Privacy Policy

Effective date: September 21, 2026 · Contact: support@arnastech.com

Kairoscope is designed with privacy-first principles. Your journal entries — the moments you capture and the words you write about them — are for your eyes only, unless you explicitly choose to share anonymized summaries.

Kairoscope requires sign-in. There is no guest mode. This Privacy Policy explains what data stays on your device after you sign in, what data we hold on your behalf if you enable cloud sync, what we send to third parties to make the app work, and the controls you have over all of it.

1. Privacy-First Promise

Kairoscope does not sell data, does not show ads, and does not read or share your journal text. We do not run third-party advertising or marketing SDKs. The only data that ever leaves your device is what you sign in with, what we need to sync your private journal to your account, (only if you opt in) anonymized aggregate numbers used for global comparisons, and (when offered) an optional tip processed by Apple or Google.

Kairoscope is free to download and use. Optional support or a tip jar, when offered, is thanks-only and does not unlock features or entitlements. Optional support or tips may be processed by Apple In-App Purchase or Google Play Billing when offered; we do not receive your payment card details.

2. What Stays On Your Device

By default, the following are stored only on your device, in app-private local storage (an embedded Isar database) and are never uploaded:

• Raw journal text (the rawText field of each moment)
• Any media you attach (the mediaPaths field of each moment)
• Any other free-form notes you write

Kairoscope requires sign-in. After you sign in, the items above still stay on your device. Cloud sync is optional and does not upload raw journal text or attached media. Optional support or tips, when offered, may be processed by Apple or Google; tips do not unlock features.

3. What We Hold After You Sign In (Optional Private Cloud Sync)

Kairoscope requires an account. We hold your authentication identifier (email address, or the opaque user identifier returned by Google Sign-In or Apple Sign-In) so you can sign in.

If you enable cloud sync, the following is also stored in Firebase under your user account so you can access your journal across devices and recover it if you reinstall the app:

• For each moment: tags, classification (phenomenon, impact, elements), numeric scores (significance, coincidence, intuition), and timestamps
• Reports and Kairoscope readings you generate

We do not sync your raw journal text or attached media. These remain on the originating device only. Synced data is stored in your private user document and is not accessible to other users; access is enforced by Firebase Security Rules.

4. Opt-In Anonymized Insights (Global Comparison)

If — and only if — you explicitly tap "Share insights" in the Reports screen, Kairoscope uploads numerical aggregate summaries (for example: "5 moments logged this week, average significance 80") to a public research_data collection. This powers the Global Comparison feature, which shows you how your activity compares to the community.

• These uploads contain no raw text, no media, no email address, no user identifier, and no other personally identifying information.
• You can stop sharing at any time. New uploads will stop immediately. Aggregated counts that have already contributed to community averages are by design not linked to your identity and cannot be individually removed.

5. AI-Generated Kairoscope Readings

When you tap "Generate Kairoscope" in the Reports screen, Kairoscope sends an anonymized aggregate summary of your recent activity (counts and scores grouped by category — never your raw text) to our AI provider so it can return a short narrative reflection.

• Provider: OpenAI, L.L.C. (or, depending on our deployment, Microsoft Azure OpenAI Service). The request is initiated from our Cloud Function on your behalf; your device does not contact the provider directly.
• Data sent: the validated aggregate summary only. Tags and numeric scores. No raw journal text. No email or user identifier.
• Retention by the provider: subject to OpenAI's (or Azure's) API data-handling policy. As of this writing, OpenAI does not use API inputs to train its models and retains API requests for abuse-monitoring for a limited period. See openai.com/policies or Azure OpenAI data privacy.
• This step happens only when you request a Kairoscope reading. It does not run in the background.

6. Third-Party Services We Use

We do not currently use third-party analytics, crash reporting, advertising, or marketing SDKs. If we add any in the future, this policy will be updated and (where required) we will request your consent.

7. Your Rights and Controls

• Keep everything local. Leave cloud sync off. After you sign in, your journal stays on your device. Optional support or tips, when offered, may be processed by Apple or Google and do not unlock features.
• Export. You can read all of your locally-stored moments at any time within the app.
• Delete an individual moment. Deleting locally also removes the synced metadata if you have enabled cloud sync.
• Delete your account. Use Home → About → Delete account in the app (the info icon on Home, then About). This deletes your Firebase Auth account and the private synced data we hold on your behalf (moments, reports, Kairoscope requests, and Kairoscope readings). Request account deletion on the web (no app required).
• Anonymized aggregates that you previously opted to share cannot be linked back to your identity and remain part of the global averages after deletion, by design.

If you cannot reach the delete option for any reason (for example, you no longer have access to the device), email support@arnastech.com from the address associated with your account and we will process the deletion manually.

8. Children's Privacy

Kairoscope is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact support@arnastech.com and we will delete it.

9. International Users and Data Transfers

Firebase services and our AI provider operate from data centers in the United States and other regions. By using Kairoscope, you understand that your synced data and the anonymized summaries you choose to share may be processed in countries other than your own, including the United States, under the data-protection laws of those jurisdictions.

10. Security

Data in transit between your device, Firebase, and our AI provider is encrypted with HTTPS/TLS. Data at rest in Firebase and at our AI provider is encrypted by those providers per their published practices. The on-device Isar database is stored in app-private storage — other apps on your device cannot read it. You are responsible for the security of the device itself (passcode, biometric lock, OS updates).

11. Changes to This Policy

If we make material changes to this policy, we will update the Effective date above and (for material changes affecting data already collected) make a reasonable effort to notify you in the app before the change takes effect.

12. Contact

Questions, deletion requests, or concerns: support@arnastech.com.

By using Kairoscope, you agree to this Privacy Policy.