Privacy Policy
Last update: 09/04/2025
At Kokoro, your privacy is of the utmost importance to us. When you use our BNFit app, you entrust us with personal — and sometimes sensitive — data. We see this as a great responsibility and handle your data with the utmost care.
We process your data in accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws. In this policy, we clearly and transparently explain which data we collect, why we collect it, and what your rights are.
Who are we?
This privacy policy applies to the BNFit mobile application, offered by:
Kokoro Business
Pierre Debbautstraat 6
8200 Bruges, Belgium
Kokoro is the data controller, meaning we are responsible for the safe, careful, and lawful processing of your personal data.
For any questions about this privacy policy, please contact us at info@bnfit.be.
What data do we collect and why?
We only collect data necessary for the proper functioning of the app, and only after you have given your explicit consent.
| CATEGORY | DATA | PURPOSE |
|---|---|---|
| Personal data | Name, email address, profile photo | For account management and communication |
| Health data | Steps, active minutes, workout duration | To track your progress and assign Benefits |
| App usage | Activity in the app, participation in challenges, reward requests | To improve our services and user experience |
| Device info | App version, device type, operating system | For technical support and troubleshooting |
How do we access health data?
We synchronize your health data via:
- Apple Health (for iOS)
- Google Health Connect (for Android)
You choose whether or not to allow this connection. Without your permission, we cannot track your steps or movement, and therefore cannot assign Benefits.
You can manage your permissions at any time through:
- Your phone’s system settings
- The profile settings in the BNFit app
How long do we retain your data?
Your data will only be retained as long as necessary for the operation of the app:
- Your profile and health data are stored as long as your account is active
- When you delete your account, your data is deleted within 30 days
- Legally required data (e.g. transaction records) is kept for as long as required by law (usually 7 years)
- Non-personal, anonymized data may be kept longer for statistical purposes
How can you delete your data?
You can delete your account at any time via the app’s profile settings.
Once confirmed, your data will be permanently deleted from our systems within 30 days unless we are required by law to retain certain records (e.g., for tax purposes).
Do we share your data?
We do not share your data with third parties for marketing purposes.
We only share your data when necessary, and only with:
- Your employer (aggregated data only)
- Technical service providers
We work exclusively with processors within the EU or countries with adequate data protection (such as those under the EU-U.S. Data Privacy Framework). We have data processing agreements in place with all partners, obliging them to handle your data securely and confidentially.
How do we protect your data?
We take appropriate technical and organizational measures to protect your personal data, including:
- Secure (encrypted) connections
- Encryption of sensitive data
- Access restrictions within our team
Your rights
Under the GDPR, you always have the right to:
- Access your data
- Correct inaccurate data
- Restrict processing
- Delete your data
- Object to data processing based on legitimate interest
- Withdraw your consent at any time
- Transfer your data to another provider (data portability)
You can exercise your rights by contacting info@bnfit.be.
We will respond within 30 days. In some cases, we may request additional information to verify your identity.
Complaints
Are you unhappy with the way we handle your data? Please contact us directly — we are here to help.
You may also file a complaint with the supervisory authority:
Data Protection Authority (Belgium)
Drukpersstraat 35
1000 Brussels
+32 (0)2 274 48 00
contact@apd-gba.be
