Privacy Policy

1. Who this covers

This policy covers the KegelPro apps for Android and iOS and this website. It is written to describe what actually happens in the product, not what we might do one day. If that ever changes, this page changes with it.

2. What the app collects

You can sign in with an email code; we do not collect a password. The app keeps these detailed records on your device:

• your setup answers, including the safety screening and any answer about bathroom urgencies;
• your level, session history, streaks, and self-test results;
• your reminder times and cue preferences.

The weekly progress report sends only the summary described in section 3A while enabled. Setup answers and self-test answers stay on your device. The app contains no advertising SDK or third-party crash reporter and does not read from or write to Apple Health.

Usage milestones and purchase linking. The app reports a fixed list of moments, including first open, setup completion, account signup or sign-in, first session completion, subscription screens, trial start, rating requests and cancellation-screen choices. Each message carries the event name, platform, app version, language and a coarse acquisition label. We derive a country code from the connection, without retaining the IP address in these records.

From iOS 1.0.5 and Android 1.0.7, an existing account credential can also link these milestones to your account in our private analytics records. Regional holds, including the current US hold and unknown country, prevent linked usage records; aggregate counts continue. No setup answers, symptoms, session details or progress numbers are added to these messages.

When you buy with an account, the app passes Apple or Google a stable pseudonymous account identifier so verified store purchase notifications can be associated with that account. This identifier is separate from your sign-in credential. Purchase history helps us operate subscriptions and measure acquisition; it is not a payment-card record.

Android 1.0.7 reads the Play Install Referrer once, retaining only bounded campaign fields (utm_source, utm_medium, utm_campaign, utm_content and utm_term) and a Google click reference (gclid). It sends these with first open. Where regional holds permit, a later sign-in can attach that retained context to empty acquisition fields on your account without counting a second open. Other referrer fields are discarded. We do not collect an advertising ID, device ID or install UUID for this feature.

These account and acquisition records are personal data even where hashed. They are retained in our private systems until account erasure; there is currently no automatic age-based purge of warehouse records. You can request account deletion using the process below. This also erases linked usage and purchase records; anonymous aggregate totals remain. Limited deletion markers prevent late provider notifications from recreating erased records. External advertising measurement requires separate privacy and consent controls; account identifiers, UTM labels and training details are not ad-export fields.

3. The email signup

On Android, an email address is required. After the setup questions and before your plan is shown, the app asks for an email address, and it is needed to reveal the plan and create your free account. We use it to deliver the programme and to send you account messages about it, such as a receipt or a notice that something about the service has changed. That is the whole purpose. Where the GDPR or UK GDPR applies, our legal basis for this one is performing the service you asked for, not consent.

Tips and offers are a separate, optional tick on that same screen. It ships unchecked, we never pre-tick it, and leaving it unticked changes nothing about the app: you still get the plan, the free account and the programme. If you leave it unticked we will never send you a promotional message — that rule is enforced in our sending code, not just in a policy, and the record itself stores whether you ticked it.

The website quiz asks for your email address before showing the plan offer. We do not ask for a first name. Submitting the form requests your plan. Some quiz versions also ask you to tick a plan-request box. We store your starting level and phase with your email address as described below. Tips and offers have a separate optional choice.

We check the address you type well enough to know it could receive mail — that it is correctly formed, and that its domain exists in the public DNS. Nothing is sent to it to check, and the check is never used for anything else.

What is stored when you sign up:

• your email address;
• the recorded time of your plan request, your separate marketing choice and, when you opt in, its timestamp; on the Google quiz routes, whether the marketing box was initially checked and whether you changed it;
• a short source label recording where the signup happened, such as web_waitlist;
• a two-letter country code derived from the connection, used for list hygiene;
• the date and time the record was written;
• When you give us your email address to receive your quiz plan, we store your email address with your starting level (1–25) and phase, computed in your browser, so we can make your plan available when you return. Your detailed quiz answers stay in your browser and are not sent to us.
• on Android: that the address is an account address, whether you ticked the separate box for tips and offers, and if you did, when.
• if you later switch on the weekly progress report: that you switched it on, when, and the short summary listed in section 3A.

What is not stored: your IP address is never written to the record or anywhere else. No phone number and no device identifier. Nothing at all about your training, unless you switched on the weekly progress report, and then only the short summary in section 3A. The service that receives the signup reads only the fields listed above and silently discards anything else it is sent, so a bug in the app cannot quietly turn an email list into a store of anything we did not ask for.

The record is stored in Cloudflare Workers KV, in Cloudflare's infrastructure, acting as our processor. Signup requests are rate limited using a counter keyed by a salted, one-way hash of the connecting address, so even the abuse-prevention state holds no address.

Purpose and legal basis. For an Android account address: delivering the programme and account messages about it, on the basis of performing the service you asked for. On the other website quiz versions, the required box requests your plan and tips to help you stick with it. In Canada, Australia, New Zealand, the UAE, Qatar, Kuwait, Bahrain and Oman, we use that request as implied consent for plan offers and follow-ups for up to six calendar months. In the EEA, UK and Switzerland, and for unknown or other regions, the email screen shows a separate unticked box for tips and offers. Marketing follow-ups require that opt-in there. Leaving it unticked does not block checkout. These emails cover plan recovery and getting started after purchase, not a twelve-week course. You can unsubscribe at any time; receipts and billing messages are separate.

On the Google quiz routes, the optional tips-and-offers box starts unchecked on the Spain route, for visitors in the EEA, the UK or Switzerland, and when we cannot determine the country. On the other Google quiz routes it starts checked only when we determine that the visitor is outside those regions. You can change it before submitting. Leaving a pre-checked box unchanged is recorded as a default opt-in, not as an explicit tick. You can unsubscribe at any time.

We do not sell your data. We do not share the list with data brokers, we do not use it for cross-app or cross-site advertising, and we do not match it against any third-party dataset. Email is delivered by Resend, Inc. under its data processing agreement, acting as our processor; it holds the address and the delivery record for each message and nothing else.

What you signed up for is what you get. The homepage box asks for the occasional message when a new level, feature or article ships, and that is all that list receives. Until 20 September 2026 it asked instead for one email when the iPhone version launched; the addresses given under that promise are still owed that one announcement, and nothing else was ever sent to them. Submitting the email form at the end of the quiz requests your plan; tips and offers are a separate, optional choice. Quiz signups made under the earlier combined course-and-updates box retain that recorded subscription. Every message carries a one-click unsubscribe, and an address that bounces or reports us as spam is never written to again.

The only training data we ever hold is the summary you asked for. Your setup answers, your self-test answers and your session-by-session history stay on your phone. If you switch on the weekly progress report, the short summary in section 3A is stored on your email record so that the report can be sent to you, and nothing else about your training is ever added to it. This is enforced in the app and again at the endpoint.

Your website account

When you sign in on this website, we use your email address and a one-time email code or purchase access code to verify your account. A necessary, secure sign-in cookie lasts up to 30 minutes and is renewed while you use the account area, for up to four hours from sign-in. Signing out removes it from your browser.

The account area retrieves your subscription and payment history from our payment provider. Payment-card details stay with the provider. We keep billing support requests (including any earlier refund requests), their handling status and cancellation email records linked to your account until account erasure; these records have no automatic age-based purge. When you email our support mailbox about billing, we use your email address to reply. The account area does not collect or display training data or quiz answers and does not add advertising trackers.

3A. The weekly progress report

This is the one feature that sends anything about your training to us. After your account is created, the app shows a screen of its own about the weekly progress report, and what that screen does depends on where you are.

In the EEA, the UK and Switzerland, and on every app build before this one, the report is off until you switch it on: nothing is pre-ticked, the screen asks a plain yes-or-no question, and saying no costs you nothing.

Outside the EEA, the UK and Switzerland, on the current app build, the report is on by default: the same screen shows you exactly what is sent (the list below) with the switch already on, and you can turn it off right there or later in Settings. In the United States we are holding this for now: even though the switch on the screen shows as on, our server does not store or use a report from that default state until we have reviewed it against US state health-data privacy laws, so nothing is actually collected there unless you turn the switch on yourself.

Wherever you are and however the switch got set, the app works exactly the same either way, and you can turn the report off in Settings at any time — see "How to turn it off" below.

What is sent. At most once a day, and only while the report is switched on, the app sends a short summary to our own server. These are the only fields it contains, and the only fields the server keeps:

• the platform, Android or iOS, and the app's version number;
• the week the summary covers, such as 2026-W38;
• how many sessions you completed in that week;
• how many sessions you have completed in total;
• the training level you have reached;
• your streak, in whole days;
• the day of your last session, as a date with no time of day, or nothing at all if you have not trained yet;
• whether your plan is free, a trial, or Pro;
• the day we stored it, as a date with no time of day.

We also keep, on the same record, that you switched the report on and when, and the previous week's session total so the email can say what changed.

What is never sent. Your setup answers, your safety screening answers, your self-test answers, anything you typed, your reminder times, your device identifier, your advertising identifier, your IP address, and any timestamp finer than a day. The server rejects a message that carries a field other than the ones listed above, and it checks that every number is inside its allowed range before storing it.

What it is for. Two things, and nothing else. Sending you your own weekly progress report by email. And knowing whether you already pay for Pro, so that we stop sending you messages about buying it.

Legal basis. We treat pelvic floor training data as health related. Where the GDPR or UK GDPR applies, our legal basis is your explicit consent, given on its own screen and never bundled with creating an account; the switch stays off until you turn it on there, and nothing is held on a default-on basis. Outside those regions we rely on the disclosure screen and the switch it shows, which the app leaves on unless you turn it off, except in the United States, where we do not currently store or use a report from that default state at all — see above. You can turn the report off, wherever you are, at any time, and turning it off does not affect anything that happened before.

How to turn it off. Open Settings in the app and switch off "Weekly progress report". That stops the report and deletes the summary we hold. It does not delete your account or your email address, and you do not have to ask us. You can also write to support@getkegelpro.com and ask us to do it.

How long we keep it. Only while the report is switched on. Switching it off deletes the summary. Deleting your account deletes it, and so does unsubscribing from our email. There is no archive copy kept afterwards.

Who can read it. Nobody but you, by email. There is no page, no export and no interface anywhere that reads a summary back out: the only way it ever leaves our server is inside the weekly email to your own address. The app proves the summary is yours with a secret key held in your phone's Keychain or Keystore, so knowing your email address is not enough for anyone to write or read your progress. We look at this data in aggregate only, as counts of how many accounts are training, never as a list of people.

4. This website: storage and consent

Privacy choices on the home page and quiz pages lets you Accept, Reject, or open Settings to choose analytics and advertising measurement separately. You can reopen it to change your choice. We remember that choice in your browser for 180 days, with its date and version. These choices are separate from email and app progress-report consent.

Outside the EEA, the UK and Switzerland, analytics and advertising measurement are on by default. Advertising measurement includes the ad click attribution we store with your signup and its use, for Google Ads clicks, in the conversion reports we upload to Google Ads. You can turn either off at any time under Privacy choices; the change applies in that browser from then on. It does not change the choice recorded with a signup you already made. To have an existing signup excluded from advertising measurement, write to support@getkegelpro.com. In the EEA, the UK and Switzerland, and while your country is unknown, both stay off until you accept them. Personalization and remarketing stay off everywhere.

Where analytics storage and our country rules allow it, we store a random browser identifier (anon_id) and send it only to our own server with page and quiz-step events. Step events contain a number, not the question or your answer. Rejecting analytics removes the identifier from your browser. Aggregate statistics can still be counted without it.

Your quiz progress may be kept on your device for up to 24 hours so you can resume where you left off; it is not sent to us.

When you open the payment form, we record your browser type and whether a payment wallet such as Apple Pay or Google Pay is available, with no personal data, so we can find and fix checkout problems.

Ad links can contain click identifiers and campaign labels. We include a bounded attribution string with your signup. When advertising storage is allowed, we remember attribution for the tab and a Facebook click reference (_fbc) in your browser. Rejecting advertising storage removes those stored references. When advertising measurement is on for your signup, a Google click reference (gclid) stored with it can be included in the conversion report we upload to Google Ads when you sign up, start a trial or pay (the click reference, the conversion name, time, value and currency; never your quiz answers, starting level or email address). The Google quiz pages load no Google, Meta or Whop tags.

Meta pixel and Conversions API. On our quiz start pages (English, Spanish and Portuguese), with your advertising consent (and by default outside the EEA, the UK and Switzerland), we load Meta’s pixel. It sets Meta’s browser cookies (_fbp, and _fbc when you arrived from a Meta ad) and reports four standard events: a page view, the start of the quiz, that you left your email, and that you opened checkout. Each event carries a random identifier and the page address with only its campaign labels and Meta click identifier. It never includes your quiz answers, the quiz screen you are on, your starting level or your email; we switch off Meta’s automatic button and form collection. With the same consent our server also tells Meta, through its Conversions API, when you leave your email and when your first payment succeeds: a SHA-256 hash of your email, a hash of our internal customer identifier, those Meta cookies, your IP address and browser user agent, and for the payment the amount and currency charged. To match the payment, we keep the cookies, IP address and user agent on the checkout record for at most seven days. Meta uses this to measure and improve our ads. Rejecting advertising measurement stops all of it and removes the Meta cookies; the partner pages and the app never send Meta events.

Google’s browser tags are currently disabled pending verification of their outgoing requests (this does not affect the conversion report described above). Its prepared integration uses neutral page addresses and the title “Plan”, without query strings or referrers. It excludes answers, starting levels, email addresses and enhanced conversions. Other advertising tags remain disabled.

Whop payments and advertising events. Whop processes web subscriptions and receives your checkout details. We send service emails about your web trial ending, including the charge date, price and cancellation link. Billing contact details for this reminder are retained for up to 45 days; after sending, only a delivery marker remains.

With your advertising consent (and by default outside the EEA, the UK and Switzerland), Whop receives a neutral signup event, timestamp, opaque event identifier and value of zero. An existing Whop anonymous identifier may be included. Email sharing for these events is off by default. We do not send quiz answers, starting levels or page addresses. With the same consent, enabled checkout attribution can include campaign labels, ad click identifiers and anonymous identifiers.

Whop and Meta (through Whop Ads) are recipients of advertising measurement data. Whop also measures events on its own checkout, where it collects the buyer’s email and payment details. Our email-sharing switch controls our signup events; it does not control Whop’s own checkout reporting to Meta. With your advertising consent (and by default outside the EEA, the UK and Switzerland), the Whop pixel loads on the quiz start page and records that page view with an anonymous Whop identifier. It does not receive quiz answers, starting levels or your email.

Traffic statistics. When a page loads, the beacon sends one request to our server recording the page address, the address of the page that linked here (the referrer), any campaign labels in the link you clicked, and a screen-size band. At our server we add, from the connection itself, your country, region and city, your device type, operating system and browser family. On the quiz page a second request on leaving records how many questions were reached, and nothing about what was answered.

On the Google quiz routes, our first-party records also include the randomly assigned quiz version (A or B), checkout-button clicks and fixed checkout-error categories. We store the quiz version with the signup so we can compare how the versions perform. We do not send these experiment fields or checkout-error categories to advertising platforms, and they do not contain your quiz answers.

Aggregate traffic rows do not contain the random browser identifier, your email address or your answers. They are kept for three months in Cloudflare Workers Analytics Engine. The separate page and step event records described above can contain the random browser identifier where permitted. They are stored in our private database; no automatic retention purge is configured for that database. This web update does not link those records to an email address.

The site is hosted on Cloudflare Pages. As our hosting provider, Cloudflare processes the network requests needed to serve the pages and may retain limited technical request data, including IP address, for a short period for security and reliability. We do not receive that as a marketing dataset, we do not use it to build a profile of you, and we do not link it to any email address.

5. Consumer health data

We are conscious that some jurisdictions, including Washington State under the My Health My Data Act, treat information about a person's health conditions or bodily functions as a distinct and specially protected category.

We do not collect consumer health data through this website. Nothing on this site asks you about symptoms, conditions, anatomy, or bodily functions outside the quiz. The advertising tag described in section 4 is told only that a page loaded or that a signup happened, never a question, an answer or a result, and because ad personalization and remarketing are off everywhere it cannot be used to build an advertising audience out of anything you did here. The site's own traffic statistics (section 4) record which pages load, never what anyone answers. The quiz is different: its questions do touch on bodily function, and the answers stay in your browser. If you choose to leave your email at the end and the form says so, we keep one number derived from them, your starting level and its phase name. We treat that number as health-related data: it is collected only when you submit the quiz's plan-request form after the form tells you it will be stored, used only to match the emails to your plan, never shared, sold or used for advertising, and deleted together with your address when you ask at support@getkegelpro.com. The one field this site collects is an email address.

In the app, the questions that touch on those subjects exist only to set your starting level, and their answers are written to your device and never transmitted. The one piece of training data that can reach us is the weekly progress summary in section 3A, and only if you switch the report on. We treat that summary as health-related data and handle it the same way: collected only with the explicit consent you give on its own screen, used only to send you your own report and to stop selling you something you already have, never shared, never sold, never used for advertising, and deleted the moment you switch the report off. We do not sell consumer health data, and we never share it.

6. Unsubscribing

Every marketing email we send carries a one-click unsubscribe link. Clicking it stops the mail. You can also write to us at the address in section 10 and ask to be removed, and we will remove you and confirm.

7. Deleting your data

App data: open Settings in the app and tap "Delete all training data", which removes your history, streaks, self-test results, and setup answers from the device. Deleting the app removes all of it too. If you never switched on the weekly progress report, that is the whole deletion, because there is no server-side copy to chase. If you did switch it on, switching it off in Settings deletes the summary we hold, and deleting your email address, described next, deletes it as well.

Your account and email address: use Delete my account in the app or account portal, or write to us at support@getkegelpro.com (also in section 10) and we will delete the stored record, not merely suppress it, and confirm when it is done. That record includes the weekly progress summary if you had one, and the key your phone used to send it. The steps are on the account deletion page. That includes an Android account address. Deletion removes account access, email-flow contacts, scheduled emails and attributable analytics and purchase rows from our systems. It stops web renewals; Apple and Google subscriptions must be cancelled in the store. Access and the account record end at once; a few internal lookup records are removed by an automatic background sweep shortly afterwards. If you buy again after deleting, that purchase starts a new account. Anonymous totals and content-free deletion or delivery-suppression markers remain. Payment providers retain their own payment and tax records; account deletion does not erase past support correspondence. Marketing emails also have an unsubscribe link, which stops marketing without deleting the account. You do not need to explain why.

Other rights: depending on where you live, you may also have the right to access, correct, or port the personal data we hold, to object to processing, and to complain to your local data protection authority.

8. How long we keep it

We keep your email address and consent record for as long as the list is active or until you ask us to delete it, whichever comes first. We keep the consent record for the same period because it is the evidence that we were allowed to email you in the first place.

The weekly progress summary is different: we keep it only while the report is switched on. Switching the report off in Settings, deleting your address, or unsubscribing deletes it, as set out in section 3A.

9. Children

KegelPro is not directed at children. The app is rated for teens and older, this site is intended for adults, and we do not knowingly collect personal data from anyone under 13. If you believe a child has given us an email address, write to us and we will delete it.

10. Contact

Privacy questions, unsubscribe requests, and deletion requests all go to the same place:

privacy@getkegelpro.com
+1 573 779 8084

The controller is DATA LABS L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. Postal requests reach us there; email is faster.

11. Changes to this policy

If we change what we collect or why, we will update this page and change the date at the top. If a change is material and you are on the email list, we will tell you by email before it takes effect.