Legal

Privacy policy

Last updated 26 September 2026

RightKit helps you understand what sports equipment suits you and remembers your sporting profile. This policy explains what we collect, why, and the choices you have. In short: your profile is private by default, we don't sell data, and you can export or delete everything at any time.

What we collect

  • Fitting answers — how you play, preferences, current equipment. Collected when you take a fitting, saved as you go so nothing is lost.
  • Account details — your email address, and your name and profile picture if you sign in with Google or Apple.
  • Your RightKit profile — sport profiles and their history, equipment diary, setups, ratings, notes, milestones and recommendation history.
  • Technical data — approximate location (country/city from your IP address, not stored for QR scans), device type and browser, used for security and aggregated statistics.
  • Analytics — only with your consent: how RightKit is used, via PostHog and Google Analytics.

Why we use it (and our lawful basis)

  • To provide fittings, recommendations and your profile — performance of a contract / steps at your request.
  • To keep RightKit secure and working — legitimate interests.
  • To understand and improve RightKit through analytics — consent, which you can withdraw at any time.
  • To show partner venues aggregated totals (e.g. “42 members got fitted”) — legitimate interests; partners never see individual answers.

Sharing

Your profile stays private unless you choose to share it — for example with a temporary context link for an AI assistant, which expires and can be revoked. We use trusted processors to run RightKit: Cloudflare (hosting, database, email), PostHog (EU-hosted product analytics, consent only), Google Analytics (consent only), and Google or Apple if you choose them to sign in. We never sell personal data.

How long we keep it

Account data is kept until you delete your account. Anonymous fittings that are never saved are kept for up to 12 months for aggregate statistics. Sign-in sessions expire after 90 days.

Your rights

You can access, correct, export or delete your data from Settings at any time. You can also object to processing, withdraw consent, or complain to the Information Commissioner's Office (ico.org.uk). Contact us at privacy@rightkit.app.