Privacy Policy

Version 2.0 · Last updated October 14, 2026

The short version. KOKO is a technology platform where people discover, book, and log martial-arts training. KOKO is not a gym, coach, or training provider. We collect what we need to run the app, keep people safe, and process payments. We do not sell your personal information. You can download or delete your data at any time.

This Privacy Policy explains how KOKO Industries LLC, a Hawaii limited liability company doing business as "KOKO" ("KOKO," "we," "us"), collects, uses, shares, and protects personal information when you use the KOKO app, the downloadkoko.com website, and our related services (the "Platform"). It is part of our Terms of Service.

1. Information we collect

1.1 Information you give us

• Account and profile: name, email address, phone number (if you provide it), password or sign-in credentials, profile photo, disciplines, rank, gym affiliation, bio, and the roles you choose (athlete, coach, gym, organizer).
• Training activity: sessions you post, join, check in to, or log; your Track Record (such as mats, mat time, streaks, and arts); notes and technique tags you add; and the people you train with.
• Content: photos, videos, captions, comments, reactions ("Oss"), reviews, and messages.
• Bookings and payments: the coach sessions you book, cancel, or reschedule, and the amounts you pay. Card and bank details are entered directly with our payment processor, Stripe. We do not receive or store your full card number.
• Coaches: your offering, prices, availability, locations, and credentials or insurance information you choose to provide. To receive payouts, you give Stripe the identity, tax, and bank information it requires. We receive verification status and limited details from Stripe, not your full bank or tax identification numbers.
• Waivers: when you accept KOKO's waiver or a coach's waiver, we record your name, the waiver version, the date and time, and the account and device information associated with your acceptance.
• Health information you choose to share: for example, an injury you mention in a training note or tell a coach about through the app. Sharing it is optional. Share only what you are comfortable sharing.
• Support and feedback: what you send us when you contact us, report a problem, or answer a survey.

1.2 Information collected automatically

• Location: with your permission, we use your device's precise location to show nearby gyms, coaches, and sessions and to support check-in. We may also estimate your approximate location from your IP address. You can turn off location access in your device settings, though some features will not work without it.
• Device and usage: IP address, device and operating system type, app version, crash data, pages and screens viewed, and how you interact with the Platform.
• Cookies and similar technologies: to keep you signed in, remember preferences, and understand how the Platform is used (see Section 7).

1.3 Information from others

• Other users: for example, when a coach records a no-show, a session host adds details to a session you joined, or someone reports a safety concern involving you.
• Payment processors: confirmation of payments, refunds, and disputes, and coach verification status from Stripe.
• Sign-in providers: basic account information you authorize if you sign in with Apple, Google, or another provider.
• Public sources: business information about gyms and coaches (see Section 6).

2. How we use information

We use personal information to:

• Run the Platform: create your account, show the map and schedules, let you post, join, book, check in, and log sessions, and build your Track Record.
• Process bookings and payments: collect payments for coach sessions, confirm sessions through check-in, release coach payouts, issue refunds, and handle disputes and chargebacks.
• Keep people safe: verify accounts, enforce adults-only coaching, investigate reports, prevent fraud and abuse, and preserve evidence when there is a safety incident.
• Communicate with you: booking confirmations, changes, reminders, receipts, security notices, and (if you opt in) news and marketing.
• Improve the Platform: understand how features are used, fix bugs, and develop new features.
• Meet legal obligations: keep tax, payment, and waiver records, respond to lawful requests, and enforce our terms.

We do not use your health information or precise location for advertising.

3. What other people can see

Your profile and activity. Your profile, posts, and logged training (including where you trained) are visible to other users according to your settings and the visibility you choose for each post. Do not post anything you do not want others to see.

Sessions you join. Attendance is shown to other users only as a head count. The names on a session's Roster are never public. Only the person who posted the session can see who has joined. We never show other users that a specific person will be at a specific place at a specific time.

Messages. Direct messages are private between you and the people in the conversation. They are not visible to other users. KOKO does not read your messages, except when needed to investigate a report, protect someone's safety, prevent fraud, enforce our terms, or comply with the law.

Coach bookings. When you book a coach, the coach sees your name, contact details, booking details, check-in status, and whether you have accepted their waiver. When you are a coach, athletes see your offering and the details of their bookings with you. Individual private bookings are never shown publicly.

Gyms. Where a gym uses KOKO features (such as check-in), the gym can see only your activity at that gym, not your activity elsewhere or your full Track Record, unless you choose to share it.

4. How we share information

We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising. We share it only:

• With other users, as described in Section 3.
• With service providers who process it for us under contract and only to provide their services, including payment processing (Stripe), hosting and database, maps, email and push notifications, customer support, and analytics.
• For legal and safety reasons: to comply with law or legal process; to respond to a credible threat to someone's safety; to investigate fraud, misconduct, or a violation of our terms; or to protect the rights, property, or safety of KOKO, our users, or the public.
• In a business transfer: if KOKO is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may transfer as part of that transaction, subject to this Policy.
• With your direction or consent: for example, when you add a session to your calendar, share your Track Record, or connect another service.

We may share information that has been aggregated or de-identified so it no longer identifies you.

5. Payments

Payments are processed by Stripe, Inc. under its own Privacy Policy. When you pay for a coach session, KOKO collects the payment as the coach's limited payment collection agent, as described in the Booking Terms. Stripe may use your information for fraud prevention and to meet its own legal obligations.

6. The gym and coach directory

To make the map useful from day one, KOKO maintains a directory of martial-arts gyms, coaches, and sessions. Some listings are created by the gym or coach. Others are compiled by KOKO from publicly available sources, such as public websites, public class schedules, business directories, and public social media profiles. Directory listings contain business information, such as a gym's name, public address, phone number, website, schedule, and disciplines. If you operate a listed gym or are a listed coach, you can claim, correct, or ask us to remove your listing at [email protected].

7. Cookies, analytics, and Global Privacy Control

We use cookies, SDKs, and similar technologies that are necessary to run the Platform and to measure how it is used. We do not use them for cross-context behavioral advertising. You can control cookies through your browser and device settings. Where required by law, we treat a Global Privacy Control browser signal as a request to opt out of the sale or sharing of personal information. We do not sell or share personal information in either case.

8. Communications

We send service messages, such as booking confirmations, changes, receipts, and security notices, which you cannot opt out of while you have an account. If you opt in to marketing email, push notifications, or text messages, you can opt out at any time: use the unsubscribe link, change your notification settings, or reply STOP to texts. Message and data rates may apply.

9. How long we keep information

We keep personal information only as long as we need it for the purposes in this Policy:

• Account, profile, and training data: while your account is active, then deleted or de-identified after you delete your account, except as described below.
• Booking, payment, and tax records: at least 7 years, as required for tax, accounting, and dispute purposes.
• Waiver acceptances, incident reports, and safety records: for as long as legal claims related to them could be brought, and at least 7 years.
• Backups: deleted data may remain in secure backups for up to 90 days before it is overwritten.

10. Your choices and rights

Everyone can:

• see and update most profile information in the app;
• request a copy of your personal information;
• ask us to correct inaccurate information;
• delete your account in the app or by emailing us (we will delete or de-identify your information except what we must keep under Section 9); and
• opt out of marketing communications.

Residents of certain states, including California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states with comprehensive privacy laws, may have additional rights. These can include the right to know what personal information we collect and how we use it, to access, correct, delete, and receive a portable copy of it, to opt out of sale, sharing, targeted advertising, and certain profiling (we do not do these), and to limit the use of sensitive personal information. We use sensitive information, such as precise location, only to provide the services you request. We will not discriminate against you for exercising your rights.

How to make a request: email [email protected]. We will verify your identity before acting on your request and will respond within the time the law requires (generally 45 days). You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision, and we will respond to your appeal within the time required by law.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit and access controls. No system is completely secure. If a security breach affects your personal information, we will notify you and the authorities as required by law, including Hawaii's security breach notification law (HRS Chapter 487N).

12. Children

KOKO is for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and the Platform is not directed to children under 13. Coach bookings are for adults only. If we learn that we have collected personal information from someone under 18, we will delete it. If you believe a minor has created an account, contact us.

13. Where information is processed

KOKO is based in the United States, and we store and process information in the United States. If you use the Platform from outside the United States, you understand that your information will be transferred to and processed in the United States.

14. Changes to this Policy

We may update this Policy. If we make material changes, we will notify you through the Platform or by email before they take effect and will update the "Last updated" date above.

15. Contact

KOKO Industries LLC · PO Box 961, Kailua, HI 96734 · [email protected]