TheXclub

Updated 12 October 2026

Privacy policy

Your information, your choices. How TheXclub handles account, fitness and health data.

Who provides TheXclub

TheXclub is provided by knockbook LLC. This notice covers the TheXclub app and website. Contact sales@knockbook.com about privacy, support or your information.

Information we handle

  • Account and profile: your name, age or confirmed date of birth, profile choices, photo, city/country, account/device identifiers and any email or identity details shared through Sign in with Apple.
  • Health and fitness, when you connect or enter them: step totals, activity and workout records, sleep, heart measurements, available ECG recordings, body measurements, walking metrics, goals, lab reports and results, and health details you choose to provide. Availability depends on your device, records and permissions.
  • Social activity: friends, group membership, challenges, shared photos, messages, reports and your sharing preferences.
  • Location, when enabled: coordinates used to find nearby places or members, optional shared presence, and arrival/departure events for selected fitness places. Optional automatic visits may use background location. Public map positions are approximate; the service can receive more precise coordinates to provide location features.
  • Purchases and service use: transaction identifiers, purchases, entitlements, app interactions, device/app information, errors and diagnostic records. Apple handles payment details for App Store purchases; we receive transaction information to deliver and restore purchases.

Why we use it

We use this information to operate your account, show progress and history, calculate fitness insights, provide the social features you choose, process purchases, personalise fitness suggestions, respond to support requests, and maintain service reliability and security. Permitted health readings are synchronised to your private TheXclub account so connected features use the same saved records. They do not stay only on your iPhone. Health and fitness insights are informational and are not medical diagnoses.

What other people can see

Your sharing choices determine whether profile details, step totals, activity or approximate presence appear to other members. Photos posted to a private group are shared with that group. People who can view shared content can keep their own copies. Private health reports and your detailed health history are not published to member leaderboards. Do not post information about another person without permission.

AI coaching and report reading

TheXclub currently uses Google Gemini for AI coaching and reading uploaded reports. Using these features can send your messages, relevant profile/fitness/health context, or the report file you select to Google for processing. Extracted results and responses are saved in your account. Review extracted values before relying on them. Google’s handling and retention depend on the applicable Gemini API terms and service configuration; this notice does not promise zero retention or rule out all provider use of content. You can use walking features without uploading reports or sending a coach message. This notice does not replace permissions or consent requested in the app.

Service providers and disclosures

Hosting, storage and operational providers process information needed to run the service. Apple provides platform permissions, optional sign-in and App Store purchasing. Google provides the AI processing described above and Firebase crash diagnostics. The app also records first-party usage and error events. The interactive website may use Microsoft Clarity for usage analysis; its native-app integration is disabled. These standalone privacy and support pages do not run analytics scripts. We do not sell HealthKit data or use it for targeted advertising. Information may also be disclosed when required by law, to address fraud or abuse, or to protect people and the service.

Storage, retention and deletion

Account records, health history, report files and related results are retained to provide the service until removed through an applicable deletion process. Removing a health report from the current app hides it from normal views; it does not necessarily erase the stored file or all underlying records. Deleting the app or revoking Apple Health permission does not erase data already saved in TheXclub. To request access, correction, export or erasure, use the privacy request instructions. We may need to verify account ownership. Some records may need to remain for legal, accounting, purchase-verification, dispute or security purposes, and backups may not be erased immediately. We will explain applicable limitations when handling a request rather than promise an unverified deletion deadline.

Your choices and rights

You can manage Apple Health read permissions, location, notifications, camera and photo access through your iPhone settings. Turning off a permission stops future access covered by that permission; previously saved information is handled separately. Use available group and community sharing controls to change participation. Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, obtain a copy of your information, withdraw consent, and raise a concern with a data-protection authority. Contact us to exercise those rights. We use consent for optional permissions and sensitive features where required, service-related processing to deliver requested features, and applicable legal obligations or legitimate operational purposes for security and records.

Children and young people

The app asks for age to apply age-related controls. Availability of social, location, purchase, coaching and health features can depend on age and consent. A parent or guardian can contact us about a child’s account or information. Do not submit another person’s health report without the appropriate authority.

Security, transfers and updates

We use HTTPS for service connections, account access controls and encrypted storage for uploaded health-report files. No system can guarantee absolute security. Hosting and service providers may process information outside your country, including where Google or its providers operate. Contact us for questions about transfers or safeguards. Material changes to this notice will be reflected here with an updated date; additional notice or consent will be requested where required.