Privacy policy

What we store

Account: your name, email address and sign-in method (email and password, Google, or a passkey).

Content you create: events, tasks, notes, lists, moments (photos and captions), the groups you create or join and your role in them, and your preferences (for example note folders and how many days Home shows).

Group conversations: chat messages, comments and reactions you post in groups.

Activity in groups: a log of who added, edited, completed, deleted or commented on something in a group (for example “Ana completed the task …”). Only that group's members see it, it is deleted automatically after 90 days, it never includes the titles of encrypted notes, and your private space is not logged.

Read receipts in groups: when you open a group's chat or one of its items, the time is stored so the other members see “Seen by …”. You can turn this off in Settings → Security; then nothing is stored and you don't see others' receipts either. Nothing like this exists for your private space.

Suggestions and problem reports you send us, together with your device type (for example “Android · Chrome”), app language and the page you were on. Your email address is attached only if you allow us to contact you.

Biometric sign-in (passkeys): only the public key of each passkey, a device label and when it was last used. Your fingerprint or face never leave your device — your phone or computer checks them.

Technical data: language and time zone (to show dates and send reminders at the right time), push-notification tokens of the devices where you enable notifications, and an optional personal Kelunor ID.

Error reports: when the app runs into an error, including one it shows you on screen, it sends technical details (the error message and its code, the page, the device type, whether it runs as an app or in a browser, and the app version) without your name, account or content. They are deleted after 30 days.

Usage counts: to know how Kelunor is used, the app tells our server once a day which sections you open (for example Calendar or Notes) and whether it runs installed or in a browser, on a phone or a computer. Only daily totals are kept; to count each person once a day, the server keeps just today's date and the sections opened today, deleted with your account. Nothing is stored on your device and no cookies are used.

Reports and blocking: in a group you can report a message, a comment or a person to the Kelunor team. The report contains who reported whom, the reason, what you add, and the reported text as your device shows it (also when the chat is end-to-end encrypted); it is deleted when it has been handled or when your account is deleted. Blocking is private: the list of people you blocked is stored in your account and they are not told.

Photos and documents in group chats and attached to events, tasks and notes: what you send (PDF, Office files, audio, video…, up to 20 MB) is stored in the group's space and, when the chat is end-to-end encrypted, encrypted on your device first. Only the group's members can open it; it is deleted with the message or the item.

Private chats (1:1): a chat between two people, encrypted end-to-end like group chats. With someone outside your groups it starts only after they accept your request (sent to their Kelunor ID or e-mail address); we never tell you whether an e-mail address has an account. Either of you can delete the chat, which removes it for both, with all messages, photos and documents.

Photos are re-encoded on your device before upload; location (GPS) and camera information are removed.

Voice: when you speak to quick add, the sentence as understood is kept with the event or task it created (shown as “Said: …”), so you can see where it came from; it is encrypted like the item's title. Your voice settings (countdown, answers read aloud, voice confirmation, on-device recognition) are kept in your account.

Who can see your content

Items saved as “Only me” are visible only to you. Items, chat messages, comments and reactions in a group are visible only to that group's members. Nobody can join a group without an invitation, and invite links additionally require approval by a group admin.

End-to-end encrypted notes — and chat messages and comments in groups that use end-to-end encryption — are encrypted on your device. We cannot read them.

Your encryption key stays on your devices. To make unlocking easier it can also be stored encrypted with a passkey (biometric unlock), or sent encrypted to a new device that you approve by scanning a QR code. We never receive the key itself.

We do not sell your data, we show no ads and we use no advertising or tracking cookies.

On your device

The app keeps a few things in your browser's storage: your language and display preferences, a cache of your data and photos for speed and offline use, and — if you choose — your unlocked encryption key, so you don't have to type your passphrase every time. Signing out removes the cache; the key is kept only if you left “Stay unlocked on this device” on. Nothing of this is used for tracking.

What quick add learns from your corrections (for example that “Football” is a task, or goes in a certain group) is kept only on that device and is never sent to us.

Voice commands are understood on your device, and answers are read aloud by your device. The Android home-screen widget only has buttons that open the app; it shows none of your content.

Service providers and location

Kelunor runs on Google Firebase (Google Cloud): authentication, database, file storage, hosting, cloud functions and push notifications. Data is stored in the European Union (europe-west1, Belgium). Google acts as our data processor.

Push notifications are delivered through the push service of your browser or phone (Google, Apple or Mozilla). They never include the content of your items or messages — only who did what, in which group.

To protect the service from bots and automated abuse, the app uses Google reCAPTCHA Enterprise (Firebase App Check). It evaluates technical signals from your browser (not your content) to confirm that requests come from the genuine Kelunor app.

We count visits to the website anonymously, only by type of device (phone, tablet or computer; Android, iPhone or other), to know where to improve. No cookies, no IP address and nothing that identifies you is stored; your browser only remembers that it was counted today.

End-to-end encryption: unless you turn it off, the content of your items (titles, texts, lists, places, links, photos and their captions, chat and comments) is encrypted on your device before it is sent. Keys are made and kept on your devices; we and Google receive only encrypted data and cannot read it. Dates, times, repetition, done/not done, assignment and group membership stay readable so reminders and sharing work. Details: kelunor.com/security.

Speaking instead of typing (the microphone button) uses your browser's or phone's speech recognition. Depending on the device, the audio may be processed by Google or Apple to turn it into text; Kelunor only receives the text and never stores audio.

Readable, not end-to-end encrypted, so groups and invitations work: group names, members' display names and e-mail addresses, and who is in which group.

If you turn on on-device recognition (Settings → Voice) and your browser supports it, the audio of what you say doesn't leave your device at all. If you ask Google Assistant to add something to Kelunor, Google processes what you said and passes the text to the app, where you confirm it.

Services you open yourself: opening a place on a map (Google Maps or OpenStreetMap) or joining a video call (Jitsi) takes you to that service, under its own privacy policy; Kelunor sends it nothing else. The private calendar link lets another calendar (Google, Apple, Outlook) read your events: it shows only “🔒 Kelunor” for private events, unless you choose to show their titles — those events are then no longer end-to-end encrypted.

Legal basis and retention

We process your data to provide the service you signed up for (performance of a contract, GDPR art. 6(1)(b)). We keep it as long as you have an account; group activity entries are deleted after 90 days.

When you delete your account, your data — including your comments, reactions, chat messages, suggestions and passkeys — is deleted immediately from our live systems. Copies in our safety backups are deleted automatically within 12 weeks; deleted photos remain recoverable for 7 days.

Items you delete go to the trash for 30 days, where you can restore them; after that they are deleted for good.

Your rights

You can download a copy of everything you created, at any time: Settings → Account → “Download my data” (a file you can open or move to another service).

You can access and edit your data in the app at any time, and delete your account (Settings → Delete account), which removes all of your data. You also have the right to a copy of your data (portability), to object, and to lodge a complaint with your data protection authority (in Romania: ANSPDCP). For any request, write to contact@kelunor.com.

Security

Data is encrypted in transit (HTTPS) and at rest. Access is enforced by server-side security rules, and only the genuine app can reach our servers (App Check). Strong passwords are required; two-step verification, biometric sign-in and end-to-end encryption add further protection.

Companies, their people and people without an account

In a company (or a group used for work), its admins may record information about the people in it: shifts, absences and who covers for whom, functions in the organigram and their duties, tasks given to them, and names in the order the company chooses.

For that information the company (the employer or organisation) decides what is recorded and why, and it is responsible for it as data controller. Kelunor stores and processes it only on the company's behalf and on its instructions, under our Data Processing Agreement (kelunor.com/dpa). Questions about it go first to the company; we help it answer them.

People without an account: an admin can add someone who doesn't use Kelunor — a name and, if wanted, an e-mail address or phone number that only the group's admins see — so they can be given shifts, absences, functions or tasks. The group that adds them must have a reason to do so and should tell them. They are removed when an admin deletes them or the group is deleted; when they make an account, everything moves to it.

Anyone added this way can ask the group, or us at contact@kelunor.com, to see, correct or delete what is kept about them.

Children

Kelunor is not directed at children under 16. If you believe a child has given us data, contact us and we will delete it.

Changes

If this policy changes, we will update the date at the top and, for important changes, notify you in the app.