Privacy Policy
Last updated: April 23, 2026
Kano ("we", "us", or "our") operates the Kano AI fitness coaching service, accessible at kano.fit and via iMessage. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.
1. Information We Collect
We collect the following information when you use Kano:
- Phone number — collected when you initiate contact via iMessage, used to identify your account and send you coaching messages.
- Name and fitness goals — provided by you during onboarding via iMessage or the web form.
- Fitness profile data — including your training frequency, sport, fitness level, challenges, and coaching preferences, provided through the onboarding form.
- Payment information — processed securely by Stripe. We never store your full card details.
- Message history — the content of messages exchanged between you and Kano, used to provide personalised coaching responses.
- WHOOP health data (optional) — if you choose to connect your WHOOP device, we access recovery scores, sleep data, HRV, resting heart rate, and workout data to provide data-driven coaching recommendations. You may revoke this access at any time.
2. How We Use Your Information
- To deliver personalised AI fitness coaching via iMessage.
- To generate and adapt your training plans based on your profile and biometric data.
- To send proactive coaching messages based on your WHOOP recovery and sleep data (if connected).
- To process your subscription payment via Stripe.
- To improve and personalise the Kano service over time.
3. Data Sharing
We do not sell your personal data. We share data only with the following third-party service providers, strictly to operate the service:
- OpenAI — your message history and profile are sent to OpenAI's API to generate coaching responses.
- Stripe — processes subscription payments securely.
- Linq — provides iMessage delivery infrastructure.
- WHOOP — if you connect your device, we access your WHOOP data via their official OAuth API.
4. WHOOP Data
If you choose to connect your WHOOP device, Kano requests access to your recovery, sleep, and workout data via WHOOP's OAuth 2.0 API. This data is used exclusively to provide personalised coaching insights and is never shared with third parties beyond the service providers listed above. You can disconnect your WHOOP at any time by messaging Kano or contacting us directly.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the service. If you cancel your subscription and request deletion, we will remove your personal data within 30 days. Message history may be retained for up to 90 days for coaching continuity purposes before being permanently deleted.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent for WHOOP data access at any time.
- Object to or restrict how we process your data.
To exercise any of these rights, contact us at privacy@kano.fit.
7. Security
We use industry-standard security practices including encrypted connections (HTTPS), hashed credentials, and short-lived access tokens to protect your data. No method of transmission over the internet is 100% secure, but we take reasonable measures to protect your information.
8. Children's Privacy
Kano is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via iMessage or by updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact
If you have any questions about this Privacy Policy, please contact us at:
privacy@kano.fit