KEVOR is a workout timer application designed with privacy as a core principle. Core timer features, history, presets, video capture, and settings run entirely on your device. Optional AI scanning sends workout content to remote services only for parsing, and only when you explicitly request it.
Data collection & Legal Basis (GDPR Art. 6)
KEVOR does not collect or store personal identification data or videos. Specifically:
First-party usage analytics (Legitimate Interest): KEVOR records pseudonymous, in-house usage events, keyed only to a random per-install identifier, on KEVOR's own Cloudflare backend, to understand usage and improve the app. The events cover which features are used, request success and latency, error category, network type (wifi/cellular), app version, and coarse country. Country is derived at our server's edge: never precise location, and the IP itself is not stored. It includes no directly identifying data, no account, no advertising identifier (IDFA), and no workout content; it is never sold or shared with third parties and never used for cross-app or advertising tracking. Retained up to 90 days (aggregates may be kept longer). These analytics are always on under KEVOR's legitimate interest in maintaining and improving the app. Uninstalling KEVOR stops future collection, but the identifier may remain in the iOS Keychain for a later reinstall; events already sent expire under the retention period above.
What the rating was about (Consent): A rating on its own cannot be acted on, so when you send one it carries the thing it is about: for a scan, the text the workout was built from — the workout you pasted, or the text read from your photo on your device; for a generated workout, the words you typed. Either way it also carries the workout KEVOR produced from it, so the difference between the two can be seen. The photo itself is NEVER sent, only text. This travels with every rating rather than behind a tick box: a report without it is one we can read and never fix, and the choice being offered made the decision look bigger than what is actually attached. Nothing is sent at all unless you pick a rating and tap Send — not rating is always an option. Keyed to the same random per-install identifier, never sold or shared with third parties, and deleted with the rating after 90 days. Please do not paste personal details into a workout you intend to rate.
Star ratings you send (Consent): When you rate a scan or a generated workout, KEVOR sends the star count, which of the two it was about, and — only if you typed one — your written comment, to KEVOR's own Cloudflare backend, keyed to the same random per-install identifier. Nothing is sent unless you pick a rating and tap Send. Sent with it are the app version, the build channel (App Store / TestFlight / development / simulator), the random session identifier the analytics above already use, and the time you tapped Send — so a rating can be read next to what the app was doing. The comment is free text you chose to write, so please do not include personal details in it; nothing about you is collected beyond this, and it is never sold or shared with third parties. Deleted automatically after 90 days.
Sharing a workout by link or QR code (Consent): Nothing is shared until you choose Share or show a QR code. KEVOR then uploads the runnable workout to its own Cloudflare backend: its title, timer settings, movements and coach notes. Original inputs never travel with a shared workout. This includes photos, text recognized from a photo, prompts, Adapt notes and details about which AI model answered.
A shared link is unlisted, not private: it is not indexed or published in a directory, but anyone who receives it can open and forward it without an account. Please do not put personal details in a workout you intend to share. The page counts opens and, when another KEVOR installation opens it, records that installation's random identifier so the sender can see that the workout arrived. Links expire automatically 30 days after creation. KEVOR may remove one sooner after a report or a valid privacy request.
Install identifier (Legitimate Interest): A random identifier is generated on first launch and stored in the iOS Keychain. It is not derived from your device, your Apple ID, or any advertising identifier, and does not directly identify you. Because Keychain data can survive uninstalling an app, KEVOR may reuse this identifier if you reinstall it on the same device.
No crash reporting sent to external services.
No account creation or authentication.
No advertising or ad tracking.
AI Scan feature (Legitimate Interest): When you use the AI workout scanner, workout text and, when vision providers are enabled, raw image bytes provided by you are sent through KEVOR's proxy to the enabled AI providers listed under Sub-processors to identify movements and timing. This is transient data used only to provide the parsing functionality — it is not retained afterwards, unless you explicitly choose to share the text with a poor rating (see above).
Abuse Prevention (Legitimate Interest): Your IP address is logged by our Cloudflare Worker proxy for up to 60 seconds to enforce rate limits and prevent abuse.
In-App Purchases (Contract): If you purchase a KEVOR Pro plan, Apple StoreKit handles all payment data. KEVOR receives only a transaction identifier confirming the purchase status, and never sees card or billing details.
Local Data: Your app preferences, workout history, presets, and recorded videos stay on your device unless you deliberately use a feature described above. Shared workouts contain only the structured workout fields listed above. Data in the app's local container is deleted when you delete the app; Keychain items are the exception described here.
AI Scan Data: This data is transient and not stored by KEVOR. AI providers may retain prompts briefly for abuse monitoring according to their own policies.
Star ratings, their comments, and the workout text each one is about: Retained up to 90 days on KEVOR's Cloudflare backend.
Workouts you shared by link or QR code: Retained on KEVOR's Cloudflare backend for 30 days from the moment you create the link, then deleted automatically. KEVOR administrators can remove a link sooner after a report or valid privacy request. This record includes the random identifier of the installation that shared it and those of KEVOR installations that opened it.
Usage analytics: Retained up to 90 days on KEVOR's Cloudflare backend. Aggregated counts that cannot identify an install may be kept longer.
Rate-limit IP: Stored in Cloudflare KV for 60 seconds.
Entitlement state: Your plan status is stored locally in the iOS Keychain so KEVOR can recognize it offline. It may remain on the same device after you uninstall KEVOR.
Sub-processors
KEVOR routes AI scan and generation requests to the providers below. Which provider handles a given request depends on the request type and on KEVOR's server-side configuration, so all of them are listed.
Cloudflare Workers AI (Text & Image Parsing): Runs parsing models on Cloudflare's own infrastructure. Cloudflare Privacy Policy
Cerebras (Text Parsing): Transforms workout text into structured timer blocks. Cerebras Privacy Policy
Fireworks AI (Text & Image Vision Parsing): Extracts workout content from text, photographs, and screenshots when the AI scan feature is invoked. Fireworks Privacy Policy
Google Gemini (Text & Image Vision Parsing): Parses workout text and images. For image scans it may run in parallel with another vision provider; the first verified result wins and the slower call is cancelled. Google Privacy Policy
Groq (Text Parsing): Transforms workout text into structured timer blocks. Groq Privacy Policy
OpenAI (Text & Image Parsing): Parses workout text and images. OpenAI Privacy Policy
Apple StoreKit: Processes in-app purchases, if you make one. Apple handles all payment data; KEVOR never sees card or billing details. Apple Privacy Policy
Your Rights (GDPR Arts. 15-22)
You have the right to access, rectify inaccuracies, request erasure, request data portability, or object to the processing of your data. Contact privacy@kevortimer.app to exercise these rights.
Because KEVOR has no account or directly identifying profile, it may need the random installation identifier to locate a specific record. Contact privacy@kevortimer.app for instructions. If a record cannot reasonably be linked to your request, it still expires under the retention periods above; uninstalling KEVOR stops future collection.
Shared workout links expire on their own after 30 days. To request earlier removal or exercise a privacy right, contact privacy@kevortimer.app. Every shared page also has a Report this workout link to support@kevortimer.app so KEVOR can review and remove reported content.
International Transfers
AI scan data may be processed in the United States by the enabled AI providers. Transfers use Standard Contractual Clauses (SCCs) under GDPR Art. 46 where applicable.
California Residents (CCPA)
KEVOR does not sell or share personal information. See "Your Rights" above for access/deletion requests.
Trademark Notice
CrossFit® is a registered trademark of CrossFit, LLC. KEVOR Timer is not affiliated with or endorsed by CrossFit, LLC. HYROX® is a registered trademark of HYROX World GmbH. KEVOR Timer is not affiliated with or endorsed by HYROX World GmbH.
Children's privacy
KEVOR is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes
If this policy changes, the updated version will be published at this URL and within the application.