Privacy Policy

• Kzen is a personal planning workspace. We collect only what we need to run it: your account, the content you create, and data from integrations you choose to connect.
• Google Calendar access is optional and read-only. Kzen uses it only to show your events in your Kzen Calendar.
• We do not sell your data, show ads, build advertising profiles, or use your data to train AI or machine-learning models.
• You can disconnect Google Calendar at any time. Disconnecting revokes our access at Google and deletes the imported calendars and events from Kzen.

This section applies when you connect a Google account in Kzen under Integrations → Calendars and grant access on Google's consent screen.

What we access

Kzen requests one Google permission: https://www.googleapis.com/auth/calendar.readonly ("See and download any calendar you can access using your Google Calendar"). With it, Kzen reads:

• Your calendar list: each calendar's name, description, color, time zone, your access role (owner, writer, reader or free/busy only), and whether it is your primary calendar.
• Events on the calendars you choose to sync: title, description, location, start and end time or date, time zone, recurrence rules and changed or cancelled occurrences, status (confirmed, tentative, cancelled), event type, the link to open the event in Google Calendar, and technical identifiers Google uses for syncing (event id, iCalendar UID, version tag and last-updated time).
• Your Google account email address, which Kzentakes from the id of your primary calendar to label the connection.Kzen does not request a separate profile or email permission for this.

Kzen does not read event attendee lists or guest emails, and it does not request access to Gmail, Google Drive, Google Contacts or any other Google service through this integration. Kzen never creates, edits or deletes calendars or events in your Google account. Calendars that only share free/busy information with you are listed but their events are not imported.

How we use it

Google Calendar data is used only to provide the calendar feature you turned on: to show your Google events in your Kzen Calendar next to your Kzen events, to keep them up to date, and to let you open an event in Google Calendar. Specifically, we do not:

• use it for advertising, including personalized or retargeted ads;
• sell it, or use it to build user profiles for any other purpose;
• use it to train or improve AI or machine-learning models;
• use it to determine creditworthiness or for lending purposes;
• let people read it, except with your explicit consent for a specific item (for example, when you ask for support with it), when needed for security purposes such as investigating abuse, or to comply with applicable law.

Who can see it

In Kzen, a Google connection belongs to the workspace you connected it from. Its synced calendars and events are visible to the members of that workspace. Workspaces currently have no invite feature, so in practice that is only you; if workspace sharing is added later, the people you add to that workspace will be able to see the Google calendars you have chosen to sync there, and this policy will say so before that happens. You decide which calendars sync, and you can turn any of them off.

Sharing and transfer

We do not share or transfer Google user data to third parties, except (a) to the hosting infrastructure that runs Kzen on our behalf, only as needed to provide the feature, (b) when required to comply with applicable law or to protect against fraud or abuse, or (c) as part of a merger, acquisition or sale of assets, with notice to you.

How we store and protect it

• All traffic between your browser, Kzen and Google uses HTTPS.
• The OAuth access and refresh tokens Google issues are encrypted before they are written to the database, with AES-256-GCM and a key held only on the Kzen server. Each encrypted token is bound to its connection, so it cannot be reused for another one. Tokens are never shown in the app or written to logs.
• Synced calendars and events are stored in Kzen's database so they can be shown quickly and kept in sync. Event descriptions are displayed as plain text.
• Access in the app is checked on every request against workspace membership.

Retention and deletion

• While connected, Kzen refreshes your selected calendars about every 15 minutes, and when you press Refresh. Events you delete or cancel in Google are removed from Kzen on the next sync.
• Turning a calendar off in Integrations → Calendars deletes that calendar's events from Kzen.
• Disconnect in Integrations → Calendars revokes Kzen's token at Google and permanently deletes the connection, its encrypted tokens, its calendars and all imported events from Kzen's database.
• You can also remove Kzen's access from your Google account at myaccount.google.com/permissions. Syncing then stops and the connection shows "Reconnect required"; disconnect it in Kzen to delete the imported data, or email us and we will delete it.
• If you ask us to delete your Kzen account, all Google data linked to it is deleted with it.

Limited Use

What we collect

• Account data: your email address and a hashed password, or, if you use "Sign in with Google", the email address Google confirms for your account. You may add a display name, avatar and time zone.
• Content you create: workspaces, goals, rituals, stories and notes, trading records, wallet entries, calendar events, labels, comments and files you upload.
• Integrations you add: for example exchange API keys for a trading portfolio. Secrets like these are encrypted the same way as Google tokens.
• Technical data: standard server logs (such as request time, path and IP address) used to run and secure the service.

How we use it

To provide Kzen to you: sign you in, store and show your content, run the integrations you turn on, keep the service secure, and contact you about your account. We do not sell personal data or use it for advertising.

Sharing

Your content is private to your workspace. If you create a public share link for an item, anyone with that link can view that item until you revoke the link. Otherwise we share data only with the hosting infrastructure that runs Kzen, or when the law requires it.

Cookies

Kzen uses cookies to keep you signed in and to remember interface preferences such as collapsed sections and list filters, and a short-lived cookie while you connect Google Calendar. We do not use advertising or third-party analytics cookies.

Storage and retention

Kzen runs on servers rented from a hosting provider; your data is stored in Kzen's database and file storage there. We keep your data while your account exists. Items you delete in the app are removed or moved to trash as the app shows. To delete your account and its data, email kzencloud@gmail.com from the address on your account; we will confirm and delete it.

You can view and edit your content in the app at any time, disconnect integrations, and ask us to export or delete your data by email.

Kzen is not directed to children under 13, and we do not knowingly collect their data.

If we change this policy, we will update the effective date above. If a change affects how we use Google user data or materially reduces your rights, we will tell you in the app or by email before it takes effect.

Email kzencloud@gmail.com. See also the Terms of Service.