Draft: not yet in effect. Under review.

Privacy policy

Last updated 3 November 2026

Who we are

Kamolu helps people organise plans with friends through their AI assistants. The data controller is [operator name to be confirmed], Czech Republic. Contact: support@kamolu.example.

What we collect

• Account: your email address, the display name you choose, and your timezone. If you sign in with Google, we receive your email and basic profile from Google.
• Connected assistants: which assistants you connected (for example Claude or ChatGPT), when, and when they last used Kamolu. We never see your assistant passwords or your conversations.
• Plans: titles, candidate times, the first names of people you invite, and the final time you confirm.
• Answers: which times someone can make, and the name they enter. Friends who answer through an invite link do so without an account. We store only the name they type and their chosen times.
• Emails: if you have an account, we email you about your plans (new answers, when everyone has answered, confirmed times, direct invites). You can turn this off in Settings. Guests can optionally leave an email to get the final time.
• Connections: when you agree that an organiser may invite you directly, we record that link between your two accounts. Either of you can remove it in Settings.
• Security data: to prevent abuse, we keep short-lived counters keyed by a one-way hash of your IP address or email. We also keep a log of actions (for example "plan created") without the content of your plans.

We do not use advertising or tracking cookies, and we do not sell personal data.

Why we use it (legal bases)

• To provide Kamolu to you: performance of our agreement with you (GDPR Art. 6(1)(b)).
• To let invited friends answer and to show their answers to the organiser: our and the organiser's legitimate interest in arranging the plan (Art. 6(1)(f)).
• To keep Kamolu secure and prevent abuse: legitimate interest (Art. 6(1)(f)).

Who sees what

• The organiser of a plan sees everyone's answers to that plan.
• People with an invite code or link see the plan's title, organiser name and times, the first names the organiser invited (so friends can tap their name) and the names of people who already answered, but not what anyone picked.
• Your AI assistant: when you connect an assistant (such as Claude by Anthropic or ChatGPT by OpenAI) and ask it to use Kamolu, the information Kamolu returns is shared with that assistant's provider under their own privacy terms.

Service providers

• Supabase: database and sign-in (data stored in London, United Kingdom).
• Vercel: hosting (servers in London, United Kingdom).
• Google: only if you choose "Continue with Google".
• Resend: sends Kamolu's emails (sign-in codes and plan notifications).

The United Kingdom is covered by an EU adequacy decision. Our providers may process limited data elsewhere under their standard data protection terms.

How long we keep it

Plans, including everyone's answers and the names guests typed, are deleted automatically 90 days after their last time slot. If you asked to be emailed a plan's final time, we keep that email address only until the message is sent. Your account and connections stay until you delete your account. Deleting it removes your account, the plans you organised and your assistant connections; your answers in other people's plans remain as "Former Kamolu user" until those plans expire. Security counters expire within a day, and sent email records after 30 days.

Your rights

You can access, correct, export or delete your data, and object to or restrict how we use it. You can delete your account yourself in Settings; for anything else, email us. You can also complain to the Czech data protection authority (ÚOOÚ, uoou.cz).

Children

Kamolu is not intended for children under 16.

Changes

If we change this policy, we will update this page and its date.