KIZMIT Privacy Policy

Last updated: June 30, 2026 · Effective: June 30, 2026

This Privacy Policy explains how ‹‹FILL IN: LEGAL ENTITY NAME›› ("KIZMIT," "we," "us," or "our") collects, uses, stores, and protects information when you use the KIZMIT application and website at kizmit.app (the "Service"). KIZMIT is a personal wellness and calendar reflection tool. We built it on a simple principle: your data exists to help you understand your own patterns. We do not sell it, we do not advertise against it, and we do not use it for anything you have not agreed to.

We do not sell your personal information. We do not use it for third-party advertising. We do not share it with third parties except the limited service providers needed to operate the Service, described below.

1. Who this policy applies to

This policy applies to everyone who interacts with KIZMIT: visitors to our website and registered users who connect a calendar and use the app. Where a section applies only to a specific group (for example, only to people who connect a Google Calendar), we say so.

2. Information we collect

2.1 Account information

When you create an account, we collect the email address and authentication details needed to sign you in and secure your account. Authentication is handled through our backend provider (Supabase). We store the minimum identity information required to operate your account.

2.2 Google Calendar data (only if you connect it)

KIZMIT's core feature is reflecting your calendar back to you alongside ambient conditions like the lunar phase and barometric pressure. To do this, with your explicit consent, we request read-only access to your Google Calendar using the calendar.readonly scope. This is the most limited calendar scope Google offers.

What we read from your calendar:

• Event titles, start and end times (or all-day designation), event dates, and time zone information.
• Recurring-event identifiers, so we can recognize when an event is part of a series.

What we do NOT do:

• We do not request or use write access. KIZMIT cannot create, edit, move, or delete anything on your Google Calendar.
• We do not read your contacts, email, Drive files, or any other Google data. Our access is limited to calendar events, read-only.
• We do not sell, rent, or share your calendar data with any third party for advertising, marketing, or any purpose unrelated to providing the Service to you.

What we store: We store a copy of the calendar event fields listed above in our database so the app can display your agenda and let you record how events felt to you. You can disconnect your calendar and delete this data at any time (see Section 7). We keep your calendar data only while your account is active and you remain connected.

2.3 Weather and location

To show you ambient conditions (barometric pressure, sky conditions), KIZMIT retrieves local weather and forecast data from a third-party weather provider (Open-Meteo). To do this we use an approximate location. We use location only to fetch relevant weather and conditions — we do not use it to track your movements or build a location history.

2.4 Optional check-in and cycle data

KIZMIT lets you record short daily check-ins about how you're feeling. These check-ins are entirely optional and are stored only when you choose to enter them.

Separately, KIZMIT offers an optional feature to note whether you have your period on a given day, which the app uses as a private, silent input when surfacing your personal patterns. This is health-related information, and we treat it with particular care:

• It is never required. KIZMIT works without it.
• It is used only to help compute your own private patterns within your account.
• It is never displayed as a label or category, never shared, and never used for advertising.
• You can delete it at any time by deleting the relevant entries or your account.

2.5 Technical and usage information

Like most online services, our infrastructure providers automatically process limited technical information (such as IP address and basic device or browser information) as needed to deliver the Service securely and reliably. We use this to operate, secure, and troubleshoot the Service, not to profile you.

3. How we use your information

We use the information described above only to:

• Provide the Service — display your agenda, ambient conditions, and the personal patterns KIZMIT helps you notice.
• Let you record and review how events and days felt to you.
• Compute correlations within your own data (for example, between your check-ins and the lunar phase or barometric pressure) so that patterns can emerge from what you record.
• Maintain, secure, and improve the Service.
• Communicate with you about your account and the Service, including security, transactional, and service messages that are necessary to what you have signed up for.
• With your opt-in consent, send you marketing and educational communications about KIZMIT, including new features, wellness and somatic practices, events, courses, and related offerings. We only send these if you have affirmatively opted in, we never require it as a condition of using KIZMIT, and you can withdraw at any time using the unsubscribe link in any such message or by contacting us. Withdrawing marketing consent does not stop essential service messages.

Google user data — specific limits. KIZMIT's use of information received from Google APIs adheres to the Google API Services User Data Policy (link: https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We use Google Calendar data only to provide and improve user-facing features within KIZMIT, we do not transfer it except as necessary to provide the Service or as required by law, we do not use it for advertising, and we do not allow humans to read it except where you give explicit consent, where required for security or to comply with law, or where the data has been aggregated and anonymized.

4. Your privacy rights (US state laws)

KIZMIT is intended for users in the United States (see Section 11). Depending on the US state you live in, you may have rights under state privacy laws (such as those in California, Virginia, Colorado, and a growing number of other states) to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of certain processing. Because some of what KIZMIT handles is health-related (your optional cycle entries), we treat it with particular care and rely on your consent to collect and use it: it is always optional, you can decline it, and you can withdraw and delete it at any time. Withdrawing consent does not affect processing already carried out. To exercise any of these rights, contact us using the details in Section 12. We will not discriminate against you for exercising your rights.

5. How information is shared

We do not sell your personal information. We share information only with the limited service providers that make KIZMIT work, and only as needed for them to perform their function:

• Supabase — our backend and database provider, which stores your account and app data.
• Google — the source of your calendar data, accessed through Google's OAuth system under read-only scope, only after you connect.
• Open-Meteo — our weather and forecast data provider.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition), in which case we will require the recipient to honor this policy or notify you of any material change.

6. How long we keep your information

We keep your account and app data for as long as your account is active. We keep calendar data only while you remain connected. If you disconnect your calendar, we delete the stored calendar data associated with that connection. If you delete your account, we delete your personal data as described below.

7. Your choices and rights

Account deletion. KIZMIT includes a built-in account-deletion feature. When you delete your account, we remove your personal data from our active systems, including your stored calendar data, check-ins, and any optional cycle entries. Some information may persist briefly in backups before being overwritten in the ordinary course.

Disconnecting your calendar. You can revoke KIZMIT's access to your Google Calendar at any time, either within KIZMIT or directly from your Google Account permissions page at myaccount.google.com/permissions (link: https://myaccount.google.com/permissions).

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address in Section 12. We will not discriminate against you for exercising your rights.

8. How we protect your information

We use industry-standard measures to protect your data, including encrypted connections, access controls, and storing authentication tokens securely on our servers rather than in your browser. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to it to what is necessary to operate the Service.

9. Children's privacy

KIZMIT is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this policy as KIZMIT evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after a change takes effect means you accept the updated policy.

11. Where KIZMIT is offered

KIZMIT is intended for users in the United States. It is not directed to, or intended for, individuals in the European Economic Area or the United Kingdom, and we do not market the Service in those regions. If you access KIZMIT from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

12. How to contact us

If you have questions about this policy or your data, contact us at privacy@kizmit.app. The entity responsible for your data is ‹‹FILL IN: LEGAL ENTITY NAME››, ‹‹FILL IN: MAILING ADDRESS››.