Archived version (last updated 2026-10-16). See the current policy.
Privacy policy
kyrou is built and operated by Aaron Art Asperilla, an individual based in the Philippines ("we", "us"). This policy explains what we collect when you use the kyrou website (kyrou.org), the kyrou desktop app and the kyrou Android app (package app.kyrou.desktop), why, and what you can do about it. We handle personal data in line with the Philippine Data Privacy Act of 2012.
What we collect
- Account data. When you sign in with Google we receive your name, email address and profile picture. We use these to identify your account.
- Your planner data. Tasks, routines, subtasks, notes and settings you create are stored on your device and synced to our servers so they are available across sessions and devices.
- Product analytics. We use PostHog to record how the website and app are used: pages and screens viewed, features used, clicks, device and browser type, approximate location from IP address, and session recordings of how you interact with the interface.
- Error reports. When something breaks, we collect the error message, stack trace and the device and app version it happened on.
- Payment data. Subscriptions on the website and desktop app are sold by Paddle, our merchant of record. Paddle collects your payment details, billing address and tax information. On Android, subscriptions are bought through Google Play Billing, and Google processes the payment. We never see or store your card number. From Paddle we receive your subscription status, plan and email; from Google Play we receive the purchase token, product and plan, subscription state and expiry, which we use to unlock your plan.
- Google Classroom data (optional). If you connect Google Classroom, we read (read-only) your Classroom courses, your coursework (assignments) and your own submission state, using the Google OAuth scopes
classroom.courses.readonlyandclassroom.coursework.me.readonly. We store the imported coursework as tasks in your account, and an encrypted refresh token so it can keep syncing. See "Google Classroom" below. - Android device features. The Android app uses notifications and exact alarms to ring the reminders and alarms you set. Nothing about them leaves your device except a task's alarm on/off setting, which syncs with the task.
Why we collect it
- To run kyrou: sign you in, sync your data, and check your subscription.
- To fix bugs and keep kyrou reliable.
- To understand which features are used so we can improve kyrou and decide what to build next.
- To answer you when you contact support.
We do not sell your personal data, and we do not use your planner content for advertising.
Who we share it with
Only the service providers that make kyrou work, each under their own privacy terms:
- Google, for sign-in, Google Play Billing on Android, and the optional Google Classroom integration.
- Neon and Cloudflare, which host our database and servers.
- PostHog, for analytics, session recordings and error reports.
- Paddle, for checkout, billing, tax and refunds on the website and desktop app.
We may also disclose data when the law requires it. Some of these providers process data outside the Philippines.
How long we keep it
We keep your account and synced data while your account exists. Analytics data is kept for as long as it helps us improve kyrou, and no longer than our analytics provider's retention period. Billing records are kept as long as tax law requires.
Your rights
You can ask us to access, correct, export or delete your data, or object to how we use it. Email [email protected] from the address on your account and we will respond within 30 days. See "Deleting your account" below.
You can block website analytics with a standard ad or tracker blocker. You may also file a complaint with the Philippine National Privacy Commission.
Google Classroom
Connecting Google Classroom is optional. We use the data only to show your coursework as tasks in kyrou. We never sell it, never use it for advertising, never use it to train AI models, and do not share it except with the hosting providers listed above. Disconnecting Classroom deletes the stored refresh token, and you can also choose to remove the tasks it imported.
Kyrou's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Deleting your account
You can delete your account in either of two ways:
- In the app (desktop or Android): Settings → Sync & account → Delete account.
- Email [email protected] from the address on your account.
Deleting your account removes your account, your synced planner data on our servers, and any stored Google Classroom token. Data already on your device stays there until you remove the app. We keep billing records only as long as tax law requires, and Paddle and Google keep their own payment records under their own policies. Requests are completed within 30 days. If you have a subscription, cancel it first: deleting your account does not cancel it.
Children
kyrou is not intended for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above. For significant changes we will let you know in the app or by email.