Privacy policy
Knowbi collects information about your body and your health. This page tells you what we collect, where it goes, and how to get rid of it. It is short because there is not much to hide, and where something is not as tidy as we would like, we say so rather than dress it up.
What we collect
When you set up, Knowbi asks what to call you, your age, your gender, what your day is mostly like, whether you play sport or train, where it bothers you and anywhere else it does, how bad it is right now, anything we should work around, what you are after, what equipment you have, and what time of day suits you. What we should work around is chosen from a list that includes pregnancy, a heart condition, arthritis and past injuries or surgery, plus up to 500 characters in your own words.
We also record which versions of our terms and this page you accepted and when, and your answer about OpenAI below.
As you use it, we record the sets we build for you, the sessions you finish, how you said you felt at each check-in, and what you buy from us through the App Store or Google Play. If you send us feedback, we keep what you wrote, with your app version, your phone's model, its operating system version and its language. We also record your phone number, which is how you sign in, your time zone and a notification token so reminders reach you at the right time, and basic technical information about your device, linked to your account, so we can fix crashes.
If you report pain of 9 or 10 out of 10 at a check-in, we record that you did: the level and when. When you tell us your pain has eased, we record that too: when, the report it answers, which version of our terms you accepted, which warning you were shown, your app version and whether your phone runs iOS or Android.
We use these records only to hold back or restore your sets and, if there is ever a complaint or legal claim about an injury, to show what you were told and what you chose.
We do not collect your payment details. Those go to Apple or Google and never reach us. We do not collect your precise location, and we do not read your contacts, photos or messages.
If you use Knowbi without a membership or the no-ads pass, we also work with Google AdMob to show you ads. Google's ad software receives limited information about your device and the ads you interact with. The ads are never personalised, and Knowbi does not ask your iPhone for permission to track you. Members and holders of the no-ads pass do not see ads.
What leaves our systems, and where it goes
This is the most important section on this page. Please read it.
If you are a paying member and you said yes to notes written by OpenAI, some of your information goes to OpenAI, a company in the United States that runs a large language model. Each time we build you a new set, we send OpenAI the movements we chose and a short description of you: the body areas you named, your goal, your pain level, your age band, how active you are, your occupation, your medical conditions as you wrote them, and what you said at your last check-in. It uses them to write the reason for each movement.
The answer is no until you say yes, at setup or at any time in Settings, and you can change it back whenever you like. When it is no, nothing about you is sent to OpenAI and new sets come without a written note. OpenAI may keep what it already has for up to 30 days.
What that means for you: information about your health leaves our systems and is handled by another company in another country, under their terms and their security. Without a membership, nothing you tell us goes to OpenAI.
Where it is stored
On Amazon Web Services in the United States, encrypted both in transit and at rest. Backups are kept for a short period so we can recover from a failure, and they age out on their own.
Under OpenAI's terms for business customers, what we send it is not used to train its models.
How long we keep it
Messages from the in-app chat, which is switched off, are deleted 90 days after they were sent. Feedback is deleted after 180 days. Your check-ins after a session are kept for 395 days. Each of those happens automatically.
Reports of severe pain are kept as long as your account. A record that you chose to carry on after one is kept for seven years from the day you made it, then deleted automatically, because a claim about an injury can be brought years later.
What you told us during setup we keep only for as long as you have an account and for a limited period after that, and then we delete it or strip out anything that identifies you. You can delete it yourself at any time, and that works.
Deleting your data
Open Settings and delete your account. It removes everything above except a record that you chose to carry on after reporting severe pain. We keep that record, including the report it answers, until its seven years are up, with a scrambled form of your phone number in place of your account so we can match it to you if you make a claim. We use it for nothing else and never attach it to a new account. You will be asked to confirm your phone number first, so you need the app still installed and the same number.
If you have already deleted the app and want your data gone, message us and we will do it for you. Some records may survive briefly in encrypted backups, which age out within 30 days. OpenAI may keep what we sent it for up to 30 days under its own terms; deleting your Knowbi account does not reach those copies.
What you should not send us
Please do not type anything into Knowbi that you would not want held by a small company on a commercial cloud. If you are a paying member who said yes to notes written by OpenAI, what you write about your medical conditions and at your check-ins is also sent to OpenAI, as described above.
In particular, do not send us government identifiers, financial account numbers, passwords, clinical records or scan results, information about another person, or anything you owe somebody else a duty of confidence about. Knowbi is not a medical records system and is not certified to any clinical data standard.
Who else sees your information
Amazon Web Services hosts our servers and database. OpenAI writes the notes in the sets of paying members who said yes, as described above. Google Firebase handles phone sign-in, push notifications, crash reporting, app settings, and checking that requests come from the genuine app. Apple and Google process purchases. Google AdMob shows ads to users without a membership or the no-ads pass. Each of them is bound, by contract or by its own published terms, to protect your information as this page requires, except that Google also uses what its ad software collects to show and measure ads, prevent fraud and improve its own services, under its own terms, explained at https://policies.google.com/technologies/partner-sites. Deleting your Knowbi account does not delete what Google holds.
We also disclose information where the law requires it, to our lawyers and insurers where we need to deal with a complaint or defend a legal claim, or to prevent serious harm to someone. We do not sell your personal information, the ads in Knowbi are never personalised, and we never give advertisers anything you have told us about your body or your health, or use it for marketing.
Your information crosses borders
We are an Australian company, our servers are in the United States, and some of our providers operate elsewhere. Your information is transferred out of the country you live in, and the law there may protect it less than your own law does. By using Knowbi you agree to that transfer. Where we are required to put safeguards around it, we do.
Your rights
Wherever you are, you can ask us what we hold about you, correct it, delete your account and your information (apart from the record under Deleting your data), withdraw consent to reminders and to notes written by OpenAI, and complain to us and to your privacy regulator. Depending on where you live you may also be able to ask for a portable copy of your data, or to restrict or object to some of what we do.
To exercise any of these, email help@structureforhealth.net. We respond within 30 days. We will ask you to verify that the account is yours, because we are not going to hand somebody else your health information because they asked.
Children
Knowbi is for people 18 and over. We do not knowingly collect information about anyone younger. If you tell us at setup that you are under 18, Knowbi stops and deletes your account. If you later change your age to under 18, we ask you to confirm it, and take you to delete your account if you do. If you believe a child has given us information, email us and we will delete it.
Where you live
If you are in Australia, we handle personal information under the Privacy Act 1988 and the Australian Privacy Principles, and you may complain to the Office of the Australian Information Commissioner.
If you are in Hong Kong, we handle personal data under the Personal Data (Privacy) Ordinance. This page is our collection statement, you may request access and correction, and you may complain to the Privacy Commissioner for Personal Data.
If you are in California, we have not sold your personal information and have not shared it for cross-context behavioural advertising. You may ask us to tell you what we hold, to delete it, or to correct it, and we will not treat you differently for asking.
Changes, and how to reach us
If we change this page we will update the date at the top, and if the change is significant we will tell you before it takes effect. If a change means your health information would go somewhere new, we will ask you again rather than assume.
Structure For Health Pty Ltd, ABN 90 665 250 751. Email help@structureforhealth.net. We aim to answer within a day, and to resolve a privacy complaint within 30 days.