Privacy Policy

We collect the following categories of personal data:

Account information

Email address, name, and authentication credentials (hashed passwords or Google OAuth tokens).

Journal entries

Text content, mood scores, sleep scores, and any structured data you provide.

Habits and goals

Habit definitions, tracking logs, goal descriptions, milestones, and progress data.

Voice messages

On paid plans, audio sent via Telegram or the web app is transcribed to text, and we retain the original recording by defaultso you can replay it — you can turn this off in Settings → Data, after which audio is discarded once transcribed. Voice transcription is not included on the free plan: a free-plan voice note is neither transcribed nor stored. Any retained recording is stored server-side and served only through an authenticated proxy, so only you can access it.

Images

Photos attached to entries are stored server-side and served through an authenticated proxy. Only you can access your images.

Location data

If you enable weather features, we use your configured location (city or coordinates) to fetch weather data. We do not track your real-time location.

Usage data

Timestamps of actions, feature usage patterns, and error logs necessary for service operation.

Under GDPR Article 6, we process your personal data on the following legal bases:

Contract performance (Art. 6(1)(b))

Processing necessary to provide the kagameservice you signed up for — storing entries, running AI classification, managing your account, and processing payments.

Legitimate interest (Art. 6(1)(f))

Service improvement, bug fixing, security monitoring, and fraud prevention. We balance these interests against your rights and only process the minimum data necessary.

Consent (Art. 6(1)(a))

Optional features that require explicit opt-in: email reviews, weather/location features, and Telegram bot integration. You may withdraw consent at any time (see Section 9).

Legal obligation (Art. 6(1)(c))

Where required by applicable law, such as responding to lawful government requests or maintaining financial records.

• To provide and maintain the kagame service.
• To classify journal entries and generate AI coaching insights using AI services (see Section 4).
• To process subscription payments.
• To send transactional emails (account verification, password resets, subscription updates).
• To improve the service and fix bugs.

kagame uses third-party AI service providers to power features including entry classification, coaching, search, and image generation. When you create an entry or interact with the AI assistant, relevant content is processed by these providers under data processing agreements that prohibit use of your data for model training.

You can disable all AI processing for your account at any time in Settings → Data. When disabled, kagame runs in capture-only mode and no content is sent to external AI services.

Subscription payments are processed by our payment processor. We do not store your credit card number, CVC, or billing address on our servers. Payment data is handled in compliance with PCI DSS. We retain only your subscription status.

If you connect a Telegram bot, messages you send to the bot are forwarded to kagamevia a secure webhook. Message content is processed identically to entries created through the web app. We store the resulting entry data—the original Telegram message is not stored separately.

kagame uses cookies solely for session authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

If you are in the European Economic Area, you have the following rights under the General Data Protection Regulation:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Your data is retained for as long as your account is active. You may delete individual entries or your entire account at any time.

We work with third-party service providers for AI processing, image generation, payment handling, transactional email, weather data, and cloud infrastructure. Each provider processes only the minimum data required for their specific purpose and is bound by data processing agreements. All providers handling EU personal data offer appropriate safeguards under GDPR (Standard Contractual Clauses or adequacy decision). Contact [email protected] for the current list of sub-processors.

kagame is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 daysbefore the changes take effect. The “effective date” at the top of this page indicates when this policy was last revised.

The data controller responsible for your personal data is:

For privacy-related inquiries, contact us at [email protected].