Privacy Policy

Version of 30 October 2026.

This is a translation of the Russian original. In case of any discrepancy, the Russian version prevails.

1. General provisions

1.1. This Privacy Policy sets out how the personal data of users of Jezkiik — the mobile app, the web version and the Telegram bot (the “Platform”) — is processed and protected.

1.2. The Operator seeks to respect users' rights and freedoms when processing personal data and to process only the data needed for the Platform and for the features the User has chosen.

1.3. This Policy applies to information the Operator receives on registration, during use of the Platform, when connecting third-party services and when interacting with a Coach, clubs and support.

1.4. Personal data is processed in accordance with the applicable law of the Republic of Kazakhstan, including the law on personal data and its protection.

1.5. This Policy is an integral part of the Jezkiik Terms of Service.

2. Key terms

Personal data — information relating to an identified or identifiable User.
Processing of personal data — operations with personal data, including collection, recording, organisation, storage, modification, use, granting access, anonymisation and deletion.
User — a natural person who uses the Platform.
Runner — a User who uses the features for planning, recording and analysing workouts.
Coach — a User to whom a Runner has granted access to the training data provided for by the Platform.
Third-party service — an external service the User connects to the Platform, including Strava, Garmin Connect, Telegram and Sign in with Apple.
Anonymisation — operations after which it is impossible, without additional information, to attribute the data to a particular User.

3. Principles of processing personal data

lawfulness and fairness of processing;
processing only for specific, predetermined purposes;
data composition and volume matching the stated purposes;
avoiding the collection of excessive data;
keeping data up to date and, as far as possible, accurate;
storing data no longer than necessary for the purposes of processing or than required by law;
applying organisational and technical protection measures.

4. What personal data may be processed

4.1. Profile data

name and display name;
avatar;
role on the Platform;
interface language, time zone and units of measurement;
registration date and profile settings.

4.2. Data from third-party services

When integrations are connected voluntarily, the Platform may receive:

Strava — the user identifier, authorisation details and data on synced sporting activities within the permissions granted by the User;
Garmin Connect — the user identifier at Garmin, authorisation details and data on completed activities (type, start time, distance, duration, pace, heart rate, laps) within the permissions granted by the User in Garmin Connect. The Platform also sends workouts from the User's plan to the Garmin Connect calendar so that the device guides the User through them;
Telegram — the user identifier, username, profile photo and other information transmitted by Telegram as part of the chosen sign-in method or interaction with the bot;
Apple (Sign in with Apple) — the user identifier at Apple and, on first sign-in, the name if the User chose to share it; the email address is not requested. Apple authorisation details are stored encrypted and are used to revoke the sign-in when the account is deleted.

4.3. Training and sporting data

goals, distances, target times, deadlines and priorities;
training plans, individual workouts and their structure;
workout completion status;
actual activities entered manually or received from a connected service;
available activity metrics, including distance, duration, pace, heart rate and elevation gain;
personal records, competition results, place, category and splits;
links to certificates, photos and other materials added by the User.

4.4. Data on load and wellbeing

The User may voluntarily record a subjective rating of effort (RPE), post-workout comments and information about how they feel. Such comments may contain information relating to health. If the law requires separate consent to process such information, the Operator processes it only where the corresponding grounds exist.

4.5. Clubs, content and communications

club membership, roles and join requests;
participation in club events;
posts, announcements and other user content;
comments by a Runner and a Coach on workouts and plans;
reports about content or Users;
support enquiries and the correspondence about them.

4.6. Location data

the approximate coordinates of the device — processed solely to show the weather forecast for the day of a workout and only where the User has granted the corresponding permission in the application;
coordinates are stored in a coarsened form, to an accuracy of about one kilometre, and are not used to track the User's movements, to build routes or for advertising;
only the last known value is stored — no location history is kept. The weather forecast is requested from the external service Open-Meteo, which receives only the coarsened coordinates and no information about the User;
the User may withdraw the location permission at any time through their device or browser; the weather display then stops.

4.7. Technical data

the device push token when notifications are enabled;
information needed for authentication and to maintain the user session;
access and administrative action logs;
technical logs needed to diagnose errors, ensure security and prevent abuse.

5. Purposes of processing

registration and providing access to the Platform;
maintaining the training calendar, plans and statistics;
syncing sporting activities;
personalising features and displaying relevant training data;
organising the interaction between a Runner and the Coach they chose;
operating clubs, events and social features;
sending service notifications;
handling enquiries and reports;
ensuring security, controlling access and preventing abuse;
improving the Platform on the basis of aggregated or anonymised data.

The Operator does not sell Users' personal data and does not pass it to advertising networks for third-party targeted advertising.

6. Grounds and conditions for processing

6.1. Personal data is processed with the User's consent where such consent is required, and in other cases permitted by the law of the Republic of Kazakhstan.

6.2. Providing data without which a particular feature cannot work is a condition of using that feature. The User may decline to provide optional data.

6.3. Connecting Strava, Garmin Connect, Telegram, Sign in with Apple and other third-party services is voluntary.

6.4. The Runner grants the Coach the access provided for by the Platform at their own discretion and may end it.

6.5. A Runner's training data is not public by default. Access to it is determined by the Platform's functionality, the User's role and the rights granted.

7. Sharing data with third parties

For particular features to work, data may be provided to:

the Coach — within the access granted by the Runner;
Amazon Web Services (server and database in the Europe — Stockholm region) — for hosting and the technical operation of the Platform;
Strava, Garmin, Telegram and Apple — when the corresponding integrations and sign-in methods are used;
push notification providers (Expo, Apple Push Notification service, Google Firebase Cloud Messaging) and Telegram — to the extent needed to deliver notifications; a notification may include details of a workout;
state authorities — in the cases and in the manner provided for by law.

The Operator does not provide third parties with more data than is necessary for the corresponding purpose.

7.1. Garmin data

Data received from Garmin Connect is used only to match completed activities to the workouts in the plan, show the result to the Runner and to a Coach the Runner has granted access to, calculate training volume and load, and detect personal records.

The Operator does not sell Garmin data, does not pass it to advertising networks or any third parties other than those listed in section 7, and does not use it or anything derived from it to train, evaluate or improve artificial intelligence models. Garmin data is not processed by artificial intelligence systems.

The User can view their data in the Platform, correct a workout result, export their data (Profile → "Export my data"), delete it together with the account, and disconnect Garmin in the Platform profile or revoke access in Garmin Connect settings.

8. Cross-border processing

Using cloud infrastructure and third-party services may involve storing or processing certain data outside the Republic of Kazakhstan. The Operator takes into account the applicable requirements for cross-border transfer of personal data and uses external services in accordance with their terms and the permissions granted by the User.

9. Retention period and deletion

9.1. Data is stored for as long as the Platform is used and thereafter only for as long as is necessary to achieve the purposes of processing or to meet requirements of the law.

9.2. The User may request deletion of their account through the means available in the Platform or by the contact email address.

9.3. After an account is deleted, the data is deleted or anonymised, except for information the Operator is obliged or entitled to retain under the law or to protect rights and security.

9.4. When a third-party integration is disconnected, the corresponding access tokens are deleted or invalidated in line with the technical capabilities of that integration. When Garmin Connect is disconnected, the activity data received from it and the workouts the Platform published to the Garmin Connect calendar are also deleted.

10. Operations with personal data

The Operator may carry out collection, recording, organisation, accumulation, storage, refinement, retrieval, use, granting of access, transfer in the cases set out in this Policy, anonymisation, blocking, deletion and destruction of personal data using automated means.

11. User rights

to receive information about the processing of their personal data;
to access their data;
to require that inaccurate or incomplete data be corrected;
to withdraw consent where processing is based on consent;
to request deletion of personal data, subject to the exceptions established by law;
to end a Coach's access to their data;
to contact the Operator with questions about data processing;
to appeal against unlawful actions in the manner provided for by the law of the Republic of Kazakhstan.

12. User obligations

to provide accurate information about themselves;
not to provide third parties' personal data without the corresponding grounds;
to update information when it changes, where possible;
to keep the credentials for their account confidential.

13. Security and confidentiality

13.1. The Operator takes reasonable legal, organisational and technical measures to protect personal data from unlawful access, alteration, disclosure, copying, loss and destruction.

13.2. Access to personal data is granted only to the extent needed to perform the corresponding functions.

13.3. The Operator and persons who have lawfully obtained access to personal data must keep it confidential, except in the cases provided for by law.

13.4. Absolute security of information systems cannot be guaranteed. If an incident is identified, the Operator takes measures to limit its consequences and to meet the applicable requirements.

14. Age restrictions

The Platform is intended for persons aged 16 and over. If use of the Platform by a person below that age requires the consent of a legal representative under the applicable law, such use is permitted only where the necessary consent has been obtained.

15. Changes to this Policy

The Operator may update this Policy when the law, the Platform's functionality or the way data is processed changes. The current version is published on the Platform. Material changes may additionally be communicated to Users by available means.

16. Operator contacts

Jezkiik Email: hello@jezkiik.run