Privacy Policy
What we collect, why, where it is kept, and how you control it.
1. Who we are
Kestrow (the “app”) and this website are provided by the operator of this site (“we”, “us”). We are responsible for the personal information described here. Contact us at [email protected]; we answer privacy requests within 30 days.
2. How this version of the app stores your data
Your account and your log stay on your device. When you create an account, your
first name, email address, a hashed version of your password, your goals, habits and every entry you
make — training sessions, sleep check-ins, meals, water, stress and energy ratings, reminders
and notes — are stored by your own browser (local storage keys kestrow-account
and kestrow-session). They are not uploaded to our servers.
That has consequences we want to be clear about: we cannot see or recover your log, it does not sync between devices or browsers, and clearing your browser data erases it. You can export everything to a file or delete it at any time from Settings → Your data.
3. What we may collect
| Category | Examples | Why |
|---|---|---|
| Update emails (optional) | Email address and the date you gave consent | To send the product updates you asked for |
| Support messages | Your name, email address and whatever you write to us | To answer you |
| Subscription data (if you subscribe) | Plan, billing status, and the card brand and last four digits from our payment processor | To run renewals, cancellations and refunds |
| Technical data | IP address, browser and device type, as recorded in our hosting provider's standard server logs | Security, abuse prevention and fixing faults |
We do not want health data. We never ask for medical history, diagnoses, medication or test results. What you type into your own log stays on your device and is never used for advertising.
4. Update emails
The sign-up form at the bottom of our home page is optional and separate from your account. We only add an address when you tick the consent box. Every email includes an unsubscribe link, and you can also ask us at [email protected] to remove you.
On this version of the site, update emails are not connected yet. If you
use the form, your address is saved only in your own browser (local storage key
kestrow-newsletter) and is not sent to us. When we switch the emails on, addresses will be
collected through an email-list service acting on our behalf, and this policy will be updated
first.
5. How we use information
- To provide the app and respond to support requests.
- To process payments, renewals, cancellations and refunds if you subscribe.
- To send update emails, only if you opted in.
- To keep the site secure and working.
We do not build advertising profiles, we do not use anything you log for interest-based advertising, and we make no automated decisions that have legal or similarly significant effects on you.
6. Who else sees it
We do not sell personal information and we do not share it with advertisers or data brokers. We use service providers who act on our instructions: website hosting, a payment processor (which receives card details directly — we never see full card numbers), an email provider for support and, if enabled, an email-list service. We may disclose information if the law requires it.
7. How long we keep it
Support emails: up to 24 months. Update-email addresses: until you unsubscribe. Billing records: as long as tax and accounting law requires (typically up to 7 years). Data stored in your browser stays until you delete it or clear your browser data.
8. Your rights and choices
- Export your log: Settings → Your data → Export my data.
- Delete your account and log: Settings → Your data → Delete my account.
- Unsubscribe from update emails through any unsubscribe link.
- Access, correct or delete anything we hold about you by writing to [email protected].
California residents have the right to know, delete and correct personal information and to not be discriminated against for using those rights; we do not sell or share personal information as the CCPA/CPRA defines it. If you are in the EEA or UK, you may also object to or restrict processing and complain to your data protection authority; our legal bases are contract (providing the app), consent (update emails and optional storage) and legitimate interests (security).
9. Security
The site is served over HTTPS. Passwords are never stored in plain text. Because your log lives in your browser, anyone with access to your unlocked device and browser could open it — sign out on shared devices. No system is perfectly secure; if a breach affecting data we hold occurs, we will notify you as the law requires.
10. Children
Kestrow is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
11. Cookies and local storage
See the Cookie & Local Storage Notice for exactly what this site stores on your device.
12. Changes
If we change this policy in a meaningful way, we will update the date at the top and, where we have your email address, tell you before the change takes effect.
Questions: [email protected].