Privacy Policy

Keizoku is an iOS app that plans workout times around your real life, plus this website. The short version: the website sets no cookies and runs no analytics; the app is built so calendar titles and health raw data stay with you.

This page describes how Keizoku processes personal data. It is not legal advice. The German version is at keizoku.space/datenschutz.html.

1. Controller

Kevin Bright
Keizoku (sole proprietorship)
Motterstr. 39
90451 Nürnberg
Germany
Email: kdbright92@gmail.com

2. This website

2.1 Hosting and server logs

When you visit this site, our hosting provider technically needs to process your IP address, browser type, requested page and time of access to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a secure website). Log data is not merged with other data and is deleted according to the hosting provider’s retention policy. This site is served from a VPS; we do not name the host here because that choice can change without changing what is logged.

2.2 Content delivery network

The marketing page loads two small animation scripts (GSAP) from the CDN jsDelivr. When your browser requests them, your IP address is transmitted to the CDN. Legal basis: Art. 6(1)(f) GDPR (fast, reliable delivery of static assets). The page stays fully readable if these scripts are blocked or fail to load.

2.3 No cookies, no analytics

This website sets no cookies and uses no analytics, advertising or social media trackers.

2.4 Contact by email

If you email us, we process your email address and message content to answer your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR. Emails are deleted once your request is resolved, unless statutory retention duties apply.

2.5 Links to other sites

This site may link to Instagram or, once the app is listed, to Apple’s App Store. Once you follow those links, the other operator’s terms and privacy policy apply.

3. The Keizoku app

3.1 Account

Sign-in with Apple or Google (Supabase Auth, EU region Frankfurt). We store your account id, the trial period and your goal settings. Legal basis: Art. 6(1)(b) GDPR (contract — providing the service you asked for).

3.2 Calendar

With your permission the app reads busy/free times locally on your device to find workout windows. Event titles and descriptions are never stored or transmitted — not to our backend, not to third parties. Legal basis: Art. 6(1)(a) GDPR (consent via the system permission). You can revoke calendar access in iOS settings at any time; the app then stays usable with manual planning.

3.3 Workouts (Health)

With your explicit consent the app matches workout records locally against your planned sessions. Health data is special-category data: processing requires Art. 9(2)(a) GDPR (explicit consent) in addition to Art. 6(1)(a). Only the result (session completed) is stored, with an opaque observation id — no heart rate, no calories, no routes, no raw samples. Matching happens on the device. You can revoke Health access in iOS settings; automatic detection then stops, and you can still mark sessions complete yourself.

3.4 Sessions

Planned and completed workout sessions (time, status, timezone) are stored in our backend (Supabase, EU). Legal basis: Art. 6(1)(b) GDPR (contract).

3.5 Product analytics and crash reports

Product events without calendar titles, health raw values or message content are sent to PostHog (EU hosting). Crash reports go to Sentry and contain no personal content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the product reliable and understanding whether the core loop works). This is first-party product measurement, not tracking across other apps or websites.

4. Recipients

We use the following providers to operate Keizoku. They process data only as needed for that role:

Purchases run through Apple. We never see your payment details.

5. Deletion and retention

You can delete your account at any time in the app (Profile → Privacy). Deletion is immediate and complete — every piece of Keizoku-stored account data including your auth identity is removed. There is no product-side retention period.

Account and session data are kept until you delete the account, or until they are no longer needed to provide the service. Website logs follow the host’s retention. Emails are kept until the request is resolved, unless the law requires longer.

6. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Portability in the MVP is handled via support — kdbright92@gmail.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.

7. Subscription

Keizoku Pro is sold through Apple. Billing, renewal, cancellation and refunds follow Apple’s terms. We receive subscription status through RevenueCat; we do not receive or store your payment data.

8. Changes

We will update this policy when the product or this website changes. The current version is always available at keizoku.space/privacy.html.