Privacy Policy

What We Collect

When you use Kelo, we collect:

• Account information (name, email, phone number)
• Practice session data (movement metrics, duration, context flags)
• Device information for push notifications

How We Use Your Data

Your data is used to:

• Generate personalized practice insights and trend analysis
• Support your wellness journey with progress tracking
• Share reports with healthcare providers when you explicitly consent

Data Sharing

We only share your data when:

• You explicitly authorize sharing with a healthcare provider
• Required by law

We never sell your personal data to third parties.

No mobile information will be sold or shared with third parties for promotional or marketing purposes. All categories of opt-in mobile information (phone numbers and consent records) are excluded from third-party sharing.

Data Security

We use industry-standard security measures including encrypted data transmission, secure cloud infrastructure, and access controls. Your practice data is stored securely and accessible only to you and those you authorize.

Your Rights

You can:

• Access your data at any time through the app
• Revoke data sharing permissions in Settings
• Request deletion of your account by contacting support

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have these rights regarding your personal information:

• Right to know — request a copy of the personal information we hold about you. Use the "Download my data" button under Privacy & Data.
• Right to delete — request deletion of your account and personal information. Use the "Delete my account" button at the same location.
• Right to opt out of sale — Kelo does not sell your personal information. There is no Do Not Sell action you need to take.
• Right to non-discrimination — exercising any of the above rights does not affect the level of service you receive.

To exercise these rights, use the in-app controls or email us at privacy@kelowellness.io. We respond within 45 days as required by §1798.130(a)(2).

Sub-processors

Kelo uses the following third-party services to deliver the product. None receive your data for advertising or unrelated purposes:

• Anthropic (claude.com) — AI message generation. Zero Data Retention requested.
• Telnyx (telnyx.com) — SMS delivery.
• Google Cloud (cloud.google.com) — application hosting, database, file storage, scheduled jobs.
• Cloudflare (cloudflare.com) — DNS and edge proxy.

We notify users by SMS or in-app at least 30 days before adding a new sub-processor that handles personal data.

See our full sub-processors list for the categories of data shared with each vendor and the processing region.

Health & Wellness Scope

Kelo does not provide mental health, psychiatric, or therapeutic services. Session feedback is collected to improve practice recommendations and physical safety, not to diagnose or treat any mental health condition.

Contact

Questions about privacy? Contact us at privacy@kelowellness.io