Privacy Policy

Last updated: October 9, 2026

1. Introduction

Kolio ("Kolio", "we", "us") is a training platform that helps you plan, train, analyze and share your training. This Privacy Policy explains what personal data we collect when you use our website and our application at app.kolio.fit (together, the "Service"), how we use it, who we share it with, and the choices and rights you have.

By creating an account and using the Service you acknowledge this policy. Where the law requires your consent (for example for health data), we ask for it separately and you can withdraw it at any time.

2. Data we collect

2.1 Account and profile data

Name or username, email address, password (stored in hashed form), date of birth, profile photo, and optional profile details such as gender, height, weight, location and sports interests.

2.2 Data from connected device and service partners

You can connect Kolio to third-party devices and services, such as sports watches, cycling computers, fitness trackers, health platforms and other training apps ("Partners"). Once you authorize a connection, we retrieve the following data from the Partner:

• Training and activity data: workouts and activities, type of sport, date, duration, distance, pace and speed, elevation, GPS routes and maps, laps and splits, calories, cadence, power, equipment used.
• Courses and plans: courses, routes, structured workouts and training plans that you create, import or follow.
• Health and physiological data: heart rate and heart-rate zones, resting heart rate, heart-rate variability, VO2 max estimates, training load and recovery metrics, sleep, stress, body composition and weight, and other health-related measurements made available by your Partner.

We only access the categories of data you authorize at connection time. You can disconnect a Partner at any time from your account settings or from the Partner's own settings.

2.3 Social data and content

If you use the social features, we store your connections (friends, followers and requests), the comments, reactions and messages you post, and the media you upload, such as photos and videos, together with their metadata (date, associated activity, and location if you include it).

2.4 Technical and usage data

IP address, device and browser type, operating system, language, pages and features used, timestamps, and error and diagnostic logs. We collect this through server logs and similar technologies.

2.5 Communications

Messages you send to our support team and your notification and communication preferences.

3. How we use your data

• To provide the Service: create and manage your account, import and display your activities, courses and metrics, and let you plan and follow training.
• To optimize your training and performance: analyze your training and health data to compute statistics, trends, training load, recovery and performance insights, and to give you personalized analysis and recommendations.
• To power social features: let you connect with friends, share activities, comment, post media and take part in challenges and rewards.
• To operate rewards: compute the rewards you earn from the sessions you log.
• To maintain and improve Kolio: troubleshoot, secure the Service, prevent fraud and abuse, and understand how features are used. Where possible we use aggregated or de-identified data for this purpose.
• To communicate with you: send service messages, security notices, and, where you have opted in, product updates.
• To comply with legal obligations and to establish, exercise or defend legal claims.

4. We do not sell your data

We do not sell your personal data, including your health, training and social data, and we do not share it with third parties for their own advertising or marketing. Your data is used to operate Kolio and to help you optimize your training and performance.

5. Legal bases (EEA, UK and similar jurisdictions)

• Contract: to provide the Service you signed up for (account, activity import, analysis, social features).
• Consent: to process health data, to connect to Partners, to access your location, and for optional communications. You can withdraw consent at any time, without affecting processing done before withdrawal.
• Legitimate interests: to secure and improve the Service and prevent abuse, balanced against your rights and interests.
• Legal obligation: where we must process data to comply with the law.

6. Health data

Health-related data is sensitive. We process it only to provide the training analysis and features you request, with your explicit consent, and we apply additional safeguards to it. Kolio is a fitness and training tool; it is not a medical device and does not provide medical advice, diagnosis or treatment. Consult a qualified professional before starting or changing an exercise programme.

7. Sharing and visibility

7.1 Other users

Your profile, activities, comments and media are visible to other users according to your privacy settings (for example only you, only your friends, or public). Anything you share publicly can be viewed, copied and reshared by others outside our control. Please be careful with sensitive information such as your home location in GPS routes; you can hide start and end points or keep activities private.

7.2 Partners you connect

When you connect a Partner, data flows from the Partner to Kolio. Unless you explicitly enable it, we do not send your Kolio data back to a Partner. The Partner's use of your data is governed by its own privacy policy.

7.3 Service providers

We use trusted providers that process data on our behalf and under our instructions, such as cloud hosting and storage, content delivery, email delivery, analytics and error monitoring, and customer support tools. They may not use your data for their own purposes.

7.4 Legal and corporate reasons

We may disclose data if required by law, court order or a valid request from authorities, to protect the rights, safety and security of our users or Kolio, or in connection with a merger, acquisition or sale of assets, in which case you will be informed and the same protections will continue to apply.

8. International transfers

Your data may be processed in countries other than your own, including countries that may have different data protection laws. When we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

9. Retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data, including data imported from Partners, within 30 days, except for data we must keep to meet legal obligations or resolve disputes. Backups are overwritten on a regular cycle. Content you posted that other users have commented on may be removed or shown as coming from a deleted user. When you disconnect a Partner, we stop importing new data; you can ask us to delete the data already imported.

10. Security

We protect your data with measures such as encryption in transit, access controls, secure storage of credentials and tokens, and monitoring. No system is completely secure, so we encourage you to use a strong, unique password and to keep your devices secure. If a breach affects your data, we will notify you and the relevant authorities as required by law.

11. Your rights and choices

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy in a portable format;
• correct inaccurate or incomplete data;
• delete your data and your account;
• restrict or object to certain processing;
• withdraw your consent at any time, including disconnecting Partners;
• lodge a complaint with your local data protection authority.

You can manage most of these choices in your account settings, or by contacting us at the address below. We will respond within the time required by applicable law. Residents of California and other US states may have additional rights under local law; we do not sell or "share" personal information as defined by those laws.

12. Cookies and similar technologies

We use cookies and local storage that are necessary for the Service to work (for example to keep you signed in). Where we use optional analytics, we do so only as permitted by law and, where required, with your consent. You can control cookies through your browser settings.

13. Changes to this policy

We may update this policy as the Service evolves or the law changes. We will post the new version on this page with a new "Last updated" date and, for material changes, notify you in the application or by email.

14. Contact

For questions about this policy or to exercise your rights, contact us at privacy@kolio.fit.