Legal
Privacy Policy
Your tasks are stored on your phone. Here's when data is sent, who processes it and how you can exercise your rights.
Last updated: September 13, 2026
Data controller
Tomáš VaverkaCzech RepublicBusiness registration number: 02581892Contact: hello@kitsuzen.com1. Who we are
Kitsuzen is an app for planning personal tasks on Android. This policy explains how the app and this website handle personal data: what is stored, what it is used for, who receives it and what rights you have.
The data controller is identified at the top of this page. You can contact the controller at hello@kitsuzen.com with questions or to exercise the rights described in Section 10.
2. What is stored on your device
The app’s storage on your device contains:
- tasks and their notes;
- thoughts captured in Brain dump;
- categories and settings;
- reflections, your notes on them and notes made when closing the day;
- focus and energy records;
- ratings and notes added after completing tasks;
- records of tasks the app suggested that day that remained unfinished;
- automatic local backups.
You can work with tasks, planning and overviews without the internet. We don’t keep a cloud copy of your content on our server or sync it between devices. Some features send data, including content for AI processing; Section 4 explains exactly what is sent.
You can create a full data export in JSON or a readable overview in Markdown. You can delete local data, including backups created by the app, directly in Kitsuzen. Copies saved outside the app need to be deleted separately.
3. No usage analytics or advertising tracking
Neither the app nor this website uses usage analytics, advertising identifiers or third-party analytics or advertising libraries. We don’t collect app usage data for analytics or build advertising profiles.
Some features and technical operations involve sending certain data. The following section explains what is sent and why.
4. What leaves your device and when
4.1 AI features (Premium)
Two Premium features use OpenAI:
- Sorting thoughts. This runs only when you choose to start it. We send your written thoughts, the category information needed to assign tasks, the current date and the app’s language.
- Weekly reflection. With an active Premium subscription, you can request it on the last day of the week. Otherwise, it is generated automatically when the week is closed. We send completed tasks and their details, including notes, tracked time and energy ratings, ongoing energy records, weekly mix settings, your note on the week and the app’s language. Only the relevant week is processed.
The content sent may include personal data you have entered in your tasks or notes.
The content passes through our server, which checks your Premium entitlement and forwards it to OpenAI for processing. Our server does not store a copy of the content. Section 7 explains retention by OpenAI, and Section 8 covers transfers outside the European Economic Area.
We don’t add your name, email address, account identifier or device identifier to the content sent to OpenAI. However, these details may appear in text you have written yourself. We therefore recommend leaving out sensitive or unnecessary personal data.
Tasks for the Now view are selected directly on your device without AI. No data is sent for this selection.
4.2 Your Premium subscription
You purchase and manage Premium through Google Play. Google processes payment details under the terms of its service.
When you use AI, our server checks your Premium entitlement using sign-in and purchase information. It stores technical identifiers and request counts for this verification and to prevent abuse. This is not a cloud copy of your tasks. Retention is described in Section 7.
4.3 Messages you send us
When you contact us through the app or the website form, we receive the information you provide: your message, topic or subject, and any name and email address you include. You can also attach a file through the website; messages from the app don’t have attachments. Our server forwards the message to our mailbox. We use it to handle your question or feedback and reply where appropriate. We don’t use it for marketing.
To protect the form from spam, we process your IP address or its network portion and the number of submissions. These are used only to protect the service. Retention is described in Section 7.
If you request a notification when the app launches, the form sends your email address, language and the URL of the page you requested it from. We use your email to send one launch notification and then delete it. You can also ask us to delete it at any time before then.
An invitation to a friend opens in your email app with a prefilled message. You enter the recipient’s address and send the message yourself; Kitsuzen does not receive that address.
4.4 Google sign-in
You can use the free features without signing in. Premium requires Google sign-in. Your Google account name, email address and profile photo are displayed in the app and remain on your device while you are signed in. We don’t upload them to our own profile database. The photo is loaded from Google’s servers, so Google receives that request.
4.5 Dictation
Dictation in Brain dump uses the system’s speech recognition service. Kitsuzen itself does not record, store or send audio. On most Android devices, speech recognition is provided by Google. Depending on your device and settings, audio may be processed on your phone or on Google’s servers; we don’t control this choice. If you prefer not to use speech recognition, you can type your thoughts instead.
4.6 Crash reports
If the app crashes, a technical report is sent automatically to help us find the cause and fix the issue. It contains the location of the error in the code, the Kitsuzen and Android versions, the device model and the app’s actions before the crash. It does not include your text, name, email address or account identifier. Your IP address is not stored with the report.
Our processor for these reports is Sentry, with hosting in the EU. We use reports only to fix issues, not for usage analytics.
4.7 Installation and updates through Google Play
Google Play handles installation and updates. As the store operator, it collects its own data, including crash and performance information from devices where this is enabled. Google controls this processing under its privacy policy. It is separate from our reports described in Section 4.6.
5. This website
This website uses no cookies or analytics. Website and contact mailbox hosting is provided by ACTIVE24, which processes the relevant data on our behalf when providing these services.
When you visit the website, technical logs are created containing your IP address, the time of the request and the page requested. They are used to secure the website and resolve technical issues. Section 4.3 covers form data, and Section 7 covers retention.
6. The legal bases for processing your data
We process personal data on the following legal bases under the GDPR:
- Performance of our contract with you (Article 6(1)(b)): providing AI features, verifying your Premium entitlement and responding to your message.
- Our legitimate interests (Article 6(1)(f)): protecting the service from abuse through limits and server logs, finding and fixing the causes of crashes, and sending the one app launch notification you requested.
- Legal obligation (Article 6(1)(c)): retaining data where required by accounting or consumer law.
We don’t process personal data for advertising and never sell it.
7. How long we keep your data
| Data | How long we keep it |
|---|---|
| Content stored in the app | On your device until you delete it. We don’t keep a cloud copy on our server. |
| Content processed by AI | Our server does not store it. By default, OpenAI does not use the content sent to it to train models. It may retain it for up to 30 days to monitor abuse, and longer only if required by law or necessary to protect the service or third parties from harm. For details, see OpenAI’s documentation on data handling. |
| Support messages and attachments | While we handle your request and for up to three years afterwards if needed as evidence. |
| Data from launch notification requests | Your email address, language and the page URL arrive as a message in our mailbox. We keep them until we send the launch notification, or until you request deletion if that happens sooner. |
| Crash reports | Up to 90 days with Sentry. |
| Technical data for Premium verification and abuse prevention | These records have a limited validity period. Once it expires, we no longer use them to verify Premium or limit requests. However, they may remain stored after they expire; no fixed deadline for deleting them is currently set. |
| Web server logs | ACTIVE24 retains them under the rules of its service. |
8. Processing outside the European Economic Area
Some providers may also process data outside the European Economic Area, for example in the United States. This applies particularly to OpenAI’s services and may also include access to data stored in the EU by providers’ staff based abroad.
OpenAI sets out its data processing terms in its data processing addendum. For transfers from the EEA, the addendum provides for the use of standard contractual clauses or a European Commission adequacy decision. Sentry’s terms for processing data and transferring it outside the European Economic Area are described in its data processing addendum, particularly Section 6 and Schedule 3.
Google’s separate processing of data when you use Google Play and system services is governed by Google’s privacy policy.
9. No data sales or advertising
- We don’t collect app usage data for analytics or build advertising profiles.
- We don’t send task content to a server except through the two Premium AI features (Section 4.1). Crash reports don’t contain it. If you choose to include content in a support message, Section 4.3 applies.
- We don’t sell your data. We share it with third parties only as described in this policy.
- We don’t use your personal data for advertising or display any ads.
10. Your rights
You can request access to your personal data and a copy of it. Subject to the conditions set out in the GDPR, you can also request rectification, erasure, data portability or restriction of processing. You can object to processing based on our legitimate interests.
You can export or delete content stored in the app directly on your device. You don’t need to send us a request to do this.
You can send your request to hello@kitsuzen.com. We will respond within one month. If we need more details to locate your data, we will ask you for them. We cannot access content stored only on your phone.
If you believe we are handling data unlawfully, you can lodge a complaint with the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or the supervisory authority in your country.
11. Children
Kitsuzen is intended for adults. It is not aimed at children, and we do not knowingly collect data from children under 15.
12. Changes
We will explain significant changes to this policy clearly in the app and on this page before they take effect. You can find the date of the latest update at the top.
13. Contact
For privacy questions, you can contact us directly at hello@kitsuzen.com.