KEVOR is a workout timer application designed with privacy as a core principle. Core timer features, history, presets, video capture, and settings run entirely on your device. Optional AI scanning sends workout content to remote services only for parsing, and only when you explicitly request it.
KEVOR does not collect or store personal identification data or videos. Specifically:
First-party usage analytics (Legitimate Interest): KEVOR records pseudonymous, in-house usage events — which features are used, request success/latency, error category, network type (wifi/cellular), app version, and coarse country (derived at our server's edge — never precise location, and the IP itself is not stored) — keyed only to a random per-install identifier, on KEVOR's own Cloudflare backend, to understand usage and improve the app. It includes no personal data, no account, no advertising identifier (IDFA), and no workout content; it is never sold or shared with third parties and never used for cross-app or advertising tracking. Retained up to 90 days (aggregates may be kept longer). You can turn this off at any time in Settings → Share usage analytics.
Install identifier (Legitimate Interest): A random identifier is generated on first launch and stored in the iOS Keychain. It is not derived from your device, your Apple ID, or any advertising identifier, and it cannot be linked back to you. It is deleted when you delete the app.
No crash reporting sent to external services.
No account creation or authentication.
No advertising or ad tracking.
AI Scan feature (Legitimate Interest): When you use the AI workout scanner, workout text and, when vision providers are enabled, raw image bytes provided by you are sent through KEVOR's proxy to the enabled AI providers listed under Sub-processors to identify movements and timing. This is transient data used only to provide the parsing functionality.
Abuse Prevention (Legitimate Interest): Your IP address is logged by our Cloudflare Worker proxy for up to 60 seconds to enforce rate limits and prevent abuse.
In-App Purchases (Contract): If you purchase a KEVOR Pro plan, Apple StoreKit handles all payment data. KEVOR receives only a transaction identifier confirming the purchase status, and never sees card or billing details.
Data storage & Retention
Local Data: Your app preferences, workout history, presets, and recorded videos are stored locally on your device using iOS UserDefaults, local files, and the Photo Library. This data is never transmitted. It is deleted when you delete the app.
AI Scan Data: This data is transient and not stored by KEVOR. AI providers may retain prompts briefly for abuse monitoring according to their own policies.
Usage analytics: Retained up to 90 days on KEVOR's Cloudflare backend. Aggregated counts that cannot identify an install may be kept longer.
Rate-limit IP: Stored in Cloudflare KV for 60 seconds.
Entitlement state: Your plan status is stored locally in the iOS Keychain so KEVOR can recognize it offline. It is deleted when you delete the app.
Sub-processors
KEVOR routes AI scan and generation requests to the providers below. Which provider handles a given request depends on the request type and on KEVOR's server-side configuration, so all of them are listed.
Cloudflare Workers AI (Text & Image Parsing): Runs parsing models on Cloudflare's own infrastructure. Cloudflare Privacy Policy
Cerebras (Text Parsing): Transforms workout text into structured timer blocks. Cerebras Privacy Policy
Fireworks AI (Text & Image Vision Parsing): Extracts workout content from text, photographs, and screenshots when the AI scan feature is invoked. Fireworks Privacy Policy
Google Gemini (Text & Image Vision Parsing): Parses workout text and images. For image scans it may run in parallel with another vision provider; the first verified result wins and the slower call is cancelled. Google Privacy Policy
Groq (Text Parsing): Transforms workout text into structured timer blocks. Groq Privacy Policy
OpenAI (Text & Image Parsing): Parses workout text and images. OpenAI Privacy Policy
Apple StoreKit: Processes in-app purchases, if you make one. Apple handles all payment data; KEVOR never sees card or billing details. Apple Privacy Policy
Your Rights (GDPR Arts. 15-22)
You have the right to access, rectify inaccuracies, request erasure, request data portability, or object to the processing of your data. Contact privacy@kevortimer.app to exercise these rights.
Because usage analytics are pseudonymous and keyed only to a random per-install identifier, KEVOR cannot link them to you in order to retrieve or delete them individually. You can stop the collection at any time in Settings → Share usage analytics, and deleting the app removes the identifier permanently.
International Transfers
AI scan data may be processed in the United States by the enabled AI providers. Transfers use Standard Contractual Clauses (SCCs) under GDPR Art. 46 where applicable.
California Residents (CCPA)
KEVOR does not sell or share personal information. See "Your Rights" above for access/deletion requests.
Trademark Notice
CrossFit® is a registered trademark of CrossFit, LLC. KEVOR Timer is not affiliated with or endorsed by CrossFit, LLC. HYROX® is a registered trademark of HYROX World GmbH. KEVOR Timer is not affiliated with or endorsed by HYROX World GmbH.
Children's privacy
KEVOR is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes
If this policy changes, the updated version will be published at this URL and within the application.