← Back to Vankai

Privacy Policy for Vankai

Last Updated: August 4, 2026

1. Introduction

Vankai ("we," "our," or "us") is a personal planning app that helps users organize schedules, tasks, contacts, and travel planning context. This policy explains what data we collect, why we collect it, where it is processed, and what choices users have. This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

Medical Disclaimer: Vankai is a personal planning and organization tool. It is not a medical device, nor does it provide clinical diagnosis, treatment, or professional medical advice for ADHD or any other health condition.

2. Information We Collect

All information gathered is collected solely to make the app function correctly and to provide you with the best possible user experience. Any reading or writing of information is initiated directly by you, the user, for use within the app.

2.1 Account and Authentication Data

When you sign in, we process:

2.2 Calendar Data (Google Calendar)

With your permission, we read and optionally write calendar data including:

2.3 Contacts Data (Google People API)

With your permission, we read and optionally write contact data including:

2.4 Location Data

With your permission, we access device geolocation (latitude/longitude) to:

Location is used only while the app is in the foreground. We do not share precise location with third parties except as needed to compute routes (sent to our server-side routing proxy, not to any third party directly).

2.5 User-Generated Data

We store content you create in the app, including:

2.6 Diagnostics and Telemetry

We process diagnostics to maintain reliability and security, such as:

2.7 Premium Status

We store premium entitlement status to enable premium features.

3. How We Use Data

We use data to:

We do not sell personal information.

4. Data Processors and Third Parties

Data may be processed using:

Service Purpose
Supabase App database, auth/session support, edge functions, telemetry storage
Google Calendar API Calendar sync for authorized accounts
Google People API Contacts sync for authorized accounts
TomTom (via server-side proxy) Routing, travel time calculation, geocoding, and traffic data
Open-Meteo (via server-side proxy) Weather forecasts and air quality. Receives only a coarsened location — coordinates are rounded to roughly an 11 km grid before the request is made, and the response is cached and shared with everyone in that area, so your exact position is never sent and repeat lookups do not leave our servers
OpenFreeMap Base map tiles rendered client-side. Your device requests tiles, fonts and sprites directly from tiles.openfreemap.org whenever a map is drawn, so that service receives your IP address, your browser or app user agent, and the map coordinates being viewed. No account identifier, name or email is attached, and no API key is used. Map data © OpenMapTiles and OpenStreetMap contributors
RevenueCat Subscription and in-app purchase management
OpenRouter (via server-side proxy) AI-generated summaries and nowcasts when invoked by user actions
Sentry Client-side error monitoring
Brave Search (via server-side proxy) Address and place lookups; receives the search text you type, not your account identity
Cloudflare Hosting and delivery of the web app
Firebase Cloud Messaging Delivery of push notifications to your device
Firebase Analytics (Android app only) Coarse usage and app-stability measurement on the Android build

5. Google User Data: Limited Use

Vankai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, for calendar and contacts data obtained through Google APIs:

6. AI Features

AI assistance is off by default. It runs only when you turn it on in Settings and then explicitly request a summary, brief, or nowcast — it never runs in the background.

When you do request one, the relevant content for that request — such as an event title and any notes you wrote for it — is sent through our server-side proxy to OpenRouter, which routes it to a language model provider.

Every such request is sent with a data-collection restriction that limits routing to providers who do not retain or train on the content. Your calendar and contacts data is not used to develop, improve, or train generalized AI or machine learning models, by us or by any provider we route to.

Turning AI assistance off in Settings stops these requests entirely.

7. Data Retention

8. Account and Data Deletion

8.1 In-app deletion

Users can initiate account deletion from app settings. Deletion removes account-linked app data from our primary app database, subject to technical and legal retention exceptions.

8.2 Web deletion request path (Google Play requirement)

Users can request account/data deletion outside the app at:

URL: https://www.vankai.net/account-deletion.html

Contact email: [email protected]

When requesting deletion, include the account email used for Vankai.

9. Your Controls

Users can:

10. Security

We use technical and organizational controls including access controls, row-level database security policies, transport encryption, and monitoring controls intended to protect user data.

11. Children's Privacy

Vankai is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Policy Changes

We may update this policy over time. Material changes will be reflected by updating the "Last Updated" date.

13. Contact

For privacy and data requests:

Email: [email protected]