This Privacy Policy explains how DotWalker.com Maciej Fafula ("we", "our", "us") collects, uses, and protects information when you use Kanbris ("the App").

Data Controller:
DotWalker.com Maciej Fafula
Pilsudskiego str. 74/320
50-020 Wroclaw, Poland
Email: admin@dotwalker.com
Tax ID (NIP): 6912337471
Business Registry Number (REGON): 363631558

We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and applicable laws of Poland.

1. Information We Collect

1.1 Task Data

• Kanbris integrates with Google Tasks API to manage your tasks
• Uses Google Drive API to store data and enable full app functionality
• Utilizes other Google APIs as necessary to provide complete app functionality
• When you connect your Google account, Kanbris may access, create, modify, and sync your tasks with your explicit consent
• Task data is primarily stored locally on your device
• Synced data is stored in accordance with Google's storage policies

1.2 Analytics and Technical Data

We collect anonymous analytical data, such as:

• App usage statistics (e.g., which features are used)
• Crash reports and error logs
• Device and system information (e.g., operating system version, browser type)
• Performance metrics

This helps us improve performance and user experience.

1.3 Subscription and Payment Data

• If you purchase a subscription, payment is processed securely by third-party providers (e.g., payment gateways, app stores)
• We collect basic transaction information (subscription status, payment date)
• We do not store your full payment details (credit card numbers, banking information)

1.4 Account Information

• Email address (when you create an account or connect with Google)
• Google account identifier (to enable synchronization)
• User preferences and settings

2. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Purpose	Legal Basis
Providing Kanbris services	Contract performance (Art. 6(1)(b) GDPR) - necessary to deliver the service you requested
Google Tasks integration	Consent (Art. 6(1)(a) GDPR) - you explicitly authorize access when connecting your Google account
Payment processing	Contract performance (Art. 6(1)(b) GDPR) - necessary to process your subscription
Analytics and improvements	Legitimate interest (Art. 6(1)(f) GDPR) - to improve app performance and user experience
Legal compliance	Legal obligation (Art. 6(1)(c) GDPR) - when required by law

You may withdraw your consent for Google integration at any time by disconnecting your Google account in the app settings or through your Google account permissions.

3. How We Use Your Information

We use the information to:

• Provide and operate Kanbris
• Sync tasks with Google Tasks as requested by you
• Improve the app through performance analytics
• Process subscription payments
• Ensure security and prevent misuse
• Communicate with you about service updates, security alerts, or support matters
• Comply with legal obligations

We do not use your data for:

• Advertising or marketing (unless you opt-in)
• Profiling or automated decision-making
• Selling or renting to third parties

4. Data Sharing and Transfers

We do not sell or rent your personal data.

We may share limited data only in these cases:

4.1 Service Providers

• Google API Services – for syncing with Google Tasks API, storing data via Google Drive API, and using other Google APIs for app functionality
• Payment processors – for handling subscription billing (e.g., Stripe, PayPal, Google Play, App Store)
• Analytics providers – only anonymized app performance data (e.g., Google Analytics, Firebase)

4.2 International Data Transfers

Some of our service providers (including Google) are located in the United States or other countries outside the European Economic Area (EEA).

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• EU-U.S. Data Privacy Framework (for US-based providers that are certified)
• Other legal mechanisms approved under GDPR

For more information about Google's data protection measures, visit: https://policies.google.com/privacy

4.3 Legal Obligations

We may disclose your information if required by:

• Law enforcement or government authorities
• Court orders or legal processes
• Protection of our legal rights or safety of users

5. Data Storage and Retention

5.1 Where We Store Data

• Local storage: Task data is stored primarily on your device
• Cloud storage: Synced data is stored through Google Drive API in accordance with Google's policies
• Our servers: Analytics data and account information are stored on secure servers in the EU

5.2 How Long We Keep Data

Data Type	Retention Period
Task data (local)	Until you delete the app or clear data
Task data (synced)	Follows Google's retention policies; you control through your Google account
Account information	Until you request deletion or 30 days after account closure
Analytics data	24 months from collection
Payment records	6 years (required by Polish tax law)
Crash logs	12 months

You may request earlier deletion of your data at any time (see Section 7).

6. Cookies and Tracking Technologies

6.1 Essential Cookies

We use essential cookies and local storage to:

• Maintain your session and login state
• Store your preferences and settings
• Enable core functionality

These cannot be disabled as they are necessary for the app to function.

6.2 Analytics Cookies

With your consent, we use analytics cookies to:

• Understand how users interact with Kanbris
• Identify technical issues and improve performance
• Track feature usage

You can opt-out of analytics cookies through your browser settings or app preferences.

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.

7. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights:

7.1 Right of Access (Art. 15)

Request a copy of your personal data we hold.

7.2 Right to Rectification (Art. 16)

Correct inaccurate or incomplete data.

7.3 Right to Erasure (Art. 17)

Request deletion of your data ("right to be forgotten").

7.4 Right to Restriction (Art. 18)

Limit how we process your data in certain circumstances.

7.5 Right to Data Portability (Art. 20)

Receive your data in a structured, machine-readable format (e.g., JSON, CSV).

7.6 Right to Object (Art. 21)

Object to processing based on legitimate interests.

7.7 Right to Withdraw Consent

Withdraw consent for Google integration at any time without affecting prior processing.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:
Email: admin@dotwalker.com

We will respond within 30 days of receiving your request. We may ask for verification of your identity before processing requests.

7.9 Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to file a complaint with:

Polish Supervisory Authority:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Phone: +48 22 531 03 00
Website: https://uodo.gov.pl

8. Age Limitation

Kanbris is not intended for children under 13 years of age. We do not knowingly collect personal data from children under this age.

If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information promptly.

Parents or guardians who believe we may have collected information from a child under 13 should contact us immediately at admin@dotwalker.com.

9. Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Secure authentication mechanisms
• Regular security audits and updates
• Access controls and employee training
• Secure data centers with physical security

However, no system can be guaranteed to be 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

How We Notify You

• Material changes: We will notify you via email or prominent notice in the app at least 30 days before changes take effect
• Minor changes: Will be posted on our website at https://www.kanbris.com/privacy

Continued use of Kanbris after changes take effect means you accept the revised policy. If you do not agree with changes, please stop using the service and contact us to delete your account.

11. Google API Services Compliance

Kanbris's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our Commitments:

• Limited use: We only access and use your Google Tasks data to provide the core functionality of Kanbris (viewing, creating, and modifying tasks)
• No advertising: We do not use Google data for advertising purposes
• No selling: We do not sell or transfer your Google data to third parties, except as required to provide or improve the app's features (and only with your consent)
• Local storage priority: We store your Google data primarily on your device; syncing occurs directly with Google's services
• Retention limits: We retain access to your data only as long as needed for the intended functionality
• Human access: Google data is not read by humans except for security, debugging, or compliance purposes, and only with your explicit consent

Revoking Access

You can revoke Kanbris's access to your Google data at any time:

• Through your Google account settings: https://myaccount.google.com/permissions
• Through Kanbris app settings

For more details, please review the Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy

12. Third-Party Services

Kanbris may contain links to third-party websites or services (e.g., Google, payment processors). This Privacy Policy applies only to Kanbris.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before providing any personal information.

13. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the new owner. We will notify you via email and/or prominent notice in the app before your data is transferred and becomes subject to a different privacy policy.

You will have the option to delete your data before the transfer if you do not wish to continue using the service under new ownership.

14. Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

By using Kanbris, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy.