Kurbo Privacy Policy

Last Updated: August 03, 2021

Scope and Agreement to Terms

Kurbo Inc. (“Kurbo,” “we,” “us,” or “our”) provides a family-based healthy lifestyle coaching service designed to help empower young people, with the support of their parents, to develop healthy eating and activity habits. This service does not provide medical advice, and is not intended to be a replacement for discussion with your healthcare provider. We also urge young people aged 13 to 17 years of age (“Teens”) to discuss their weight-loss goals and concerns with their parents. While Teens may register for Kurbo on their own, parents or guardians of young people under the age of 13 (“Child” or “Children”) must register their Child directly and verify their consent for their Child to participate in Kurbo. Children cannot register for Kurbo on their own.

Kurbo is committed to your privacy and the protection of information you may entrust to us. This privacy policy (“Privacy Policy” or “Policy”) explains how information is collected, used, and disclosed by Kurbo in connection with your use of our websites, online services, and mobile application that link to this Privacy Policy (each a “Service”; collectively, “Services”), and, for parents/guardians of Children and Teens, how we will communicate with you.

Each time you use any Service, you consent to our collection, use, and/or disclosure of your (or your Child or Teen’s) personal information as described in this Privacy Policy. Each time you allow your Child or Teen (when applicable) to use any Service via your account, you confirm that you have the right to consent on their behalf to our collection, use, and disclosure of their information as described in detail below. Accordingly, we urge you to read this Privacy Policy in full, as well as our Terms of Service, and contact us if you have any questions.

We market and sell our products to adults and Teens who purchase or otherwise use our Services. Our Services can then be used by Children at the direction and under the supervision of a parent or guardian. We respect all of our users’ privacy, but we recognize the need to provide additional privacy protections with respect to the personal information we collect from children under 13 pursuant to the United States’ Children’s Online Privacy Protection Act of 1998 (“COPPA”). Accordingly, our privacy practices with respect to children under 13 are set forth below in our Children’s Privacy Policy.

  • A special note to Children: If you are under 13, please get a parent or legal guardian to sign you up for our Services.
  • A special note to Parents: Please help us protect your Children’s privacy by instructing them never to share their personal information online without your permission.

Effective Date and Changes to this Policy

This Privacy Policy is effective as of the date above and will remain in effect until a new notice supersedes it. We may choose to update this notice at our discretion, so you should check this page periodically as the terms may change from time to time. The most recent version of the notice will be reflected by the “last updated” date noted at the top of the page. Your use of the services after the effective date will constitute your consent to the updated Privacy Policy.

Information We Collect, How We May Use It, and How It May Be Deleted

Throughout this Privacy Policy, we use the term “Personal Information” to describe information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. that can be used to directly or indirectly contact or identify you, such as your full name, home or other physical address, email address, and telephone number. Personal Information also includes anonymous information that is linked to information that can be used to directly or indirectly contact or identify you. Personal Information does not include information that has been made anonymous or aggregated so that it can no longer be used, whether in combination with other information or otherwise, to contact or identify you.

We use the term “Non Personal Information” to describe aggregated information that cannot be used to directly or indirectly contact or identify you and that is not linked to information that can be used to directly or indirectly contact or identify you. Non Personal Information includes passively collected information about your activities on our Services, such as usage data, to the extent that information is not linked to your Personal Information. This Privacy Policy does not limit our use of any Non Personal Information, and we reserve the right to use and disclose such information to third parties at our discretion.

We limit the collection of Personal Information from users of our service, including Children or Teens where a parent or guardian has completed our sign up process, to only that which is reasonably necessary to provide and/or improve our service. We use the Personal Information that we collect in order to provide you with our Service, enhance your experience, improve our Services, communicate with you regarding the Service, monitor and ensure the security and integrity of the Service, investigate, prevent or take action related to illegal activities or violations of our Terms of Service or this Privacy Policy, aggregate non-identifiable information for research and development purposes, and provide you with customized content, offers and marketing messages from Kurbo in relation to the Service.

If you enroll in our coaching program, we record some coaching sessions for purposes of maintaining quality and internal training purposes. These recordings are not used for marketing, and are treated consistent with our Privacy Policy as outlined below.

Types of Personal Information we collect includes contact information, such as your email and mobile telephone number, which we use to contact you regarding the services and to send you regular notifications to facilitate participation in the Services. When you provide us with your mobile telephone number, you consent to receive SMS text messages from us. We may also collect billing information, which we may use to complete any payments you authorize for fee-based services and to verify parental consent for Children, demographic information about you and your family such as age, sex and number of family members to personalize the Service and coaching, personal wellness and nutrition information necessary for the provision of the Services, including height and weight information as well as information about food and exercise choices, and other information you may provide from participation in our interactive features such as quizzes and games.

You may also choose to provide us with information or other content through our Service, such as by using interactive features, communicating directly with us or your paid personal coaches through messages on the Service, texts, or email. For personalized coaching, you may transmit videos or interact through video chat with our coaches.

The Personal Information we have for your account will be available on your account for you to review, update or delete information in that account. If the user is a Child, the parent or guardian that signed them up for the service will have complete access to the account to review, update or delete information. Note that deleting some Personal Information may require the deletion of the entire account.

Kurbo’s policy is to keep accounts open and retain user data for three years after the last instance of a user tracking food intake. After a three-year period of inactivity, user accounts and any Personal Information will be deleted, unless the user’s sponsoring employer (if any) requires longer retention, in which case the employer’s data retention requirements will be followed. For shared family accounts, the entire family’s accounts and any personally identifiable information data will be deleted three years after the last family member tracked food intake, absent a longer period of retention being required by a sponsoring employer (if any).

Cookies and Other Similar Technologies

Through the use of cookies and other related technologies, we and our third party service providers also collect technical information about your use of our Services, including persistent identifiers such as your device identifier, and other information about your use of our Service so we can understand and improve our Services. We and our third party service providers use this automatically generated information, as well as other information that we or they have, to provide you with an optimal experience.

Our Personal Information collection and disclosure practices will continue to apply as described in this Privacy Policy, regardless of any “Do Not Track” signals that are sent by certain browsers. In general, Kurbo does not collect Personal Information about an individual’s online activities over time or across third-party websites or online services, and it does not permit others to do so other than as described in this Policy. You may refuse the setting of cookies by selecting the appropriate settings on your browser, including disabling all cookies from being set on that browser, however certain features of our service may not work if you disable cookies.

How We May Share Information

We will not share or disclose your Personal Information to others without your consent, except as noted in this Privacy Policy. Personal Information on the user’s weight loss goals and progress is shared with the user’s support system, including their parent or guardian, and their paid personal coach through the Coaches Portal. Paid personal coaches have full access to all program data through the coach’s portal to provide personalized coaching services, if you choose to engage the personalized coaching services. We may also enable users to send a summary report of progress to their personal physician/pediatrician.

We may share information with our carefully chosen third party service providers and business partners to provide these services and as otherwise disclosed in this Policy. We do not, however, share information of Children with any third parties for third parties’ marketing purposes.

We may also share your Personal Information without consent when the disclosure is required by law or regulation, or when it is necessary to comply with law, or a legal request such as a court order, search warrant, or subpoena or when you disclose or a coach observes activities that present a concern for your safety or wellbeing. We may also access, preserve, or share your Personal Information if it is necessary to detect, prevent, or address fraud and other illegal activity or to protect the safety, property or rights of Kurbo or others. Information may also be shared with a third party as the result of a corporate sale, restructuring, bankruptcy or transfer of assets, but we do not otherwise sell or rent Personal Information collected through our services. You acknowledge and consent that such transfers are permitted by this Privacy Policy, and that any acquirer of ours or that acquirer’s affiliates may continue to collect and use your Personal Information as set forth in this Privacy Policy.

Transfer of Personal Information

Subject to the provisions below regarding Canada, our Services operate under, and are subject to, United States laws, and any information you provide under these Services will be processed in the United States. Do not use these Services if you do not agree to the transfer and processing of your data in the United States.

Security

Kurbo endeavors to protect your Personal Information through the use of certain technical and organization security safeguards. However, no server or transmission on the internet or electronic database can be guaranteed to be secure, and therefore any activity on or through our Service is conducted at your own risk.

CHILDREN’S PRIVACY POLICY ADDENDUM

Kurbo is respectful of the privacy rights of all of our users, and recognizes the need to provide additional privacy protections with respect to the Personal Information we collect from Children. For information regarding how Kurbo collects information from children, what information it collects, and how parents can control and consent to that collection, see our Direct Notice to Adults, Parents, and Guardians here.

This Children’s Privacy Policy will control over any conflicting provisions in our general Privacy Policy. All references to the terms “parent” or “parental” shall include parents and legal guardians.

Information We Collect About Children

Account Creation

As described in our general Privacy Policy set for above, we do not allow Children to sign up for our Services, or purchase or otherwise subscribe to any Service. Our account creation feature is intended strictly for adult and Teen users, and we take measures to prevent Children from submitting Personal Information to our Service in this manner.

A parent user may open a Kurbo account for a Child by creating an account with login credentials for that Child on our website, or creating an anonymous child account for that Child on our mobile app that may be accessed only through the parent’s login credentials. We will not use login credentials provided for a Child at account creation for any purposes other than authenticating the Child’s login and facilitating the Child’s access to the Services. Moreover, all new users must read and accept Kurbo’s Direct Notice to Adults, Parents, & Guardians, this Privacy Policy, and our Terms and Conditions before registering an account.

We may collect certain types of Personal Information about Children from parents during the registration process, including the Child’s contact information, such as an email and mobile telephone number, which we may use to contact the Child regarding the Services and to send the Child regular notifications to facilitate participation in the Services. We may also collect from parents a Child’s first and last name and demographic information about the Child (e.g., age, sex, and number of family members) to personalize the Service and personal coaching sessions.

Personal Information We Collect From Children

We do not knowingly collect, use, disclose, or store any Personal Information from Children unless we have obtained prior verifiable parental consent. In any instance where we collect Personal Information from a Child, we will not require a Child to disclose more information than is reasonably necessary to participate in our Services. In the event that we discover that we have inadvertently collected Personal Information from a Child in a manner inconsistent with COPPA’s requirements, we will block the Child until we obtain parental consent to the Child’s use of the Services, and, if unsuccessful, we will delete the Child’s Personal Information. If you believe that we might have collected Personal Information from your Child without consent, please contact us at privacy@kurbo.com.

Persistent Identifiers

As described in our general Privacy Policy set for above, Kurbo may receive and record certain technical information from browsers as the Child uses our Services, such as a device ID. We collect and use this information solely for internal support purposes. When we collect this information, we combine it with other Non Personal information submitted by the Child user’s browser, such as requests to view a video from the server. We compile this information to create access logs, which we analyze to determine trends, such as which videos are watched the most. We do not link the technical information that we automatically collect to any Personal Information that we collect, and our access logs do not contain any information that can be uniquely associated with any particular IP address or Personal Information an individual user.

Kurbo will not use or retain any such Personal Information collected from Children to track a Child user across other websites or mobile applications.

Video or Audio Recordings

As described in our general Privacy Policy above, Kurbo also records some paid personal coaching sessions for purposes of maintaining quality and internal training purposes. These recordings are not used for any other purposes, including marketing.

Name, Health, Food, and Activity Information

We may collect your Child’s first and last name, as well as personal wellness and nutrition information, including height, weight, and food and activity choices, during your Child’s use of Kurbo, which we use solely to provide the Kurbo service.

Parental Consent to Collect Personal Information From Children

In the event Kurbo seeks to collect the Personal Information outlined above from a Child, we provide parental notice and seek verifiable parental consent via an affirmative consent screen that must be filled out by the parent during account creation. In our Direct Notice to Adults, Parents, and Guardians (“Direct Notice”), we describe what Personal Information we collect from Children, how we collect it, how we use it, how we disclose it, how the parent can consent to collection of such information, and parental rights over such information. This screen contains a consent box the parent must affirmatively click to acknowledge having read and accepted these privacy practices before the parent or Child may use our Services. We may choose to use other acceptable methods of obtaining verifiable parental consent, as the law permits or circumstances require.

How We Share the Personal Information We Collect

We will not share any Personal Information for Children collected through our Services with third parties, except as described below. We do not share Children’s Personal Information with third parties for marketing purposes. We may share Personal Information for Children with third-party service providers only if necessary for them to perform services on our behalf, including (without limitation) service providers who provide email services or other support of our internal operations.

Although it is not required nor do we undertake to do so in every circumstance, in the event that a user discloses, or a coach observes, activities that present an emergency for the safety or wellbeing of the user, such as rapid weight loss or gain or other unhealthy weight loss practices, mental health issues, or physical or mental abuse, Kurbo may alert the parent or guardian and/or other authorities and disclose relevant personal information as Kurbo, in its sole discretion, deems necessary or otherwise appropriate.

We may share Personal Information with our parent company, WW International, Inc., If we enter into a business transition such as a merger, consolidation, acquisition, reorganization, liquidation, or dissolution, the Child’s Personal Information may be among the assets we transfer. You acknowledge and consent that such transfers are permitted by this Policy, and that any acquirer of ours or that acquirer’s affiliates may continue to collect and use your Personal Information as set forth in this Privacy Policy.

We also reserve the right to disclose Personal Information when required to do so by applicable law, such as in response to a court order, subpoena, legal process, or other claim or inquiry. We also may disclose Personal Information in response to a law enforcement agency’s request or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, situations involving potential threats to the rights, property, or safety of any person, or violations of our Terms of Service, to verify or enforce compliance with the policies governing our Services and applicable laws, or as otherwise required or permitted by law or legal requirements.

Parental Access to and Control Over Personal Information Collected from Children

If the user is a Child, the parent that signed them up for the service may also request access to review, update, or direct us to delete the Child’s Personal Information by contacting us at privacy@kurbo.com. You may also cancel the account to prevent any further collection or use of the Child’s Personal Information.

To exercise your parental rights, including to access or request deletion of Personal Information we have collected and maintain through the Services from your Child, simply contact us at privacy@kurbo.com and note “Parental Rights Request” in the subject line of the email. In the body of the email, please include your Kurbo Account user name and your Child’s Kurbo Account user name (if applicable), plus your contact information for verification purposes, and whether you are requesting access to your Child’s information, or if you are requesting deletion of your Child’s Personal Information. Note that if you request deletion, your Child’s user account will be terminated.

How We Protect Children’s Information

We use reasonable technical, administrative, and physical security measures designed to safeguard and help prevent unauthorized access to all information we collect through our Services, maintain data security, and correctly use the information we collect. These measures include, but are not limited to, the use of encryption, physical access controls, and information access controls.

Please be aware that, despite our best efforts, no security measures are perfect or impenetrable. We cannot guarantee or warrant the security of any information disclosed or transmitted to us on or through the Services and cannot be responsible for the theft, destruction, loss, or inadvertent disclosure of the information we receive.

Country and State Specific Addendums

California Resident’s Privacy Rights

The California Consumer Privacy Act of 2018 (the “CCPA”) is a California law that gives California residents (“consumers”), the right to learn about and control certain aspects of how a business handles the Personal Information that a business collects about them. Pursuant to the CCPA, effective January 1, 2020, consumers have certain rights, including:

  • The right to know the categories of Personal Information we’ve collected and the categories of sources from which we got the information;
  • The right to know the business purposes for sharing Personal Information;
  • The right to know the categories of third parties with whom we’ve shared Personal Information;
  • The right to access the specific pieces of Personal Information we’ve collected;
  • The right to delete your information;
  • The right to opt-out of the sale of your information;
  • Consumers also have the right to not be discriminated against if they choose to exercise their privacy rights.

 

Categories of Personal Information under the CCPA

Sources of Personal Information

Why we collect that information

Identifiers and Personal information described in California Civil Code section 1798.80 We collect identifying information such as your name, contact information, and other information as described in this Policy.

We collect this information though our online services, when you use our services or you consent to your child using our services, through analytics or service providers, when you leave a testimonial, when you link your account to third party applications and devices, and through referral programs.

We collect this information in order to provide our services, respond to your questions or requests, troubleshoot, prevent fraud, and market to adults.

Protected classifications under California or federal law

We collect gender information.

We collect this information when you use our services.

We collect this information in order to provide our services.

Commercial information

We collect commercial information such as a record of services purchased.   

We collect this information when you subscribe or you subscribe your child to our services, when you link your account to third party applications and devices, and through referral programs.

We collect this information in order to provide our services; respond to your questions or requests; and market to adults.

Biometric information

To the extent such information is considered biometric information under the CCPA, we collect health, and exercise data.

We collect this information when you link your account to third party applications and devices, and when you input information directly.

We collect this information in order to provide our services, and respond to your questions or requests.

Internet or other electronic network activity information

We collect information about your browser and device, IP address, access time and log information. We also use cookies.

We collect this information when you visit our website, through our analytics or service providers, when you link your account to third party applications and devices, and through referral programs.

We collect this information to keep track of login information, tailor content to your interests, improve your experience on our website, prevent fraud and abuse, troubleshooting, and to personalize our website.

Geolocation data

We do not collect this information.

Not applicable.

Professional or employment-related information

We do not collect this information.

Not applicable.

Education information

We do not collect this information.

Not applicable.

Inferences drawn from any of the above to create a profile about a consumer

We do not collect this information.

Not applicable.

Your Rights Under the CCPA

Right to Opt-Out of Sale of Your Personal Information

Consumers have the right to request that a business that sells the consumer’s Personal Information, or that discloses it for a business purpose, inform the consumer of what has been collected about them and who it has been sold or disclosed to. Consumers also have the right, at any time, to direct a business that sells Personal Information about them not to sell their Personal Information.

  • We do not sell your information.

Right to Access / Data Portability

Consumers have the right to request that a business that collects Personal Information about them disclose the following: (1) The categories of Personal Information it has collected about that consumer; (2) The categories of sources from which the Personal Information is collected; (3) The business or commercial purpose for collecting or selling Personal Information; (4) The categories of third parties with whom the business shares Personal Information; (5) The specific pieces of Personal Information it has collected about that consumer. The disclosure shall cover the 12-month period preceding your request. We are not required to provide your Personal Information more than twice in a 12-month period.

Right to Deletion

Consumers have the right to request that a business delete any Personal Information about them. However, there are exceptions to this rule. For example, a business does not have to delete information if it is necessary to: a) complete a transaction; b) prevent illegal activity; c) exercise free speech; d) comply with a legal obligation; e) identify or repair errors that impair functionality; or f) otherwise use a consumer’s Personal Information, internally, that is compatible with the context in which the consumer provided that information.

Exercising Your Right to Know or Right to Deletion

  1. To submit a Request to Know or Request to Delete as a Consumer or as an Authorized Agent, send an email to privacy@kurbo.com. You can also call us toll-free at 800-444-7158.
  2. Once we receive a request, we will take steps to determine whether your request is a valid Verifiable Consumer Request. We will ask for information that is reasonable in light of the nature of your request.
  3. When you submit a request for access
    1. Within 45 days of receipt of your request, we will provide you with a copy of the information listed in “Right to Access / Data Portability,” above, electronically. To the extent possible, we will provide this information in a portable and useable format.
    2. In the event we need additional time, we will inform you within the initial 45-day period of our need for an additional 45 days (for a maximum of 90 days between request and provision of information).
  4. When you submit a request for deletion:
    1. If your request does not fall within one of the exceptions to deletion listed in “Right to Deletion,” above, we will confirm deletion within 45 days. If we are not required to delete your account, we also let you know within 45 days.

California Shine the Light Law

The California “Shine the Light Law,” California Civil Code Section 1798.83, permits California residents to request and obtain once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. California residents may make such a request in writing by emailing privacy@kurbo.com with your name and address, and noting “California Shine the Light Request” in the subject line of the email.

Canada Privacy Rights (For Canadian residents only)

Marketing

Canadian users will have an opportunity to opt-in to having their personal information used or disclosed to third parties for marketing or promotional purposes. At all times, a Canadian user would also be able to opt-out of such uses or disclosures.

Please contact us at privacy@kurbo.com:

  • If you wish to access, update, and/or correct inaccuracies in your Personal Information or change your consent preferences (note: we may need to collect additional Personal Information for the purposes of verifying your identity before responding to your request);
  • For information about how our foreign-based service providers process your Personal Information;
  • If you have any questions or complaints about the manner in which we treat your Personal Information.

Questions and information

If you have any questions regarding our collection, use, and disclosure of Personal Information, including Personal Information from Children, you may contact us at:

Kurbo Privacy Administrator
301 Howard, 15th Floor
San Francisco, CA 94105
800-444-7158
privacy@kurbo.com