Privacy Policy
Last updated: 26 August 2026
Keizoku is an iOS app that plans workout times around your real life, plus this website. The short version: the website sets no cookies and runs no analytics; the app is built so calendar titles and health raw data stay with you.
This page describes how Keizoku processes personal data. It is not legal advice. The German version is at keizoku.space/datenschutz.html.
1. Controller
Kevin BrightKeizoku (sole proprietorship)
Motterstr. 39
90451 Nürnberg
Germany
Email: kdbright92@gmail.com
2. This website
2.1 Hosting and server logs
When you visit this site, our hosting provider technically needs to process your IP address, browser type, requested page and time of access to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a secure website). Log data is not merged with other data and is deleted according to the hosting provider’s retention policy. This site is served from a VPS; we do not name the host here because that choice can change without changing what is logged.
2.2 Content delivery network
The marketing page loads two small animation scripts (GSAP) from the CDN jsDelivr. When your browser requests them, your IP address is transmitted to the CDN. Legal basis: Art. 6(1)(f) GDPR (fast, reliable delivery of static assets). The page stays fully readable if these scripts are blocked or fail to load.
2.3 No cookies, no analytics
This website sets no cookies and uses no analytics, advertising or social media trackers.
2.4 Contact by email
If you email us, we process your email address and message content to answer your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR. Emails are deleted once your request is resolved, unless statutory retention duties apply.
2.5 Links to other sites
This site may link to Instagram or, once the app is listed, to Apple’s App Store. Once you follow those links, the other operator’s terms and privacy policy apply.
3. The Keizoku app
3.1 Account
Sign-in with Apple or Google (Supabase Auth, EU region Frankfurt). We store your account id, the trial period and your goal settings. Legal basis: Art. 6(1)(b) GDPR (contract — providing the service you asked for).
3.2 Calendar
With your permission the app reads busy/free times locally on your device to find workout windows. Event titles and descriptions are never stored or transmitted — not to our backend, not to third parties. Legal basis: Art. 6(1)(a) GDPR (consent via the system permission). You can revoke calendar access in iOS settings at any time; the app then stays usable with manual planning.
3.3 Workouts (Health)
With your explicit consent the app matches workout records locally against your planned sessions. Health data is special-category data: processing requires Art. 9(2)(a) GDPR (explicit consent) in addition to Art. 6(1)(a). Only the result (session completed) is stored, with an opaque observation id — no heart rate, no calories, no routes, no raw samples. Matching happens on the device. You can revoke Health access in iOS settings; automatic detection then stops, and you can still mark sessions complete yourself.
3.4 Sessions
Planned and completed workout sessions (time, status, timezone) are stored in our backend (Supabase, EU). Legal basis: Art. 6(1)(b) GDPR (contract).
3.5 Product analytics and crash reports
Product events without calendar titles, health raw values or message content are sent to PostHog (EU hosting). Crash reports go to Sentry and contain no personal content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the product reliable and understanding whether the core loop works). This is first-party product measurement, not tracking across other apps or websites.
4. Recipients
We use the following providers to operate Keizoku. They process data only as needed for that role:
- Supabase — authentication and database (EU region Frankfurt)
- PostHog — product analytics (EU hosting)
- Sentry — crash reporting
- Apple — Sign in with Apple, App Store purchases, Health records on your device, system notifications
- Google — Sign in with Google
- RevenueCat — subscription status (not your payment card details)
- jsDelivr — delivery of optional animation scripts on this website
- VPS hosting — serving this website (server logs as in §2.1)
Purchases run through Apple. We never see your payment details.
5. Deletion and retention
You can delete your account at any time in the app (Profile → Privacy). Deletion is immediate and complete — every piece of Keizoku-stored account data including your auth identity is removed. There is no product-side retention period.
Account and session data are kept until you delete the account, or until they are no longer needed to provide the service. Website logs follow the host’s retention. Emails are kept until the request is resolved, unless the law requires longer.
6. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Portability in the MVP is handled via support — kdbright92@gmail.com.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.
7. Subscription
Keizoku Pro is sold through Apple. Billing, renewal, cancellation and refunds follow Apple’s terms. We receive subscription status through RevenueCat; we do not receive or store your payment data.
8. Changes
We will update this policy when the product or this website changes. The current version is always available at keizoku.space/privacy.html.