Legal

Privacy Policy

Last updated: August 27, 2026.

This Privacy Policy ("Policy") explains how Kono ("Kono," "we," "us," or "our") collects, uses, discloses, and safeguards information in connection with the Kono mobile application, related websites, and associated services (collectively, the "Service"). By downloading, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with this Policy, you must not access or use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, password (stored as a salted hash), and authentication identifiers when you sign up or log in via email, Google, or Apple.
• Profile information: the username you choose, the profile photo you upload, and your profile and profile photo visibility settings.
• Content you create for other runners: the crew connections you make; the title, note, and workouts of any training session you create or join; and the training programs you build, including any version of a program you choose to publish. Section 6 describes who can see each of these.
• Safety and moderation information: when you report content or an account, we collect your account identity, the reason you select, and anything you write in the report; when you block an account, we record that block.
• Health and fitness data: workout history, training plans, pace, distance, duration, elevation gain, heart rate, calories, sleep, recovery, and other activity data you choose to sync from a connected fitness platform (currently Apple Health (HealthKit), and including Garmin Connect and Strava, subject to each platform's availability and your authorization), connected wearables, or manual entry. Activity records synced from these platforms may include route or location information that the connected platform or device recorded (see "Location Information" below).
• Device and usage data: device identifiers, operating system, app version, IP address, crash logs, and interaction and analytics data (including screens viewed and features used, collected via our analytics provider, PostHog) collected automatically through use of the Service.
• Communications: information you provide when you contact support, respond to surveys, or otherwise communicate with us.

2. Location Information

Kono does not currently capture your real-time GPS location directly. If you connect Garmin Connect, Apple Health, Strava, or another supported fitness platform, the activity records we import from that platform may include route or location data that the platform or your device recorded during your workout. We store that location data as part of the synced activity and use it only to display your activity history and power the Service's training features.

We plan to introduce in-app GPS tracking in a future release of the Service so that Kono can record your route directly during a workout. If and when we do, that feature will require your explicit permission before we access your device's location, we will describe the collection and use of that location data in this section at that time, and you will be able to decline or later revoke location permission through your device settings without losing access to the rest of the Service.

3. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service, including generating training plans;
• Operate the features that let runners train with each other, including showing your profile, your training to your crew, the training sessions you take part in, and any program you publish, as described in Section 6;
• Authenticate users and secure accounts against unauthorized access;
• Personalize content, recommendations, and coaching guidance;
• Communicate with you about the Service, including updates, security alerts, and support;
• Monitor, analyze, and improve performance, reliability, and usage patterns;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Review reports of content or conduct, and enforce our Terms and Conditions and Content Rules;
• Comply with applicable law, legal process, and enforceable governmental requests; and
• Exercise, establish, or defend legal claims.

4. Health and Fitness Platform Data (Apple Health, Garmin Connect, Strava, and Similar Sources)

Where you authorize the Service to access Apple HealthKit, Garmin Connect, Strava, or a similar fitness platform, we access only the categories of health and activity data necessary to power training plan generation, workout tracking, and recovery guidance. Data obtained through these platforms is used and disclosed only for providing health, fitness, or wellness features of the Service, or as otherwise permitted by the applicable platform's developer terms and applicable law. We do not use HealthKit, Garmin Connect, or Strava data for advertising, and we do not sell such data to data brokers or advertising platforms. Where a connected platform's own privacy settings mark an activity as private, we respect that designation and do not use or display that activity beyond what the platform permits.

You may revoke Kono's access to Apple Health data at any time through your device's Health or Settings application. Where you have connected a Garmin Connect or Strava account, you may disconnect it at any time from within the Service or through that platform's own account settings. When you revoke or disconnect access, we stop syncing new data from that platform and delete previously synced data from that source without undue delay, consistent with the applicable platform's developer requirements. Revoking access may limit or disable certain features of the Service.

Not every integration described in this Policy is available in every version or region of the Service; a given platform becomes available to connect once we have enabled it and, where applicable, obtained that platform's approval to access its API.

5. How We Share Information

We do not sell your personal information. We may disclose information to the following categories of recipients:

• Other users of the Service: Kono is a training app runners use with each other, so some of what you put into it is visible to other people using it — your profile, the training your crew sees, the training sessions you take part in, and any training program you publish. Section 6 sets out exactly what each of those shows, who can see it, and the controls you have over it;
• Service providers: hosting and cloud infrastructure providers, our analytics provider (PostHog), authentication providers (Google, Apple), customer support, and communications vendors who process information on our behalf and solely for the purposes we specify, under contractual obligations of confidentiality and data protection consistent with this Policy;
• Legal and safety disclosures: where required to comply with law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Kono, our users, or the public;
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, subject to standard confidentiality arrangements; and
• With your direction or consent: where you have explicitly authorized sharing, such as connecting a third-party wearable or export destination.

6. What Other Users Can See

This section sets out, surface by surface, what another runner can see about you, who counts as "another runner" in each case, and what you can change. None of it puts your information on the open web: it is visible inside Kono, to people with a Kono account.

Your profile. Your profile carries your name, your username, and your profile photo. You choose who can see it:

• A public profile — the default — can be found by any other user of the Service, who can browse or search for you and open it. Alongside your name, username, and photo, a public profile shows when you joined, how many runners are in your crew, a summary of the plan you are currently training (its title, and any goal race, distance, date, and target time you set), and your most recent activities.
• A private profile can be opened only by runners you are in a crew with in either direction — people you have added, and people who have added you. Anyone else who comes across you sees your first name, your username, and your photo, and cannot open the rest.

Your profile photo has a second, separate setting: you can show it to everyone, or only to runners you have added to your crew.

Your crew. Runners who can see your profile can see the runs you record or sync — the workout's name and date, its distance, duration, pace, heart rate, elevation, calories, and lap splits, together with any note or effort rating you added — and your week-by-week training plan and its individual workouts. We do not show your route or GPS coordinates to another user, even where a connected platform recorded them with the activity. The list of who is in your crew is not shown to other users; your profile shows only how many people are in it.

Training sessions. When you create or join a training session, its title, the note written on it, and the whole workout it prescribes are visible to everyone invited to it — including participants who are not in your crew, because anyone in a session can invite a runner of their own. Everyone on that list can see your name, username, and photo. Your own pace targets and lifting weights are not shared: each participant sees the session's workout scaled to their own fitness. You can decline an invitation, or leave a session you joined.

Published training programs. A training program you build is yours alone unless you publish it, which is a deliberate choice you make and can reverse. When you publish one, any runner browsing programs can see the whole thing — its title, every week, and every workout — together with your name, username, and photo as its author, and can start their own copy of it. Publishing freezes a copy of the program as it stood at that moment, so edits you make afterwards reach nobody else until you publish again. Unpublishing takes the program off the browse list, but a copy someone has already started is their own training plan: it does not disappear when you unpublish or delete your original, and you cannot recall it. Publish only what you are willing to have copied on those terms.

Blocking. You can block another account, which stops the two of you from seeing each other in the Service and removes any crew connection between you in both directions, along with any crew request either of you had sent. It reaches the training sessions you share: you leave any session that runner is in, and they are removed from any session you own, so neither of you is left on a roster with the other. The person you block is not told. Blocking does not reach backwards, though — a workout or plan the other person already started from a session you shared, or from a program you published, is their own training and stays in their account. You can see and undo your blocks under Blocked accounts in the app; unblocking restores neither the crew connection nor a place in a session, which you would each have to make again.

Reporting. When you report content or an account, the reason you choose and anything you write go to the Kono staff who review reports. They do not go to the person you reported, who is not told that a report was filed or who filed it. What we do with a report is set out in our Content Rules.

Notifications. Where the Service notifies another runner about something you did — a crew request, a training session invitation, or a change to a session you share — that notification names you by your first name, and may appear on their device's lock screen.

7. Data Retention

We retain personal information for as long as your account remains active. When you delete your account — whether through the in-app deletion feature or by submitting a web request — we permanently delete your personal information, workout history, and associated data within 30 days of the deletion request, except where we are required by law to retain certain records (for example, records necessary for fraud prevention or dispute resolution). Such retained records are held only for the minimum period required by applicable law and then deleted. We may retain de-identified or aggregated data that cannot be linked back to you indefinitely.

Some of what you shared with other runners does not disappear when you delete your account, because it is no longer only yours. A training plan another runner started from a program you published, or from a training session you shared with them, is that runner's own plan and stays in their account. A report you filed is kept as the record of the review it prompted, with your identity removed from it, and so are records of the moderation decisions we made — content removed, or an account suspended — for as long as we need them to enforce our Terms and Conditions and Content Rules.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to or withdraw consent for certain processing.

Controls over what other users can see: The Service gives you direct control over the visibility described in Section 6:

• Profile visibility: set your profile to public or private under Profile → Privacy in the app;
• Profile photo: in the same place, show your photo to everyone, or only to runners you have added to your crew;
• Crew: remove a runner from your crew at any time, which ends their access to your activities and your plan;
• Blocking: block an account from its profile or from a training session you share, and see or undo your blocks under Profile → Privacy → Blocked accounts;
• Training sessions: decline an invitation, or leave a session you have joined;
• Published programs: unpublish a program at any time, which takes it off the browse list — though, as Section 6 explains, copies runners have already started remain theirs.

Account and data deletion: You can permanently delete your account and all associated personal data at any time:

• In-app: Open the Kono app, navigate to Settings → Help, and tap Delete Account. Deletion is immediate.
• Web request: If you no longer have access to the app, submit a request at coachkono.com/account/delete or email privacy@coachkono.com with the subject "Account Deletion Request." We will process the request within 30 days.

For all other rights requests, contact us at the address below. We will respond to verified requests within the time required by applicable law. We may retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction, including encryption of credentials and data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account.

10. Children's Privacy

The Service is not directed to, and is not intended for use by, individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16 without verified parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer, storage, and processing, to the fullest extent permitted by applicable law.

12. Third-Party Services

The Service integrates with or links to third-party services, including authentication providers (Google and Apple), fitness platforms (Apple Health, Garmin Connect, and Strava, subject to each platform's availability), and our analytics provider (PostHog). Your use of any third-party service is governed by that service's own privacy policy and terms, and we are not responsible for the privacy or security practices of any third party.

13. Changes to This Policy

We may update this Policy from time to time in our sole discretion. If we make material changes, we will provide notice through the Service or by other reasonable means. Your continued use of the Service after any change constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

14. Disclaimer

The Service provides training, fitness, and wellness information for general informational purposes only and does not constitute medical advice. To the fullest extent permitted by law, Kono disclaims all liability arising from reliance on information provided through the Service. Consult a qualified healthcare professional before beginning any exercise program. A full assumption-of-risk, release, and limitation of liability applicable to your use of the Service is set out in our Terms and Conditions, which you agree to by using the Service.

15. Contact Us

If you have questions, requests, or complaints regarding this Policy or our data practices, contact us at privacy@coachkono.com.

This document is a general template provided for convenience and does not constitute legal advice. Consult a qualified attorney to ensure this Policy meets the requirements applicable to your business, users, and jurisdictions before relying on it in production.