Privacy Policy

Who we are

Koaline is operated by 8BITES, David Rudman s.p., a sole proprietor registered in Slovenia, with registered office at Vrh pri Ljubnu 2B, 8000 Novo mesto. Matična številka: 8058865000. Davčna številka: 22436286 (not VAT-registered, pursuant to Article 76.a of ZDDV-1). We are the data controller for information collected through this site and can be reached at david@koaline.app.

What we collect

When you subscribe to our newsletter, we collect your email address. When you create an account in the Koaline app, we additionally collect information you provide (name, email, password hash) and data you enter as part of using the product (tasks, notes, time entries, linked integrations). We do not use advertising pixels or third-party tracking cookies.

We use Umami Cloud (operated by Umami Software, Inc., United States) for basic, privacy-friendly analytics — it tells us things like page views and referrers in aggregate. Umami does not use cookies, does not track you across sites, and does not collect personal data. Analytics data is transferred to the US under appropriate safeguards (Standard Contractual Clauses). Because no personal data is collected, no consent banner is required.

How we use it

Newsletter emails are used solely to send occasional product updates. Account data is used to provide the Koaline service itself — syncing tasks, storing notes, and tracking time. We won't sell, rent, or share your data with third parties. The legal basis for processing is your consent (GDPR Art. 6(1)(a)) for the newsletter, and performance of contract (GDPR Art. 6(1)(b)) for app usage. You can withdraw consent at any time.

Where it's stored

Newsletter submissions are processed and stored by Netlify via their Forms service. Application data (tasks, notes, time entries) is stored by our infrastructure provider inside the EU. Aggregate analytics are processed by Umami.

Google Calendar

If you connect Google Calendar, Koaline requests two scopes: See and edit events on your calendars (calendar.events) and See the list of your calendars (calendar.calendarlist.readonly). We use these only to show your calendar next to your tasks and to let you create, reschedule, and delete events from within Koaline. We read the list of your calendars so you can choose which ones to sync. We never create or delete calendars and never change calendar sharing or permissions.

For calendars you enable, we access event details — title, description, start and end time, location, attendees, and meeting links — within a window of roughly 30 days in the past to 90 days ahead. Your Google access and refresh tokens are encrypted at rest (AES-256-GCM) and stored on our infrastructure inside the EU. You can disconnect Google Calendar at any time from your Koaline settings, which stops all further access; you can also revoke access directly from your Google Account permissions.

Koaline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Calendar data for advertising, and we do not sell it or share it with third parties.

Your rights

You can request deletion of your data at any time by emailing privacy@koaline.app. If you're in the EU, you have additional rights under the GDPR including access, rectification, and erasure.