the Konki service:

To authenticate you and maintain your account
To sync your training data across your devices
To deliver messages, shared templates and group posts between you and other users
To operate blocking, so a blocked account can no longer find or contact you
To review reports and act on accounts that break the rules
To send a password reset code when you request one

Your data is not sold, not used for advertising, and is never shared with anyone who might use it for their own purposes. The companies that host Konki and deliver its email process your data only to run the service — and one more joins them the moment you ask for it: if you press for an AI estimate, the text you wrote to describe that day's food is sent to Anthropic, which returns the estimated figures. Nothing else goes with it: not your name, not your email, not your training data, not your other entries.

The AI estimate

Estimating a day is always something you press a button to do. Konki never sends your food description anywhere on its own. When you do press it, that day's text — and only that text — goes to Konki's server and on to Anthropic, which returns rough calorie and macronutrient figures. Konki does not log the text of your request. Anthropic's commercial terms state that they do not train their models on content submitted through their API. The figures come back as a suggestion you can edit or ignore; nothing is saved until you save the day. Estimates are marked with a ~ wherever they appear, because they are guesses from a description, not measurements.

Health app data

If you connect Apple Health or Health Connect, Konki reads four figures for the day you are looking at: energy, protein, carbohydrate and fat. It reads them when you view a day, holds them only in memory, and never stores them. Those figures are shown beside your own entry and are never sent to Konki's server and never used for advertising. Konki never writes anything back to Apple Health or Health Connect, so nothing Konki estimates can end up in your other apps. You can disconnect at any time in Konki, and revoke access entirely in Apple Health or Health Connect.

What other people can see

Your training data is private. Nobody else can see your logs, plans, body metrics or nutrition entries unless you deliberately share a template or programme with them.

Other Konki users can see your username if you have set one, messages you send them, templates and programmes you share with them, and posts you make on the boards of groups you both belong to. If you connect a coach, they can see the templates and programmes you share and the sessions logged against them. Coaches cannot see your nutrition entries.

Sharing your training log is separate, and off unless you turn it on.

Accepting a coach does not give them access to your calendar. If you choose to share your log with a specific coach, they can see every session in it — including sessions from before you connected — with the exercises, sets, durations and notes you recorded. Your body metrics, your goals, your nutrition entries, and anything not logged as a session stay private either way.

You can stop sharing at any time, from Connections. Access ends immediately.

Blocking and reports

Blocking is silent. The blocked account is not told. From their side you stop appearing in search, they cannot message you, your posts and membership disappear from group boards you share, and your connection ends.

When you report someone — a person, a message, a shared template, a group or a post on its board — the report and a copy of the reported content are stored. This is because reported content can be deleted or changed before anyone reads the report, and without a copy there may be nothing left to review.

A person reads every report within 24 hours. Accounts that break the rules in the Terms of Use are removed.

Reports are not anonymous to me — I can see who filed them. They are never shown to the person reported.

Where your data is stored

On servers hosted by Railway in the European Union. Passwords are hashed with bcrypt before storage. Authentication tokens are signed as JSON Web Tokens, and a token stops working the moment its account is deleted.

Anthropic processes the text of AI estimate requests, and only at the moment you request one.

Email

Resend is used to send transactional email — specifically the six-digit password reset code, which expires after 15 minutes. There are no marketing emails and no mailing list. Your email address is not shared with Resend beyond what is necessary to deliver those messages.

This website

This site sets no cookies and runs no analytics. It is served by Cloudflare, which processes standard request information such as IP address in order to deliver the page and protect against abuse.

Data retention and deletion

Your data is retained for as long as your account exists.

You can delete your account from inside the app: Account → Delete Account. This permanently removes your account, your training data, your nutrition entries, your connections, your group memberships and posts, and your block list from the server, and wipes the data from your device. You can also request deletion by email — the delete your account page walks through both routes.

Two things survive that deletion, and it is worth being straight about them:

Messages you sent to other people remain in their conversations. Your side of someone else's chat history cannot be removed without deleting theirs too.
Reports filed about your account are kept for up to 12 months. Otherwise deleting an account would erase the record of why it was reported, and someone could clear their history by signing up again.

Reports you filed about other people are kept for the same period, for the same reason.

Your rights

You have the right to access the data held about you, request correction of anything inaccurate, request deletion, and export your data. To exercise any of these, get in touch through the support page.

Children

Konki is not directed at children under 13, and no personal information is knowingly collected from them.

Changes to this policy

If this policy changes materially, the date at the top of this page is updated. Continued use of the app after that constitutes acceptance of the updated policy.

Contact

Questions about privacy, or a request about your data: konki@systemsatlasproject.com.