Updated 2026-09-12
What KINETTO stores
KINETTO uses an anonymous server account. There is no external sign-in. A device session token is kept in this device’s Keychain. The service stores the account settings, private run summaries, and private GPS route data that you choose to upload so it can save your history and validate runs.
Optional Personal Metrics stay on this device. Other players do not see your name, device identity, exact route, exact location, exact activity time, pace, heart rate, or body measurements.
Apple Health
Apple Health access is optional. On an explicit foreground action, KINETTO lists accessible running workouts for you to select. It saves and uploads only selected workout summaries: date, duration, distance, and workout energy when available. It does not import Health routes, heart rate, or body mass. Imported runs follow the same optional delayed, generalized game-activity rules as other runs. You can also choose to export a completed KINETTO GPS run to Apple Health. Health access is not required to record a run.
Firebase notifications, analytics, and crash reports
KINETTO uses Firebase services provided by Google. If you enable device notifications through iOS, Firebase Cloud Messaging may process a notification registration token and technical device and app information required to deliver a notification. KINETTO associates the token with its anonymous server account only to deliver a notification; it does not send your name or use it in Analytics.
Analytics and crash reports are optional and off by default. We enable Firebase Analytics and permit Firebase Crashlytics to send held crash reports only after you expressly accept Analytics and crash reports (version firebase-v1) in the app. Once enabled, Firebase may process Firebase installation and crash identifiers; app, device, and operating-system information; and, when the app crashes, the time, diagnostic state, and stack trace. For consented Analytics, Firebase may also process an approximate region inferred from an IP address. When Analytics and Crashlytics are both enabled, Firebase may attach its SDK-managed Analytics breadcrumbs about recent app actions to a crash report. KINETTO sends no exact location, route, Health data, run details, free text, or KINETTO account or user identifier as an Analytics event or Crashlytics custom value. We do not enable advertising-ID collection or automatic screen reporting.
You may withdraw this choice in Settings. The app stops Analytics, prevents further Crashlytics report transmission, deletes unsent crash reports, and resets Firebase Analytics data. This choice does not change device-notification delivery. Turning off device notifications clears the locally cached notification token and removes the Firebase Messaging token, but does not reset the Firebase installation identifier so separately consented Analytics can continue. Account deletion or anonymous-account replacement clears KINETTO's stored notification registration and removes Firebase Messaging data and its installation state. Firebase's processing of data already sent is governed by Google's Firebase documentation and policies.
Firebase SDK components may also send technical SDK user-agent information (app, device, operating-system, and developer-platform details) for Firebase service operation and adoption. Firebase states that this user agent is not linked to a user or device identifier.
Anonymous participation
Anonymous participation is optional and separate from private run recording. When enabled, KINETTO may publish only generalized activity after a privacy delay. Turning it off keeps future runs private and stops new social participation.
Your choices
You can change settings and participation, export account data, or request deletion from the app. Deletion removes private account data through a resumable process. Records required for safety, integrity, disputes, fraud prevention, or legal obligations may be pseudonymized and retained under the applicable policy.
Sharing and security
Private routes are owner-only. KINETTO uses pseudonymous, minimized operational data and protects session credentials and private data with platform and service controls.