Privacy Policy

Who we are

Kanbo is a kanban task manager for small teams. It is run by Rafi Novandi ("we"). This policy explains what data Kanbo handles, why, and what you can do about it.

Data we collect

• From your Google account when you sign in: your name, email address and profile photo.
• What you add to your profile: username, headline, bio, location, website, time zone and an avatar you upload.
• What you and your team put in Kanbo: projects, columns, tasks, descriptions, assignees, due dates, member roles and who completed which task.
• Invitations: the email address that was invited. The invite link itself is stored only as a one-way hash, never in readable form.
• A session cookie that keeps you signed in. We do not use advertising or tracking cookies.

How we use it

Only to run Kanbo: to sign you in, show your boards, send and accept invitations, calculate progress and statistics, and show your profile. We do not sell your data and we do not use it for advertising.

Google user data

Kanbo's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. Your Google name, email address and photo are used only to sign you in and to show your profile inside Kanbo. They are not shared for advertising and are not used to train models.

Who can see your data

• Members of a project can see that project: its tasks, columns, members and their roles.
• People who share at least one active project with you can open your profile. You control what it shows (statistics, activity, pinned projects, recent tasks) in your profile settings.
• Nobody else can read your projects. Access is enforced in the database, not only in the interface.

Service providers

To run Kanbo we rely on:

• Supabase, which stores the database, handles authentication and keeps uploaded avatars.
• A hosting provider that serves the application.
• Google, for signing in.

They process data only to provide those services to us.

Retention and deletion

We keep your data while your account exists. You can edit or remove your profile details and avatar at any time. To have your account and its personal data deleted, contact us; project content that belongs to a team may remain for the other members after your personal details are removed.

Your rights

You may ask to see, correct, export or delete the personal data we hold about you, and you may object to how it is used. We will answer within a reasonable time.

Security

Data is sent over encrypted connections and protected by access rules in the database. No system is perfectly secure, so please use a strong Google account password and two-step verification.

Children

Kanbo is not meant for children under 13, and we do not knowingly collect their data.

Changes

We may update this policy. The date at the top shows the latest version; for significant changes we will tell you inside Kanbo.

Contact

Questions? Write to mrafinovandi04@gmail.com.