Privacy Policy — Kanon

Effective date: 22 July 2026

Kanon («the app», «we», «us») is a training app that lets you build workout
circuits and plans, follow them hands-free, and log your results. This policy
explains what data the app handles and how.

We designed Kanon to be offline-first and private by default. You can install
and use the entire app — building routines and plans, running workouts, and
keeping your history — without an account and without sending any data off your device.

Using Kanon without an account

If you never sign in, all of your data — routines, training plans, workout logs,
and notes — is stored only on your device, in the app’s local database. We do
not receive it, and it is not transmitted anywhere. Uninstalling the app removes
this data.

Information we collect (only if you create an account)

Kanon’s optional sync feature lets you back up your data and access it across
devices. It is entirely opt-in. If you choose to register or sign in, we collect
and store on our servers:

• Account information: your email address and a password. The password is used
  only to authenticate you; it is stored in hashed form and we cannot read it.
• Content you create: the routines and training plans you build, and the
  workout sessions you log. Workout logs may include information you choose to
  record, such as the exercises performed, durations, repetitions, notes, and — if
  you enter them — optional metrics like heart rate and calories.
• Location, only during a run you start: if you follow a routine that
  includes a distance step (a run), Kanon uses your device’s precise location to
  measure distance, pace, elevation, and your route. See the section below.

That is the complete list. We collect only what is needed to sync the content you
create back to you.

Location

Location is collected only while a run is in progress, and only for routines
that contain a distance step. It powers the run itself: distance, pace, splits,
elevation gain, and the route you covered.

• You opt in. Before Kanon ever requests location, it shows a disclosure
  explaining this use, and asks for the system location permission. You can
  decline and still do the run — distance steps then advance with a tap.
• It runs in the background during a run. So tracking continues with the
  screen off or the phone in your pocket, Kanon collects location as a
  foreground service while the run is active. Collection stops when the run ends.
• What we keep. Your route (the sequence of location points) and the derived
  metrics are stored in the app’s local database, and — if you are signed in —
  synced to your account so the run is available on your other devices.
• What we never do. We do not track your location outside an active run, do
  not use it for advertising or profiling, and do not share it with third
  parties.

What we do NOT collect

• We do not use third-party analytics, advertising, or tracking SDKs.
• We do not collect your location except during an active run, as described
  above — never in the background otherwise, and never for ads or profiling.
• We do not collect your contacts, photos, or device identifiers.
• We do not sell or rent your data to anyone, ever.
• We do not access phone sensors for advertising or profiling.

How we use your information

We use the information above solely to:

• authenticate you and keep your session secure, and
• store and synchronize the routines, plans, and logs you create so they are
  available on your devices.

We do not use your data for advertising, profiling, or any purpose beyond
operating the sync feature you asked for.

How your data is stored and protected

• On your device: data is held in the app’s local database. Your login token is
  kept in the operating system’s encrypted secure storage.
• On our servers: synced data is stored on our backend hosted under the
  kanon.fit domain. All traffic between the app and our servers is encrypted in
  transit using HTTPS/TLS.

No method of storage or transmission is completely secure, but we take reasonable
measures to protect your information.

Third-party services

• Google Play: the app is distributed through Google Play, which processes
  installs and updates under Google’s own privacy policy.
• Exercise «how to» search: when you tap the «how to» link on an exercise, the
  app opens a YouTube search for that exercise name in your browser or the YouTube
  app. Once you leave Kanon, that activity is governed by Google’s / YouTube’s
  privacy policy, not this one. We do not send them any of your account or workout
  data — only the exercise name you tapped is used to build the search.

Notifications and background activity

With your permission, Kanon runs a foreground service and shows a notification so
the workout timer and audio cues keep running while your screen is off. This is
used only to run your workout. We do not send marketing or promotional
notifications.

Data retention and deletion

We keep your synced data for as long as your account exists. You can request that
we delete your account and all associated server-side data at any time by emailing
admin@bware.one. We will delete it within a reasonable period. Deleting the app
from your device removes the local copy of your data.

Children

Kanon is not directed to children under 13, and we do not knowingly collect
personal information from them. If you believe a child has provided us information,
contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to access, correct, or delete
the personal information we hold about you, or to export it. To exercise any of
these rights, email admin@bware.one.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by
a new effective date at the top of this page. Continued use of the sync feature
after an update constitutes acceptance of the revised policy.

Contact

Questions about this policy or your data? Email admin@bware.one.