Effective 11 July 2026
Kadd (Arabic كدّ, "the graft") is a workout coach app built by Saif Alfardan. This policy says exactly what data the app handles and what happens to it.
If you create an account: your email address, the display name you choose, and the training data you log — workouts, sets, weights, RPE, programmes, habits, and the optional answers you give during onboarding (goals, experience, bodyweight, injury notes). That's it. No advertising identifiers, no location, no contacts.
Your data is stored with Supabase (hosted on AWS, Mumbai region) and protected by row-level security — only your authenticated account can read your rows. Data in transit is encrypted with TLS.
You can use Kadd without an account. In that case everything stays on your device and nothing is sent to our servers.
With your permission, Kadd writes finished workouts to Apple Health so they count toward your activity rings, and reads sleep, steps, nutrition and body weight from Apple Health to show the health dashboard inside the app. Everything read from Apple Health stays on your device — it is never sent to our servers.
Connecting WHOOP is optional. If you connect it, we store the connection tokens on our servers so the link keeps working; your WHOOP recovery, sleep and strain are fetched through our servers and shown to you in the app. Numbers that become part of your training record — a session's strain, a night's sleep — are saved with your workouts and habits like any other entry you log. Disconnecting WHOOP removes the tokens from our servers.
We don't sell your data. We don't show ads. We don't share your data with third parties except the hosting infrastructure named above. There is no analytics or tracking SDK in the app.
Profile → Account & sync → Delete account permanently erases your account and all synced data from our servers, immediately. Data on your own phone stays until you delete the app. You can also email us to request deletion.
Questions or requests: saiffardan@gmail.com
We'll update this page if the app's data practices change, and note the new effective date above.