Privacy, with you in mind.

Information you share

We receive information directly from you and information Ksania adds while managing your training. Depending on how you use KASA, this includes:

• Contact and account information: your name, email address, client identifier, account status and preferences. The website inquiry form also accepts an optional phone number.
• Training information: goals, bookings, requested changes, sauna requests, waitlist preferences and notes you choose to share.
• Food journal information: meal descriptions, dates, calories and other nutrition values, notes and photos you take or choose to upload. These entries may reveal information about your health or fitness.
• Messages and support: website inquiries, app conversations, trainer replies and information you provide when asking for help.
• Packages and transactions: session credits, purchase and payment amounts, currency, status, receipts, transaction references and refund or dispute records.

Technical information and sign-in

Our hosting and service providers process technical request information, which can include your IP address, browser or device information, request times and error information, to deliver and protect the service. The website uses a daily code derived from an IP address or email address to limit repeated inquiry submissions.

The web app uses a necessary session cookie to keep you signed in. The iPhone app keeps its sign-in credential in the device Keychain without iCloud synchronization. App sessions expire after 30 days, or earlier if you sign out or access is revoked. Invitation codes work once and expire after 48 hours. Ksania can issue a reusable sign-in code to an approved client; it remains valid until replaced or revoked, and cannot be used while access is paused. KASA stores only a cryptographic hash of that reusable code, not a recoverable copy. We do not use advertising cookies or cross-app advertising trackers in KASA.

How we use information

We use information to respond to inquiries; create and approve client access; manage training and recovery sessions; maintain your journal and conversations; manage packages, payments and receipts; show your chosen reminders; provide support; and prevent misuse or resolve technical problems. We also retain relevant information to handle disputes, keep business records and meet applicable legal obligations.

Sending an inquiry lets KASA respond to that inquiry. It does not subscribe you to an advertising mailing list. We do not sell personal information or use your food photos for advertising.

Who can see your information

Ksania and authorized KASA personnel responsible for your account can access the information needed to provide the service. Approved clients can access their own account records. Other clients are not shown your name, journal, photos or conversations. Occupied times may appear as unavailable in the booking calendar without identifying the client.

Service providers process information needed to operate their part of KASA. We may also disclose relevant information where required by law, to respond to a lawful request, or to protect people and the service. We do not make your journal or messages public.

Services that help KASA work

Providers may process information in countries other than where you live. This notice describes KASA’s use of information; separate services also have their own privacy notices. We will update this notice when a material change to our services changes how information is used.

• OpenAI Sites and Cloudflare provide hosting infrastructure. Cloudflare stores application records and uploaded photos for the service.
• The website inquiry form uses FormSubmit to deliver the details you submit to KASA by email. Inquiry details are also saved in the website’s database. Email providers process messages you send to or receive from KASA.
• When online checkout is available, Stripe processes payments, including eligible Apple Pay payments. Card details are entered in Stripe’s checkout. KASA does not store full card numbers or card security codes. KASA receives transaction information needed for receipts, packages, payment support and bookkeeping.
• If you choose to export a calendar event or share information through your device, the calendar or other service you select receives that information under its own privacy practices.

Photos and optional permissions

Camera and photo-library access is optional and used when you choose to add a meal photo. You can log meals manually instead and can change camera or photo permissions in your device settings. Taking a photo in KASA does not automatically save a second copy to your photo library.

Photos can contain embedded information, such as when or where they were taken. Uploaded files are not guaranteed to have this metadata removed. Choose photos and notes you are comfortable sharing with your trainer.

Food logging in the current client app is manual. AI photo analysis and Google sign-in are not enabled in this client release. Any future third-party AI processing of client information will require a clear notice and appropriate permission before that information is shared.

Reminders and calendar exports

Reminder preferences control the notices shown in your account and alerts added to new calendar exports. Automatic phone push notifications, SMS and reminder emails are not connected in the current client release. A calendar file you export is handled by the calendar app you choose; changes or deletions in KASA do not automatically update that exported copy.

How long information is kept

Account and training records remain while your account is in use unless you or KASA remove them. Website inquiries and support correspondence are kept to respond to you and maintain the relevant business conversation. These records do not currently have an automatic deletion schedule; you can ask us to review or delete information that is no longer needed.

Payment and package records may remain after account deletion for bookkeeping, receipts, refunds, disputes and applicable legal obligations. The direct link to your deleted client profile is removed, but transaction descriptions or references may still identify you. We do not describe those retained records as anonymous. Retention requirements depend on the record and applicable obligations; contact us for information about your records.

Deleting an account does not itself refund a purchase or remove records independently held by Stripe, your email provider, a calendar app or another recipient you chose.

Deleting your information

You can delete individual meal entries and their photos in the food journal. To delete your approved client account, open your profile or Settings, choose Delete account, type DELETE and confirm. This removes your client profile, sign-in access, bookings, waitlist entries, app conversations, meals and photo records from the active app, subject to the retained transaction records described above.

Uploaded files are queued for removal from photo storage; cleanup can finish after account removal and is retried if it fails. If a payment needs to be closed before deletion can complete, the app may ask you to try again or contact us. If you have never been approved, deleting your registration removes the access request and sign-in credentials; studio records Ksania created before your registration remain.

For website inquiries, email records, information outside the app, or difficulty accessing the deletion option, email train@kasabody.com. We may ask for enough information to verify your request, without asking for your password, invitation or reusable sign-in code, or card security details.

Your choices and requests

You can choose not to upload photos or add optional notes, change reminder preferences, withdraw device permissions, sign out, or delete your account. Contact train@kasabody.com to request access to, correction of, a copy of, or deletion of your personal information. Where applicable law provides additional rights, including objection, restriction, portability or withdrawal of consent, you can use the same contact address. Withdrawing consent does not undo processing that was lawful before withdrawal.

We will explain any information we need to locate your records and any reason we must retain particular records. You may also contact your local privacy regulator where that right applies.

Protecting information

KASA uses encrypted connections, account approval, restricted access to client records and protected sign-in credentials. No system can guarantee complete security. If you believe someone has accessed your account or received information in error, contact train@kasabody.com so we can investigate.

Changes and contact

We will post changes on this page and update the date above. Where a change requires further notice or permission, we will provide it before using information in that new way. For questions about this notice or how KASA handles your information, email train@kasabody.com or visit kasabody.com/support.