Privacy Policy

1. Introduction

Kanboombo ("we", "us", or "our") operates the Kanboombo productivity application and the website at www.kanboombo.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

2. Information We Collect

2.1 Account Information

When you create an account we collect your name, email address, and password. If you sign in with Apple or Google, we receive the profile information those providers share (name, email, and a unique identifier).

2.2 Usage Data

We collect information about how you interact with the Service, including time-tracking entries, check-ins, calendar events, tasks, notes, and project data you create.

2.3 Device & Timezone Information

The mobile app sends your device timezone (e.g. America/New_York) with API requests so we can display dates correctly and store where an interaction physically occurred. We do not collect precise GPS location.

2.4 Health & Fitness Data (iOS)

If you opt in, the iOS app reads workout data from Apple HealthKit (workout type, start/end time, optional calories and distance, source app name). This data is used solely to display your fitness activities in your Kanboombo calendar. We do not sell or share HealthKit data with third parties, and it is never used for advertising.

2.5 Push Notification Tokens

When you enable notifications we store a device push token so we can deliver alerts. You can disable notifications at any time through your device settings.

2.6 Crash & Performance Data

We use Sentry for crash reporting and performance monitoring. Sentry may collect device information, IP address, and error context. This data is used exclusively to diagnose and fix bugs.

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Authenticate your identity and secure your account
• Display your productivity data (events, check-ins, tasks, notes)
• Send transactional emails (password resets, OTP codes)
• Deliver push notifications you have opted into
• Diagnose technical issues and improve performance
• Process payments (via Stripe) if you subscribe to a paid plan

4. Third-Party Services

We share data with the following service providers, only as needed to operate the Service:

• Apple — Sign in with Apple authentication and push notification delivery
• Google — Google Sign-In authentication
• Stripe — Payment processing for subscriptions
• Sentry — Crash reporting and performance monitoring
• DigitalOcean — Cloud infrastructure hosting

We do not sell your personal information to any third party.

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will soft-delete your account and permanently remove your data within 30 days, unless we are required by law to retain it longer.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for optional data collection (e.g. HealthKit)

To exercise any of these rights, email us at [email protected].

7. Account Deletion

You can delete your account at any time from the Settings screen in the app. Account deletion revokes all active sessions and schedules permanent removal of your data within 30 days. If you signed in with Apple, we also revoke our access to your Apple ID.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed passwords, and scoped API tokens via Laravel Sanctum. However, no method of electronic transmission or storage is 100% secure.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Meta Platform Disclosures

If you use a Kanboombo feature connected to Meta technologies (including Facebook Login, Instagram, or WhatsApp integrations where applicable), we process only the minimum data required to provide the requested functionality, comply with Meta Platform Terms, and secure your account. We do not sell Meta-sourced personal data.

You can request deletion of your account data at any time by following our Data Deletion Instructions.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]