Skip to content
KairoKAIRO

Privacy policy

Last updated 1 August 2026

Kairo (Pvt) Ltd handles personal information for people in Zimbabwe. This policy explains what the website collects, why, and the rights you have over it.

Who we are

Kairo (Pvt) Ltd operates kairohealth.fit and the Kairo mobile app. Our data protection officer, designated under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07], can be reached at privacy@kairohealth.fit.

What this website collects

Commerce data: your name, email address, mobile number, delivery address, order contents and payment status. We need this to take payment, ship a band and honour a warranty.

Support data: the content of messages you send us by form or WhatsApp.

Analytics data: anonymised page and event data, and only if you agree to it in the cookie banner. Declining changes nothing about how the store works.

The website does not collect health data. Readings from your band are handled inside the Kairo app under a separate, explicit consent taken at onboarding.

Health information

Data derived from your body is sensitive personal information under Zimbabwe's Cyber and Data Protection Act. We process it only with your express in-app consent, only to provide the coaching you asked for, and never for advertising. We do not sell personal information, and we do not share health data with third parties for their own purposes.

Payments

All payments are processed by Paynow (Zimbabwe). Card details are entered on Paynow's secure page — Kairo systems never receive or store your card number. Mobile-money payments are authorised on your handset with your own PIN; we receive only a confirmation and a reference.

Your rights

You may request a copy of your data, correct it, object to processing, or ask us to delete your account. Account holders can do the first and last of those themselves from Account → Details; exports are fulfilled within 30 days.

Order and payment records are retained for five years where tax law requires it. Marketing consent is logged with a timestamp and its source.

Complaints

If we have not resolved a concern, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the designated Data Protection Authority.