Kokoro Collective 心集
KNOX · KOKORO COLLECTIVE PTY LTD

KNOX Privacy Policy

Effective date: 19 October 2026

1. About this policy

KNOX is a personal health records app. It keeps your health documents in one encrypted vault, lets you track symptoms, cycles and appointments over time, and includes Athena, an assistant that explains what your records say in plain language. KNOX is built and operated by Kokoro Collective Pty Ltd (ABN 55 693 411 880), referred to in this policy as “Kokoro Collective”, “we”, “us” or “our”.

This policy explains what personal information KNOX collects, why we collect it, how we store and protect it, who we share it with, and the choices you have. It applies to the KNOX app, including early access and test versions, and to knoxhealth.ai.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where you use KNOX from outside Australia, we also aim to meet the privacy laws that apply where you live.

KNOX is not a medical device and does not provide medical advice, diagnosis or treatment. Always talk to a qualified health professional about your health.

2. Information we collect

We collect only what KNOX needs to keep your records and give you useful explanations.

Information you give us

  • Account details: your name and email address, and any profile details you choose to add, such as your age, sex or life stage (for example, perimenopause or pregnancy planning).
  • Health records: documents, photos, PDFs and screenshots you upload, such as test results, specialist letters, imaging reports, prescriptions and screening records, and the values KNOX extracts from them.
  • Your Living Record: anything you log in KNOX trackers and journals, such as symptoms, cycle and hormone information, energy, mood, medications, supplements, screenings and appointment notes.
  • Conversations with Athena: the questions you ask and the answers Athena gives you.
  • Messages to us: anything you send when you contact us for support or feedback, or when you join the early access list.

Information collected automatically

  • Device and app data: device type, operating system version, app version and language settings.
  • Push notification token: if you allow notifications, a device token so we can send them.

What we do not collect

KNOX does not collect your precise location or contacts. It does not contain advertising or advertising trackers.

Health information

Almost everything you put in KNOX is health information, which Australian law treats as sensitive information. We collect it only with your consent, which you give by choosing to upload or log it, and we use it only to provide KNOX to you. You can withdraw consent at any time by deleting the item or your account (see section 5).

3. How we use your information

We use your information to:

  • create and manage your account and sign you in;
  • store your records and Living Record entries and show them back to you;
  • read values from documents you upload and show trends over time;
  • let Athena explain your records, notice patterns and prepare appointment briefings when you ask;
  • send reminders and notifications, if you turn them on;
  • respond to support requests and feedback;
  • find and fix bugs and keep KNOX secure;
  • meet our legal obligations.

How Athena uses your information

Athena uses an artificial intelligence service to read your records and write explanations. When you ask Athena about a document or entry, only the content needed for that request is sent to our AI service provider to produce a response. Our provider may not use your information to train its models, and may not keep it longer than it needs to respond. Athena’s explanations are information, not medical advice.

What we never do

  • We do not sell or rent your personal information.
  • We do not show advertising in KNOX or use your information for advertising.
  • We do not share your health information with employers, insurers or data brokers.
  • We do not use your records, entries or conversations to train artificial intelligence models.
  • We do not use your information to make automated decisions that affect you.

If we want to use your information for a purpose not listed here, we will ask you first.

4. Who we share information with

We share personal information only with the parties below, and only as much as each needs.

  • People you choose: if you share or print an appointment briefing or a record, it goes to whoever you give it to. We do not share your records with any doctor, clinic or other person unless you do.
  • Service providers who host and run KNOX for us, under contracts that require them to protect your information and use it only for our purposes:
    • our hosting provider, which stores your KNOX data on encrypted servers;
    • our AI service provider, which processes requests you make to Athena (see section 3);
    • a push notification service, if you turn notifications on.
  • Apple and Google: when you download KNOX or join a test, Apple and Google process information under their own privacy policies.
  • Legal reasons: where required by law, court order or a government authority, or to protect someone’s safety.
  • Business transfer: if Kokoro Collective is sold or merged, your information may transfer to the new owner, who must keep protecting it under this policy.

Storage outside Australia

Some of our service providers, including our AI service provider, may process information outside Australia. Where they do, we take reasonable steps to make sure they protect it to the standard the Australian Privacy Principles require.

5. Security, retention and deletion

How we protect your information

Your records are encrypted in transit (HTTPS/TLS) and at rest, and KNOX is designed so that our team cannot read the records stored in your vault. We limit access to personal data within our team and use secure hosting with reputable providers. No system is completely secure, so we cannot guarantee absolute security. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.

How long we keep it

  • Records, Living Record entries and Athena conversations: while your account is active, unless you delete them sooner. If your account is inactive for 24 months, we will email you and then delete it.
  • Support messages: up to 2 years after the conversation ends.
  • Early access and test data: deleted or reset when testing ends, unless you carry on into the released app.

We may keep limited records longer where the law requires it.

Deleting your account and data

You can delete individual documents and entries in the app at any time. To delete your KNOX account and all associated data, email hello@kokorocollective.com.au with the subject “Delete my KNOX account” from the email address on your account.

We permanently delete your account, records, entries and Athena conversations from our systems within 30 days of your request, and from backups within a further 30 days. Uninstalling the app does not delete your account.

6. Your rights and choices

You can ask us to:

  • give you a copy of the personal information we hold about you;
  • correct information that is wrong, out of date or incomplete;
  • delete your account and data (see section 5);
  • stop sending you reminders or emails.

You can also turn off notifications in your device settings at any time. We respond to requests within 30 days and do not charge for them. We may need to confirm your identity first. You can use KNOX under a pseudonym where practical, but we need a working email address to run your account.

Children

KNOX is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

Changes to this policy

We may update this policy as KNOX changes or the law changes. The effective date at the top shows the latest version. If we make a significant change, we will tell you in the app or by email before it takes effect.

7. Contact and complaints

For privacy questions, requests or complaints, contact:

Privacy Officer, Kokoro Collective Pty Ltd
Email: hello@kokorocollective.com.au
Website: knoxhealth.ai

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.