Privacy Policy

Overview

Kyro (“we”, “us”) helps you plan your day with AI-assisted scheduling. This policy explains what we collect, why we collect it, and how you can control your data.

Data we collect

• Account data — email, name, and authentication identifiers via Supabase Auth.
• Profile & planning data — timezone, wake/sleep times, goals, tasks, schedule blocks, and preferences you provide.
• Journal entries— stored encrypted at rest. Kyro's AI does not read journal content for model training or reflection prompts.
• Calendar data — if you connect Google Calendar, we sync events you authorize for planning purposes.
• Usage & billing — AI credit usage, subscription tier (which may determine feature availability), subscription status, and payment metadata processed by Paddle when you upgrade to Pro.

How we use data

We use your data to generate daily plans, answer Plan & schedule chat messages, sort brain dumps, send reminders you configure, and operate billing. We do not sell your personal data. AI features send relevant context to our LLM provider (OpenRouter) only when you use AI-powered features — not when you save journal text.

Third parties

We rely on Supabase (database & auth), Railway/Vercel (hosting), OpenRouter (AI), Google (optional calendar OAuth), Paddle (payments), and Resend (transactional email). Each processes data under their own policies and our data processing agreements where applicable.

Retention & deletion

We retain your account data while your account is active. You may request account deletion from Settings (when available) or by contacting us. Deletion removes your profile, schedule, goals, and journal entries from our systems, subject to legal retention requirements.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data. Contact privacy@kyro.app for requests.

Contact

Questions about this policy: privacy@kyro.app