This page explains what the kadanz.app website and the Kadanz app do with your data: what is collected, why, where, for how long, and how you stay in control of it.
In short
- Your goals stay on your phone. Amounts, progress, notes, dates and photos: there is no account, no bank connection and no server for them.
- The site only keeps the email address you give it for the waitlist, and only once you confirm it.
- The app sends little, and never your goals: crash reports, the notifications you accept, the feedback you choose to send and, on the free plan only, ads, personalised only if you agree.
- Nothing is sold. No data is sold or rented out.
Data controller
- Controller
- Lucas Arroyo EI (Acyll Studios)
- Address
- 69007 Lyon, France
- Contact
- [email protected]
Kadanz is published by one person, who reads your messages and answers your requests. More in thelegal notice.
On the website
The waitlist and news from Kadanz
- Data
- Your email address, the language of the page, the dates you signed up and confirmed and, if there is one, where your visit came from: the site that sent you, or the campaign name in the link.
- Why
- To email you the day Kadanz comes out on Android and iPhone, then news of the app.
- Legal basis
- Your consent: you give it by signing up, then by clicking the link in the confirmation email. An address that is never confirmed does not join the list.
- How long
- Until you unsubscribe, which you can do at any time with the link in every email. With no sign from you for three years (a reply, a click on a link), the address is deleted.
- Tracking
- Kadanz does not measure who opens its emails. Links in the emails go through Brevo, which records clicks: that is how an address is known to be still in use.
- Where
- At Brevo (Sendinblue SAS, France), which sends the emails and stores the addresses in the European Union. The form hands your address to Brevo through Cloudflare, the site's host.
- Bot check
- When you start filling in the form, Cloudflare Turnstile checks that a person is using it, not a bot. To do so, it looks at technical information about your browser and your IP address, without advertising cookies. Legal basis: the legitimate interest of preventing emails from being sent to people who never asked for them.
Visiting the site
- Hosting: as with any website, Cloudflare, the host, receives your IP address to show you the pages and protect the site from attacks.
- Audience measurement: the site may count its visits with Cloudflare Web Analytics, without cookies and without identifying visitors.
- Cookies: no analytics or advertising cookies. Cloudflare may set a technical security cookie to spot bots; it is needed for the site to work, so it does not require your consent.
- Local storage: after you sign up, your browser only remembers that you did, so it does not ask for your address again. You can clear it with the site's data in your browser settings.
Writing to [email protected]
- Data
- Your email address, your message and whatever you choose to put in it.
- Why
- To answer you.
- Legal basis
- The legitimate interest of answering people who write.
- How long
- For the time of the exchange, then at most three years after the last message.
- Where
- The message reaches a Gmail inbox (Google) through Cloudflare, which forwards the address. Replies are sent through Brevo.
In the app
What stays on your phone
- Your goals: their names, amounts, dates, progress and notes, their reminders, your memory photos and your settings (language, currency, theme). They are stored in the app, on your phone. Nobody else can see them, not even the publisher.
- Photos: the app has no access to your photo library. The system's picker hands it the photos you choose, and the app keeps a reduced copy in its own space. On iPhone, it only asks for the right to add an image to your photos, when you ask it to save your pass there.
- Reminders are scheduled on your phone, with no server. They never show an amount, since they may appear on the lock screen.
- Backups: if you have turned on your phone's backup (Google account or iCloud), your system may include the app's data in it, under your account. On Android, photos are left out.
- Sharing: an image of your pass only leaves your phone if you share it, with the app or the person you choose.
- Erasing everything: deleting a goal erases its data. Uninstalling the app erases everything it keeps on the phone.
Crash reports
- Data
- When the app crashes or hits an error: the technical details of the error, the app's last technical steps, the phone model, the system and app versions, and a random identifier specific to the installation. Never your goals or your amounts.
- Why
- To find and fix bugs.
- Legal basis
- The legitimate interest of providing an app that works.
- How long
- 90 days.
- Where
- Firebase Crashlytics (Google), in the United States.
Notifications
- Data
- A technical notification identifier, given to your phone by Firebase, and your subscription to the app's news.
- Why
- To send you news of Kadanz now and then (something new, an update).
- Legal basis
- Your consent: the phone's permission and the app's notification setting. You can turn them off at any time, in the app or in the phone's settings.
- How long
- For as long as notifications are on and the app is installed.
- Where
- Firebase Cloud Messaging (Google), in the United States.
Your feedback, from “Give feedback”
- Data
- What you write in “Give feedback”, in the settings (a bug to report, a suggestion…), and its category, with the app version, the system (Android or iOS), the phone's language and the date. Nothing links this feedback to you or to your goals: avoid putting personal information in it.
- Why
- To fix bugs and shape what the app becomes.
- Legal basis
- Your consent: you decide to send your feedback.
- How long
- Two years.
- Where
- Cloud Firestore (Google), in the United States.
Ads, on the free plan
There are no ads during the trial or with Premium. On the free plan, after the trial, the app may show at most one full-screen ad a day, at a pause. These ads are provided by Google AdMob.
- Your choice
- In Europe, a Google window asks for your consent before the first ad. On iPhone, Apple also asks whether you allow Kadanz to track your activity. If you accept, ads may be personalised. If you refuse, they are not, and Google only uses data to show them, limit how often they repeat and fight fraud. You can change your mind at any time: in the app's settings for Google's choice, and on iPhone in Settings › Privacy & Security › Tracking.
- Data
- The phone's advertising identifier, if you accepted (on iPhone, only if you also allowed tracking), the IP address, information about the phone and the app, and your interactions with the ads.
- Legal basis
- Your consent for personalised ads. Otherwise, the legitimate interest of funding the free plan.
- Who
- Google, which decides for itself how this data is used for advertising, under itsprivacy policy. Ads for credit, cryptocurrencies and gambling are blocked.
Purchases
Premium is bought through Google Play or the App Store, which take the payment under their own terms and privacy policies. The app only learns whether Premium has been bought. The publisher never receives your card or payment details.
Who receives data
- Brevo (Sendinblue SAS, France): the waitlist and sending emails.
- Cloudflare, Inc. (United States): hosting the site, audience measurement, the form's bot check and forwarding the contact address.
- Google: Firebase (Crashlytics, Cloud Messaging, Firestore) for the app, Gmail for the contact inbox. For ads, AdMob (see above).
- Google Play and Apple: distributing the app and handling purchases, under their own responsibility.
Brevo, Cloudflare, and Google for Firebase act on the publisher's behalf (as processors), under a contract that governs how they use the data. The contact inbox is a Gmail account, under Google's terms. Transfers to the United States rely on the EU–US Data Privacy Framework, which these companies have joined, and on the European Commission's standard contractual clauses.
Your rights
You can ask to access your data, correct it, erase it or receive it in a portable format, restrict its processing, object to processing based on legitimate interest, and withdraw your consent at any time. Write to[email protected]: you will get an answer within one month.
- Emails: the unsubscribe link at the bottom of every email is enough.
- The app's data is on your phone, out of the publisher's reach: you manage it directly, by deleting a goal or uninstalling the app.
- Feedback sent from the app carries no identifier: to find yours, give its date and content.
- Ads and notifications can be changed in the app, at any time.
If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or to the authority of the country where you live.
Security
The site and the app only communicate over encrypted connections (HTTPS). Feedback sent from the app cannot be read back from the app: only the publisher has access to it.
Changes
If Kadanz changes what it does with your data, this page changes too, with its date at the top. For an important change, people signed up for news are told by email.