Your data, kept simple.

1. Who we are

Kaion is operated by Kaion Fit, owner: Mr Palesa Mattia, Pfalzburger Straße 65, 10719 Berlin, Germany (“Kaion”, “we”, “us”). We are the controller of your personal data.

Questions about privacy: tech@kaionfit.com

2. What we collect

• Account data: email address, name, and password (stored encrypted).
• Training profile: your goal, sport, experience level, available training days, the equipment you have, and basic body data you choose to share, such as age, height and weight.
• Health-related data: injuries or physical limitations you tell us about, so your plan can work around them.
• Training activity: workouts completed or skipped, sets, reps, weights and rest times you log.
• Subscription data: plan type, billing period and payment status. Payments are handled by Stripe. We never see or store your full card details.
• Device and usage data: IP address, device type, operating system, app language, and technical logs that keep the service running and secure.
• Messages: anything you send us, for example to tech@kaionfit.com.

3. Why we use it, and on what legal basis

• To provide Kaion: creating your account, building and adjusting your plan, and running your subscription. Basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To work around injuries and limitations: Basis: your explicit consent (Art. 9(2)(a) GDPR), which you give in the app and can withdraw at any time. Without it, your plan won’t take those limitations into account.
• To keep Kaion secure and improve it: fixing bugs, preventing misuse, and understanding which features work. Basis: our legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal obligations: for example, keeping billing records for tax purposes. Basis: legal obligation (Art. 6(1)(c) GDPR).
• Optional analytics cookies and product updates by email: Basis: your consent (Art. 6(1)(a) GDPR). You can opt out at any time.

4. How your plan is created

Your plan is generated automatically from your training profile, and adjusted based on what you log. None of this produces decisions with legal or similarly significant effects on you. You can always contact us to have a person look at your plan.

5. Who we share data with

We don’t sell your data. We share it only with the service providers who help us run Kaion, and each one may use it only on our instructions:

• Hosting (AWS): Amazon Web Services stores and runs the Kaion backend and database.
• Payments (Stripe): Stripe processes your subscription payments. We never see or store your full card details.
• Email: our email provider sends account, plan and service messages.
• Analytics: our analytics provider helps us understand how the app and site are used, and is only loaded if you accept analytics cookies.
• Plan generation: our plan-generation provider turns your training profile into a plan, and receives only the training data needed to build it.

6. International transfers

Some providers may process data outside the European Economic Area. When that happens, we use safeguards recognised under the GDPR, such as an adequacy decision or the EU Standard Contractual Clauses. Wherever you use Kaion, from Germany, Hong Kong or elsewhere, the same protections apply.

7. How long we keep it

• Account and training data: as long as your account is active. We delete it within 30 days after you delete your account.
• Billing records: up to 10 years, as required by German tax and commercial law.
• Technical logs: up to 90 days.
• Messages: up to 2 years after our last exchange.

8. Security

Data is encrypted in transit and at rest, and access is limited to the people who need it to run Kaion.

9. Your rights

You have the right to:

• access your data, and receive a copy in a portable format;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting earlier processing.

To use any of these rights, write to tech@kaionfit.com. You can also delete your account directly in the app. You can also lodge a complaint with a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

10. Cookies

Our website uses cookies that are needed for it to work. Analytics cookies are only set if you accept them in the cookie banner, and you can change your choice at any time.

11. Age

Kaion is intended for people aged 16 and over. We do not knowingly collect data from anyone younger.

12. Changes

If we change this policy in a meaningful way, we’ll let you know in the app or by email before the change takes effect.

13. Contact

Kaion Fit, owner: Mr Palesa Mattia

Pfalzburger Straße 65, 10719 Berlin, Germany

tech@kaionfit.com