K N T C©

Privacy Policy

Last updated: April 2026 · bekntc.co.uk

Global Privacy Notice: This policy is designed to meet the requirements of multiple data protection frameworks including UK GDPR, EU GDPR, the California Consumer Privacy Act (CCPA/CPRA), Canada's PIPEDA, Australia's Privacy Act 1988, Brazil's LGPD, and other applicable privacy laws. The rights available to you depend on the laws of your country or state of residence — see Section 7.

1. Who We Are

KNTC ("we", "us", "our") is a performance tracking platform for female athletes, accessible at bekntc.co.uk. We are the data controller for personal data collected through this app.

For any data-related enquiries: hello@bekntc.co.uk

2. What Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address
  • Health & biometric data (Special Category / Sensitive): menstrual cycle data, cycle phase, flow levels, symptoms and severity scores, mood, training performance, physiological stage, and related notes
  • Usage data: log timestamps, app interactions
  • Payment data: handled exclusively by Stripe — we do not store card details

Under CCPA/CPRA, health and biometric data is classified as "sensitive personal information". Under GDPR/UK GDPR it is "special category data". Under PIPEDA and Australia's Privacy Act it is "sensitive information". In all cases, we apply the highest standard of protection.

3. Why We Collect It & Legal Basis

We process your data solely to provide the KNTC service. Our legal bases by jurisdiction:

🇬🇧 UK & 🇪🇺 EU — UK GDPR / EU GDPR

  • Explicit consent (Article 9(2)(a)): required for health data — you give this at registration
  • Contract performance (Article 6(1)(b)): for account and subscription data
  • Legitimate interests (Article 6(1)(f)): platform security and improvement

🇺🇸 United States — CCPA/CPRA (California & broader US)

  • We do not sell or share your personal information for cross-context behavioural advertising
  • Sensitive personal information (health/biometric data) is only used to provide the service you requested
  • California residents have additional rights — see Section 7
  • We do not knowingly collect data from users under 16 years of age

🇨🇦 Canada — PIPEDA / Provincial Laws

  • We collect only the minimum data necessary for the purpose identified at registration (principle of data minimisation)
  • Your consent is obtained at registration and may be withdrawn at any time
  • You may access and correct your information at any time

🇦🇺 Australia — Privacy Act 1988 / APPs

  • We handle your sensitive information (health data) only with your consent and only for the primary purpose of providing KNTC
  • We do not disclose sensitive information to overseas recipients without your consent, except where required by law
  • You may request access to or correction of your data at any time

🇧🇷 Brazil — LGPD & Other Jurisdictions

  • We rely on consent as the legal basis for processing sensitive health data
  • You have the right to confirmation, access, correction, anonymisation, portability, deletion, and revocation of consent
  • For users in other countries, we apply the protections described in this policy as a global baseline

4. Who We Share Data With

We do not sell your data. We may share it only with:

  • Your coach — only if you explicitly link your account to them within the app
  • Stripe — payment processing only; they do not receive health data
  • Base44 — our hosting infrastructure; subject to their Data Processing Agreement

All third-party processors are contractually bound to process data only on our instructions and to maintain appropriate security measures.

5. International Data Transfers

Our infrastructure may involve transfers of data outside your country of residence. Where data is transferred from the UK or EU, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses). We take reasonable steps to ensure overseas recipients handle your data consistently with this policy.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your membership or request deletion, your personal data will be permanently deleted within 30 days, except where retention is required by law.

7. Your Rights by Jurisdiction

🇬🇧 UK / 🇪🇺 EU residents — UK GDPR / EU GDPR

Access · Rectification · Erasure · Restriction · Portability · Object to processing · Withdraw consent · Lodge a complaint with the ICO (ico.org.uk) or your national supervisory authority

🇺🇸 California residents — CCPA/CPRA

Know what personal information is collected · Know if it is sold or disclosed · Opt out of sale (we do not sell data) · Access & deletion · Non-discrimination · Limit use of sensitive personal information · Submit requests via hello@bekntc.co.uk

🇨🇦 Canadian residents — PIPEDA

Access your data · Correct inaccuracies · Withdraw consent · File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca)

🇦🇺 Australian residents — Privacy Act 1988

Access & correction of your personal information · Complain to the Office of the Australian Information Commissioner (oaic.gov.au)

🌍 All other users

You may request access, correction, or deletion of your data at any time by emailing hello@bekntc.co.uk. We will respond within 30 days.

To exercise any right, contact hello@bekntc.co.uk. We will respond within the timeframe required by your applicable law (maximum 30 days).

8. Children's Privacy

KNTC is not intended for users under 16 years of age. We do not knowingly collect data from anyone under 16. If you believe a minor has registered, please contact us immediately at hello@bekntc.co.uk.

9. Cookies & Analytics

KNTC uses only essential session cookies required for authentication. We do not use third-party advertising or tracking cookies.

10. Security

All data is transmitted over HTTPS and stored in encrypted databases. Access to health data is restricted to you and, where applicable, your explicitly linked coach.

11. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

Email: hello@bekntc.co.uk

Regulatory contacts by region:

  • UK: Information Commissioner's Office — ico.org.uk
  • EU: Your national Data Protection Authority — edpb.europa.eu
  • Canada: Office of the Privacy Commissioner — priv.gc.ca
  • Australia: Office of the Australian Information Commissioner — oaic.gov.au
  • US (California): California Privacy Protection Agency — cppa.ca.gov

© KNTC · bekntc.co.uk · hello@bekntc.co.uk