Privacy Policy

Last updated: January 25, 2026

Introduction

Kestralis ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our scheduling application.

Data Collection

Kestralis is designed with privacy as a core principle:

• Local-First Storage: All schedules and tasks are stored locally on your device by default
• Optional Cloud Sync: Cloud synchronization is optional and requires explicit consent
• Anonymous Analytics: We use Firebase Analytics to collect anonymous usage data
• No Personal Data Sales: We never sell your personal data to third parties

Information We Collect

Information You Provide

• Account information (email address, username) - only if you enable cloud sync
• Schedule and task data you create within the app
• Images you upload for tasks (stored locally or in your personal cloud storage)

Automatically Collected Information

• Device information (type, operating system, unique device identifiers)
• App usage statistics (features used, session duration)
• Crash reports and performance data

How We Use Your Information

We use collected information to:

• Provide and maintain the Kestralis application
• Sync your data across devices (if you enable cloud sync)
• Improve app performance and user experience
• Analyze usage patterns to develop new features
• Diagnose and fix technical issues
• Send important service announcements (if you opt-in)

Third-Party Services

Kestralis integrates with the following third-party services:

Firebase (Google)

• Firebase Authentication: Secure user login (only if cloud sync enabled)
• Firebase Analytics: Anonymous usage statistics
• Firebase Crashlytics: Crash reporting and debugging

Google AdMob

• Displays advertisements within the app (can be disabled in settings)
• May collect device identifiers for ad personalization
• Subject to Google's Privacy Policy

Data Storage and Security

We implement industry-standard security measures:

• Local data encrypted using device-level encryption
• Cloud data transmitted via HTTPS/TLS
• Password hashing with SHA-256 + salt
• Regular security audits and updates

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Deletion: Request deletion of your account and all associated data
• Export: Export your schedules in a portable format
• Opt-Out: Disable analytics and advertising at any time
• Data Portability: Transfer your data to another service

Children's Privacy

Kestralis is designed for users with special needs, including children. We do not knowingly collect personal information from children under 13 without parental consent. If cloud sync is enabled for a child's account, we require parental consent and provide parental controls.

International Data Transfers

If you enable cloud sync, your data may be transferred to and stored on servers located outside your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email (if you have an account) or through the app. Continued use of Kestralis after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: support@kestralis.app
• GitHub: github.com/lvanderbijl/lsched