Privacy Policy

1. Who we are

Kilos is operated by Devloft Technologies, based in Bengaluru, Karnataka, India. Kilos is a business tool used by gym owners and their staff to manage members, attendance, payments, and related gym operations.

2. Who this policy covers

• Gym staff and administrators who create an account and sign in to Kilos.
• Gym members whose details are entered into Kilos by the gym. For this data, the gym is the owner (data controller) and Kilos acts as a service provider (processor) on the gym's behalf.

3. Information we collect

Account information (staff/admin). When you create an account we collect your name, email address, phone number, and a securely hashed password used to sign you in.

Gym operational data (entered by the gym). To run the service, gyms enter member details such as name, phone number, email, membership plan, photos, attendance/check-in records, and payment records. This data is entered and controlled by the gym.

Camera. The app uses your device camera only to scan member QR codes during check-in, and only while you are on the Check-in screen and tap "Scan". Camera images are processed on-device to read the code and are not stored or transmitted.

Technical data. Like most apps, we automatically receive basic technical information (such as app version and error logs) needed to keep the service running and secure. We do not collect precise location, and we do not use advertising identifiers.

4. How we use information

• To provide and operate the Kilos service (managing members, attendance, billing records, and reports).
• To authenticate users and keep accounts secure.
• To provide customer support and respond to your requests.
• To maintain, troubleshoot, and improve the reliability and security of the service.

5. How information is stored and shared

Kilos runs on Google Firebase (authentication and Cloud Firestore database) and uses ImageKit for image hosting. These providers process data on our behalf under their own security and privacy commitments. We do not sell your personal information, and we do not share it with third parties for advertising.

We may disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

6. Data security

Data is encrypted in transit using HTTPS/TLS. Access to gym data is restricted by authentication and server-side security rules so that each gym can only access its own data. While no system is perfectly secure, we take reasonable measures to protect your information.

7. Data retention and deletion

We keep account and gym data for as long as the account is active. You can request deletion of your account and associated personal data at any time — see our Account & Data Deletion page for how to do this, or delete your account directly from the app under Profile → Delete account.

8. Your rights

You may request access to, correction of, or deletion of your personal information. Gym members who want their data corrected or removed should contact their gym (the owner of that data); the gym can also contact us for assistance.

9. Children

Kilos is a business tool intended for gym staff and is not directed to children. We do not knowingly collect personal information directly from anyone under 18 as an app user.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-app or email notice.

11. Contact us

Questions about this policy or your data? Reach us on WhatsApp at +91 81478 14232, by email at support@devlofttech.com, or via our Contact page.