Klizmo is built on a simple premise: your ride data is yours. This policy explains what we collect, why we collect it, and how we protect it.
Klizmo is operated by Klizmo, Inc. If you have questions about this policy, contact us at privacy@klizmo.com.
Account information
When you create an account, we collect your email address and a password hash. We do not collect your name unless you choose to provide it.
Ride and training data
Klizmo processes the FIT files you import or sync from Garmin. This includes power output, heart rate, cadence, speed, GPS coordinates, elevation, and timestamps. This data is used exclusively to calculate your Discipline Score and generate your Execution Signature.
Declared targets
The power zone targets and execution blocks you declare before rides are stored to enable scoring. Without this data, Klizmo cannot function.
Device and usage data
We collect basic device information (iOS version, device model) and crash reports to maintain app stability. We do not track in-app behavior for advertising purposes.
Payment information
Subscription payments are processed through Apple's App Store. Klizmo never sees or stores your payment card details.
We use your data for one purpose: to score your ride execution and surface patterns in your training over time. Specifically:
We do not use your data to train AI or machine learning models. We do not sell your data. We do not use your data for advertising.
Apple CloudKit
Your ride data and account information syncs across your devices using Apple's CloudKit infrastructure. Apple's privacy policy governs their handling of this data. We do not have access to your iCloud credentials.
Garmin
If you connect your Garmin account, we receive ride data via the Garmin Health API using OAuth 2.0. We only request access to activity data necessary for scoring. You can disconnect Garmin at any time from your profile settings.
Supabase and Railway
Our Garmin webhook server runs on Railway infrastructure using Supabase for data handling. These services process ride data in transit and are governed by their respective privacy policies. Data is not retained on these servers beyond what is required to complete the sync.
Apple App Store
Subscription management, billing, and payment processing are handled entirely by Apple. Klizmo receives only a subscription status confirmation — no payment details.
Your ride data is stored locally on your device and synced via Apple CloudKit. We apply industry-standard security practices including encryption in transit (TLS) and at rest. We do not store your raw FIT files on Klizmo servers after processing.
We retain your account and ride data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. Deleting the app does not delete your account or data — you must request deletion explicitly via privacy@klizmo.com or through Settings in the app.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact us at privacy@klizmo.com. We will respond within 30 days.
California residents (CCPA)
We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale of data (though we do not sell data).
EEA and UK residents (GDPR)
Our legal basis for processing your data is contractual necessity — we cannot provide the Discipline Score service without processing your ride data. Where processing is optional, we rely on your consent, which you may withdraw at any time.
Klizmo is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us at privacy@klizmo.com and we will delete it promptly.
If we make material changes to this policy, we will notify you via email or an in-app notice at least 14 days before the changes take effect. Continued use of Klizmo after that date constitutes acceptance of the updated policy.
WTG - Klizmo
privacy@klizmo.com
