Privacy Notice
Last updated: 27 June 2026
1. Who we are
KYN is operated by Simon Loftus ("we", "us", "our"), trading as KYN. We act as the data controller for personal data processed through the KYN service.
2. Personal data we collect
- Account data: name, email address, login credentials.
- Training profile: age, weight, experience level, goals, race times, heart rate zones, availability.
- Activity data: workouts logged, RPE, pace, distance, heart rate, recovery feedback.
- Connected device data: activities imported from Garmin, Strava and similar services when you connect them.
- Support communications: messages you send us.
- Usage and device data: IP address, browser/device identifiers, telemetry about how you use KYN.
3. How we use your data and legal bases
- To provide the service — generating and adapting training plans (contract).
- Account and security — authentication, fraud prevention, abuse protection (legitimate interests / legal obligation).
- Customer support — responding to your messages (legitimate interests / contract).
- Product improvement — aggregated analytics to improve KYN (legitimate interests).
- Marketing emails — only with your consent; you can unsubscribe at any time.
4. Sharing your data
We share personal data only with:
- Service providers / subprocessors — hosting, database, email delivery, analytics, and AI inference providers acting on our instructions.
- Paddle.com Market Ltd — our Merchant of Record for all paid subscriptions. Paddle processes payment data, handles billing, tax compliance, invoicing and subscription management. See Paddle's Privacy Policy.
- Connected services — Garmin, Strava, etc. only when you connect them, to import your activities.
- Professional advisers — legal, accounting, where necessary.
- Authorities — where required by law.
5. International transfers
Some of our providers process data outside the UK/EEA. Where this happens we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
We keep your account and training data for as long as your account is active. If you close your account, we delete or anonymise personal data within 90 days, except where we are required to retain it for legal, tax or fraud-prevention purposes.
7. Your rights
Depending on your location you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. UK/EEA users also have the right to complain to their supervisory authority. We aim to respond within one month. Contact us at the email below to exercise these rights.
8. Security
We use appropriate technical and organisational measures including encryption in transit, access controls, and regular review of our subprocessors to protect your data.
9. Cookies
KYN uses essential cookies needed to sign you in and keep your session active, and limited analytics cookies to understand product usage. You can manage cookies through your browser settings.
10. Contact
Questions about this notice or your data: hello@kynrun.com (Simon Loftus, trading as KYN).