🛡️ Your Privacy Rights at a Glance
🔒 Complete Data Control
View, export, modify, or permanently delete all your data anytime
👁️ Full Transparency
We clearly explain what data we collect, why, and who we share it with
📍 Optional Location
City sharing for weather is completely voluntary
🧠 AI Processing Control
Choose your level of AI analysis or disable it completely
📊 Data Minimization
We only collect what's necessary to provide our service
🌍 GDPR Compliant
Full compliance with international privacy regulations
1. Information We Collect
Account & Profile Information
📧 Email address - For account creation, login, and important notifications
👤 Full name - To personalize your experience and communications
🎂 Date of birth - To provide age-appropriate content and insights
🖼️ Profile picture - Optional, only if you choose to upload one
⚙️ App preferences - Your settings, theme choices, and notification preferences
Multi-Modal Journal Content
✍️ Text entries - Written journal entries you create in the app
🎤 Voice recordings - Audio recordings and AI-generated transcriptions
🎨 Visual artwork - Drawings, paintings, and creative visual entries
📷 Uploaded images - Photos of handwritten journal pages you scan
Location Information (Optional)
We store only the city name you provide (e.g., "Vienna"), not precise GPS coordinates. This is completely optional and used exclusively to provide local weather information on your dashboard. You can update, change, or delete your location information anytime.
2. How We Use Your Information
- Provide Core Services: Process your journal entries, provide AI-powered insights, track your journaling progress
- Personalization: Customize prompts, recommendations, and insights based on your journaling patterns
- AI Analysis: Analyze your journal content to identify emotional patterns, themes, and growth opportunities
- Communication: Send important account notifications and optional journaling reminders
- Improvement: Analyze aggregated, anonymized data to improve our service
3. AI Processing & Third-Party Services
We use Anthropic's Claude AI to analyze your journal entries and provide personalized insights. When you submit a journal entry for analysis:
- Your journal text is sent to Anthropic's secure servers for processing
- Anthropic does not store your journal content after processing
- Anthropic does not use your data to train their AI models
- All data transmission uses TLS 1.3 encryption
We also use Firebase (Google) for authentication, database, and storage services. Firebase complies with GDPR and other international privacy regulations.
4. Data Security
We implement comprehensive security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Secure Storage: Data stored on Firebase servers with enterprise-grade security
- Access Control: Strict authentication and authorization protocols
- Regular Audits: We regularly review and update our security practices
5. Your Rights & Choices
You have full control over your data:
- Access: View all data we have about you through the app's settings
- Export: Download all your journal entries and data in portable formats
- Correction: Update or correct any inaccurate information
- Deletion: Permanently delete your account and all associated data
- Opt-out: Disable AI analysis, notifications, or optional features anytime
- Data Portability: Receive your data in a structured, machine-readable format
6. Data Retention
We retain your data as follows:
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: All personal data is permanently deleted within 30 days of account deletion
- Backups: Backup copies are deleted within 90 days
- Anonymized Data: Aggregated, anonymized analytics data may be retained indefinitely
7. Children's Privacy
Καιρός is designed for users 13 years and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at privacy@kairos-journal.com.
For users between 13-18, we provide additional protections including age-appropriate content, limited data sharing, and crisis resources.
8. International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses where required
- Equivalent data protection standards maintained globally
9. Changes to This Policy
We may update this Privacy Policy from time to time. For significant changes that affect your rights:
- We'll notify you by email at least 30 days before changes take effect
- We'll display a prominent notice in the app
- You can object to changes or delete your account before they take effect