Privacy policy
Last updated 1 August 2026
Kairo (Pvt) Ltd handles personal information for people in Zimbabwe. This policy explains what the website collects, why, and the rights you have over it.
Who we are
Kairo (Pvt) Ltd operates kairohealth.fit and the Kairo mobile app. Our data protection officer, designated under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07], can be reached at privacy@kairohealth.fit.
What this website collects
Commerce data: your name, email address, mobile number, delivery address, order contents and payment status. We need this to take payment, ship a band and honour a warranty.
Support data: the content of messages you send us by form or WhatsApp.
Analytics data: anonymised page and event data, and only if you agree to it in the cookie banner. Declining changes nothing about how the store works.
The website does not collect health data. Readings from your band are handled inside the Kairo app under a separate, explicit consent taken at onboarding.
Health information
Data derived from your body is sensitive personal information under Zimbabwe's Cyber and Data Protection Act. We process it only with your express in-app consent, only to provide the coaching you asked for, and never for advertising. We do not sell personal information, and we do not share health data with third parties for their own purposes.
Payments
All payments are processed by Paynow (Zimbabwe). Card details are entered on Paynow's secure page — Kairo systems never receive or store your card number. Mobile-money payments are authorised on your handset with your own PIN; we receive only a confirmation and a reference.
Your rights
You may request a copy of your data, correct it, object to processing, or ask us to delete your account. Account holders can do the first and last of those themselves from Account → Details; exports are fulfilled within 30 days.
Order and payment records are retained for five years where tax law requires it. Marketing consent is logged with a timestamp and its source.
Complaints
If we have not resolved a concern, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the designated Data Protection Authority.