Legal
Privacy Policy
Your tasks are stored on your phone. Here's when data is sent, who processes it and how you can exercise your rights.
Last updated: October 13, 2026
Data controller
Tomáš VaverkaCzech RepublicBusiness registration number: 02581892Contact: hello@kitsuzen.com1. Who we are
Kitsuzen is an app for planning personal tasks on Android. This policy explains how the app and this website handle personal data: what is stored, what it is used for, who receives it and what rights you have.
The data controller is identified at the top of this page. You can contact the controller at hello@kitsuzen.com with questions or to exercise the rights described in Section 10.
2. What is stored on your device
The app’s storage on your device contains:
- tasks and their notes;
- thoughts captured in Brain dump;
- categories and settings;
- reflections, your notes on them and notes made when closing the day;
- focus and energy records;
- ratings and notes added after completing tasks;
- records of tasks the app suggested that day that remained unfinished;
- automatic local backups.
You can work with tasks, planning and overviews without the internet. We don’t keep a cloud copy of your content on our server or sync it between devices. Some features send data, including content for AI processing; Section 4 explains exactly what is sent.
You can create a full data export in JSON or a readable overview in Markdown. You can delete local data, including backups created by the app, directly in Kitsuzen. Copies saved outside the app need to be deleted separately.
3. Usage statistics only with your consent
The app currently collects no usage statistics. If we introduce them, we will ask for your consent before measuring how you use the app, solely to improve its flows and UI. You will be able to withdraw consent in Privacy & data. Usage statistics will never include your tasks, notes or other content. Crash reports are a separate channel (Section 4.6).
We don’t profile you, track you across apps, use advertising identifiers or sell your data. This website uses no cookies or analytics (Section 5).
Some features and technical operations involve sending certain data. The following section explains what is sent and why.
4. What leaves your device and when
4.1 AI features (Premium)
Two Premium features use OpenAI:
- Sorting thoughts. This runs only when you choose to start it. We send your written thoughts, the category information needed to assign tasks, the current date and the app’s language.
- Weekly reflection. With an active Premium subscription, you can request it on the last day of the week. Otherwise, it is generated automatically when the week is closed. We send completed tasks and their details, including notes, tracked time and energy ratings, ongoing energy records, weekly mix settings, your note on the week and the app’s language. Only the relevant week is processed.
The content sent may include personal data you have entered in your tasks or notes.
The content passes through our server, which checks your Premium entitlement and forwards it to OpenAI for processing. Our server does not store a copy of the content. Section 7 explains retention by OpenAI, and Section 8 covers transfers outside the European Economic Area.
We don’t add your name, email address, account identifier or device identifier to the content sent to OpenAI. However, these details may appear in text you have written yourself. We therefore recommend leaving out sensitive or unnecessary personal data.
Tasks for the Now view are selected directly on your device without AI. No data is sent for this selection.
4.2 Your Premium subscription
You purchase and manage Premium through Google Play. Google processes payment details under the terms of its service.
When you use AI, our server checks your Premium entitlement using sign-in and purchase information. It stores technical identifiers and request counts for this verification and to prevent abuse. This is not a cloud copy of your tasks. Retention is described in Section 7.
4.3 Messages you send us
When you contact us through the app or the website form, we receive the information you provide: your message, topic or subject, and any name and email address you include. You can also attach a file through the website; messages from the app don’t have attachments. Our server forwards the message to our mailbox. We use it to handle your question or feedback and reply where appropriate. We don’t use it for marketing.
To protect the form from spam, we process your IP address or its network portion and the number of submissions. These are used only to protect the service. Retention is described in Section 7.
If you request a notification when the app launches, the form sends your email address, language and the URL of the page you requested it from. We use your email to send one launch notification and then delete it. You can also ask us to delete it at any time before then.
An invitation to a friend opens in your email app with a prefilled message. You enter the recipient’s address and send the message yourself; Kitsuzen does not receive that address.
4.4 Google sign-in
You can use the free features without signing in. Premium requires Google sign-in. Your Google account name, email address and profile photo are displayed in the app and remain on your device while you are signed in. We don’t upload them to our own profile database. The photo is loaded from Google’s servers, so Google receives that request.
4.5 Dictation
Dictation in Brain dump uses the system’s speech recognition service. Kitsuzen itself does not record, store or send audio. On most Android devices, speech recognition is provided by Google. Depending on your device and settings, audio may be processed on your phone or on Google’s servers; we don’t control this choice. If you prefer not to use speech recognition, you can type your thoughts instead.
4.6 Crash reports
If the app crashes or runs into an unexpected error, a technical report is sent automatically to help us find the cause and fix the issue. It contains the type and location of the error in the code (a stack trace), the Kitsuzen and Android versions, the device model, and the types and times of technical events leading up to the error. It does not include your tasks, notes or other text you entered, your name, email address or account identifier. Free-text error messages and descriptions of your actions are removed; no screenshots, screen contents or recordings are sent. Your IP address is not stored with the report.
Each report includes a random identifier of your app installation. It is generated on your device and isn’t linked to your account. It lets us see how many installations a problem affects. The app also counts its sessions, so we can see what share of them ended in a crash.
Crash reports are on by default. You can turn them off in the app under Privacy & data. While they are off, nothing is sent.
Our processor for these reports is Sentry, with hosting in the EU. We use reports only to fix issues, not for usage analytics.
4.7 Installation and updates through Google Play
Google Play handles installation and updates. As the store operator, it collects its own data, including crash and performance information from devices where this is enabled. Google controls this processing under its privacy policy. It is separate from our reports described in Section 4.6.
5. This website
This website uses no cookies or analytics. Website and contact mailbox hosting is provided by ACTIVE24, which processes the relevant data on our behalf when providing these services.
When you visit the website, technical logs are created containing your IP address, the time of the request and the page requested. They are used to secure the website and resolve technical issues. Section 4.3 covers form data, and Section 7 covers retention.
6. The legal bases for processing your data
We process personal data on the following legal bases under the GDPR:
- Performance of our contract with you (Article 6(1)(b)): providing AI features, verifying your Premium entitlement and responding to your message.
- Our legitimate interests (Article 6(1)(f)): protecting the service from abuse through limits and server logs, finding and fixing the causes of crashes, and sending the one app launch notification you requested.
- Legal obligation (Article 6(1)(c)): retaining data where required by accounting or consumer law.
We don’t process personal data for advertising and never sell it.
7. How long we keep your data
| Data | How long we keep it |
|---|---|
| Content stored in the app | On your device until you delete it. We don’t keep a cloud copy on our server. |
| Content processed by AI | Our server does not store it. By default, OpenAI does not use the content sent to it to train models. It may retain it for up to 30 days to monitor abuse, and longer only if required by law or necessary to protect the service or third parties from harm. For details, see OpenAI’s documentation on data handling. |
| Support messages and attachments | While we handle your request and for up to three years afterwards if needed as evidence. |
| Data from launch notification requests | Your email address, language and the page URL arrive as a message in our mailbox. We keep them until we send the launch notification, or until you request deletion if that happens sooner. |
| Crash reports and session counts | Up to 90 days with Sentry. |
| Technical data for Premium verification and abuse prevention | These records are short-lived: Premium verification is valid for 5 minutes, the AI request counter for up to 2 hours and the message counter for up to 30 minutes after your last request. Once they expire, we no longer use them. Our server removes expired records after a request, at most once an hour. If no requests arrive, the records remain stored until the next request triggers cleanup. |
| Web server logs | ACTIVE24 retains them under the rules of its service. |
8. Processing outside the European Economic Area
Some providers may also process data outside the European Economic Area, for example in the United States. This applies particularly to OpenAI’s services and may also include access to data stored in the EU by providers’ staff based abroad.
OpenAI sets out its data processing terms in its data processing addendum. For transfers from the EEA, the addendum provides for the use of standard contractual clauses or a European Commission adequacy decision. Sentry’s terms for processing data and transferring it outside the European Economic Area are described in its data processing addendum, particularly Section 6 and Schedule 3.
Google’s separate processing of data when you use Google Play and system services is governed by Google’s privacy policy.
9. No data sales or advertising
- We collect usage statistics only with your consent, and they never include your content. None are collected yet. We don’t profile you or track you across apps.
- We don’t send task content to a server except through the two Premium AI features (Section 4.1). Crash reports don’t contain it. If you choose to include content in a support message, Section 4.3 applies.
- We don’t sell your data. We share it with third parties only as described in this policy.
- We don’t use your personal data for advertising or display any ads.
10. Your rights
You can request access to your personal data and a copy of it. Subject to the conditions set out in the GDPR, you can also request rectification, erasure, data portability or restriction of processing. You can object to processing based on our legitimate interests.
You can export or delete content stored in the app directly on your device. You don’t need to send us a request to do this.
You can send your request to hello@kitsuzen.com. We will respond within one month. If we need more details to locate your data, we will ask you for them. We cannot access content stored only on your phone.
If you believe we are handling data unlawfully, you can lodge a complaint with the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or the supervisory authority in your country.
11. Children
Kitsuzen is intended for adults. It is not aimed at children, and we do not knowingly collect data from children under 15.
12. Changes
We will explain significant changes to this policy clearly in the app and on this page before they take effect. You can find the date of the latest update at the top.
13. Contact
For privacy questions, you can contact us directly at hello@kitsuzen.com.