Privacy Policy

Kathekon Labs LLC · Last updated: June 2026 · Effective: Planned for July 15, 2026

This Privacy Policy describes how Kathekon Labs LLC ("Kathekon", "we", "us") collects, uses, and protects your information when you use the Kathekon service. By using Kathekon, you agree to the practices described here.

1. What We Collect

Account information: Your email address, collected when you register.
Usage data: Anonymized product analytics via PostHog — page views, feature interactions, and session data. We do not collect the content of your notes or plans through analytics.
Planning data: Your goals, schedule constraints, notes, and time-block data. This is stored securely and used exclusively to generate your daily plan and Coach responses.
Coach conversation history: Your messages to the Coach and the Coach's replies are stored so conversations remain available across sessions and so the Coach can use relevant recent context. You can delete individual Coach sessions from within the app.
Payment information: Handled entirely by Paddle. Kathekon never receives, processes, or stores your card number or billing details.

2. How We Use Your Data

To generate your daily plan and provide Coach responses tailored to your goals and schedule.
To improve product quality using aggregated, anonymized analytics — never tied to identifiable individuals.
To send transactional emails: account confirmation, password reset, and subscription receipts. We do not send marketing emails without your explicit consent.

3. Cookies

Authentication cookie: One httpOnly, Secure session cookie (kathekon_access_token) is set when you log in. It is used solely for session management and is not readable by JavaScript.
Analytics cookies: PostHog may set cookies to track sessions and usage patterns. These are not linked to your personal content.
No advertising cookies: We do not use any third-party advertising or tracking cookies.

4. Third-Party Services

PostHog (posthog.com): anonymized product analytics. Data is processed under PostHog's privacy policy.
Paddle (paddle.com): payment processing and subscription billing. Paddle acts as the Merchant of Record and processes your payment data under their own privacy policy.
AI providers (Anthropic / Google): Your goal text, schedule context, and notes marked as AI-readable are sent to AI APIs for plan generation and Coach responses. This content is transmitted to generate your output and is not stored by Kathekon beyond what already exists in your account. AI providers process this data under their own terms and data-use policies.

5. Data Retention

Account information, planning data, and Coach conversation history are retained for as long as your account is active.
You may request deletion of your account and all associated data at any time by emailing kathekon.app@kathekon.app, or by using the in-app account deletion option if available.
Deleted accounts have their data permanently removed within 30 days of the deletion request.
We do not sell your personal data, planning data, or Coach conversation history to third parties.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. Contact us at kathekon.app@kathekon.app to exercise these rights.

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local supervisory authority. Note that Paddle processes your payment data as an independent data controller under their own GDPR obligations.

7. Security

Passwords are hashed using PBKDF2-SHA256 with 600,000 iterations. We never store plaintext passwords.
Sessions are managed via httpOnly, Secure cookies that cannot be accessed by client-side scripts.
All data is encrypted in transit using HTTPS (TLS).

While we take security seriously, no system is completely immune to risk. We will notify affected users in the event of a data breach as required by applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice before they take effect. Continued use of the Service after an update constitutes acceptance of the revised policy.

9. Contact

For privacy questions or data requests, contact us at kathekon.app@kathekon.app.