Kinset

Privacy Policy

Effective August 4, 2026 · Version PP-1.0 · privacy@onecharteroak.com

This Privacy Policy describes how Charter Oak Strategic Partners, LLC ("Kinset," "we," "us," or "our") collects, uses, and shares your personal information when you use the Kinset strength-training application.

If you are a teen member (ages 13 to 17), please also review our Teen Privacy Notice, which describes additional protections that apply to you.

If you are a Washington State resident, please also review our Consumer Health Data Privacy Notice for information about how we handle consumer health data under the Washington My Health My Data Act.

1. Information We Collect

Information you provide

  • Account information: Your name, email address (via Apple, Google, or email sign-in through Clerk, our authentication provider), date of birth, and state of residence.
  • Profile information: Display name, sex (optional), goal (strength, hypertrophy, or general fitness), experience level, and training preferences.
  • Workout data: Exercises performed, sets, reps, weights, session duration, rest periods, and your ratings of difficulty (RIR/RPE, optional).
  • Body measurements: Body weight (optional, used for bodyweight-exercise load estimation and progression calculations).
  • Recovery data: Soreness check-ins (optional), session difficulty ratings (optional).
  • Household information: Household name, member relationships, gym equipment profiles.
  • Guardian authorization data: If you authorize a teen to join your household, we record your authorization statements, the date and time of authorization, and the attestation version.

Information collected automatically

  • Usage data: Pages visited, features used, session timestamps.
  • Device information: Browser type, operating system, screen size.
  • Network information: IP address, which we use only to determine your country of access for eligibility verification. We do not store IP addresses after eligibility determination.

Information we do not collect

  • We do not collect payment information (Kinset is free during beta).
  • We do not collect location data beyond country-level determination for eligibility.
  • We do not use cookies for advertising or cross-site tracking.

2. How We Use Your Information

We use your information to:

  • Provide the service: Generate workouts, track progress, calculate recovery, manage household membership.
  • Personalize your experience: Adapt exercise selection, prescriptions, and progression to your goals, equipment, and training history.
  • Enforce eligibility: Verify that you meet age and territory requirements before account creation.
  • Enforce safety constraints: Apply age-appropriate training parameters for teen members based on NSCA and AAP guidelines.
  • Maintain security: Authenticate your identity, prevent unauthorized access, detect abuse.
  • Improve the service: Understand how features are used so we can make them better.

We do not use your information to:

  • Serve advertisements.
  • Build advertising profiles.
  • Sell or rent your data to third parties.
  • Train machine learning models on your personal data.

3. How We Share Your Information

Within your household

Kinset is a household-based service. Certain information is shared within your household by design:

  • Shared by default: Your display name, role (owner/adult/teen), and data from joint workout sessions (exercises, weights, sets, reps, progress during that session).
  • Shared when you choose: Personal records and feed items you designate for sharing.
  • Private by default: Your date of birth, body weight, recovery status, soreness check-ins, pain/injury information, and solo workout details. These are never visible to other household members, including the household owner.

With service providers

We use the following service providers to operate Kinset:

  • Clerk (authentication): Manages sign-in and identity. Clerk receives your email address and authentication credentials. See Clerk's privacy policy.
  • Vercel (hosting): Hosts the application. Vercel processes requests and may temporarily access IP addresses and request metadata. See Vercel's privacy policy.
  • Neon (database): Stores your data in a PostgreSQL database. See Neon's privacy policy.

We do not share your information with any other third parties except as required by law.

As required by law

We may disclose your information if required by law, regulation, legal process, or governmental request.

4. Data Retention

  • Active accounts: We retain your data for as long as your account is active.
  • Deleted accounts: When you delete your account (or when guardian authorization is withdrawn for a teen), your data is removed from active systems within 30 days and from backups within 90 days.
  • Legal acceptance records: Records of your acceptance of Terms, Privacy Policy, and other legal documents are retained after account deletion as required for compliance purposes. These records contain the document type, version, and timestamp, but no workout or health data.
  • Compliance events: Anonymized compliance event records (e.g., age verification events, guardian authorization events) may be retained for audit purposes.

5. Your Rights

You have the right to:

  • Access your data: View your profile, workout history, and all data Kinset holds about you through Settings.
  • Export your data: Download a JSON export of your data through Settings.
  • Delete your data: Delete your account through Settings. Household owners must remove all other members before deleting their own account.
  • Withdraw guardian authorization: If you authorized a teen, you may withdraw that authorization at any time, which ends their access and begins data deletion.

To exercise these rights, you can use the features in Settings or contact us at privacy@onecharteroak.com. See our Privacy Request page for details.

6. Children's Privacy

Kinset is a 13+ service. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

Teen members (ages 13 to 17) may use Kinset only through guardian authorization. Additional protections for teens are described in our Teen Privacy Notice.

7. Security

We protect your data using:

  • Encrypted connections (HTTPS) for all data in transit.
  • Encrypted storage for data at rest.
  • Role-based access controls enforced on the server for every data request.
  • Tenant isolation ensuring household data is never accessible across household boundaries.
  • Hashed invitation tokens (SHA-256) so that raw tokens are never stored.

No system is perfectly secure. If you become aware of a security issue, please contact us at privacy@onecharteroak.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date and version number. If we make material changes, we will notify you through the service.

9. Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Email: privacy@onecharteroak.com

See our Privacy Request page for information about submitting a privacy request.