Last Updated: October 24, 2026
Vankai ("we," "our," or "us") is an intelligent personal planning and daily scheduling application designed to help users organize schedules, tasks, habit routines, contact context, and travel planning. Our core purpose is to provide an accessible, streamlined interface that reduces cognitive fatigue, enhances executive functioning, and brings daily clarity. This policy explains what data we collect, why we collect it, where it is processed, and what choices users have. This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.
Medical Disclaimer: Vankai is a personal planning and organization tool. It is not a medical device, nor does it provide clinical diagnosis, treatment, or professional medical advice for ADHD or any other health condition.
All information gathered is collected solely to make the app function correctly and to provide you with the best possible user experience. Any reading or writing of information is initiated directly by you, the user, for use within the app.
When you sign in, we process:
https://www.googleapis.com/auth/calendar.events and https://www.googleapis.com/auth/calendar.calendarlist.readonly)With your explicit permission, Vankai accesses Google Calendar data to provide comprehensive scheduling, commute calculation, and daily timeline features. We access:
How we use Google Calendar data:
All calendar data is stored securely in your private user database partition on Supabase, protected by Postgres Row-Level Security (RLS) policies restricted to your account, and encrypted in transit (TLS 1.3) and at rest (AES-256).
https://www.googleapis.com/auth/contacts)With your explicit permission, Vankai accesses Google Contacts via the Google People API to enrich your calendar appointments with personal and business relationship context. We access:
How we use Google Contacts data:
Contact information is never shared with third parties, never used for marketing, and never exported or sold.
With your permission, we access device geolocation (latitude/longitude) to:
Location is used only while the app is in the foreground. We do not share precise location with third parties except as needed to compute routes (sent to our server-side routing proxy, not to any third party directly).
We store content you create in the app, including:
We process diagnostics to maintain reliability and security, such as:
We store premium entitlement status to enable premium features.
We use data to:
We do not sell personal information.
Data may be processed using:
| Service | Purpose |
|---|---|
| Supabase | App database, auth/session support, edge functions, telemetry storage |
| Google Calendar API | Calendar sync for authorized accounts |
| Google People API | Contacts sync for authorized accounts |
| TomTom (via server-side proxy) | Routing, travel time calculation, geocoding, and traffic data |
| Open-Meteo (via server-side proxy) | Weather forecasts and air quality. Receives only a coarsened location — coordinates are rounded to roughly an 11 km grid before the request is made, and the response is cached and shared with everyone in that area, so your exact position is never sent and repeat lookups do not leave our servers |
| OpenFreeMap | Base map tiles rendered client-side. Your device requests tiles, fonts and sprites directly from tiles.openfreemap.org whenever a map is drawn, so that service receives your IP address, your browser or app user agent, and the map coordinates being viewed. No account identifier, name or email is attached, and no API key is used. Map data © OpenMapTiles and OpenStreetMap contributors |
| RevenueCat | Subscription and in-app purchase management |
| OpenRouter (via server-side proxy) | AI-generated summaries and nowcasts when invoked by user actions |
| Sentry | Client-side error monitoring |
| Cloudflare | Hosting and delivery of the web app |
| Firebase Cloud Messaging | Delivery of push notifications to your device |
| Firebase Analytics (Android app only) | Coarse usage and app-stability measurement on the Android build |
Vankai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, for calendar and contacts data obtained through Google APIs:
AI assistance is strictly optional and off by default. It runs only when you explicitly turn it on in Settings and then manually request a text-based daily summary, schedule brief, or weather nowcast — it never runs automatically or in the background.
When you do request an AI summary, the relevant text content for that specific request — such as an event title and any planning notes you wrote for it — is sent through our server-side proxy to OpenRouter, which routes it to a language model provider.
Every such request is sent with an explicit data-collection restriction that limits routing to providers who do not retain, log, or train on user content. Your calendar and contacts data is never used to develop, improve, or train generalized or non-personalized AI or machine learning models, by us or by any provider we route to.
All AI features in Vankai are strictly limited to text-based planning summaries. Vankai does not provide, generate, or facilitate any AI image creation, deepfake generation, or Non-Consensual Intimate Imagery (AI NCII).
Turning AI assistance off in Settings disables these features entirely.
Users can initiate account deletion from app settings. Deletion removes account-linked app data from our primary app database, subject to technical and legal retention exceptions.
Users can request account/data deletion outside the app at:
URL: https://www.vankai.net/account-deletion.html
Contact email: [email protected]
When requesting deletion, include the account email used for Vankai.
Users can:
We use technical and organizational controls including access controls, row-level database security policies, transport encryption, and monitoring controls intended to protect user data.
Vankai is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
We may update this policy over time. Material changes will be reflected by updating the "Last Updated" date. If we make material changes to how we access, use, or share Google user data, we will notify users via in-app notification or email prior to the changes taking effect.
For privacy and data requests:
Email: [email protected]