Back to Kiroku
Privacy & Data Protection

Privacy Policy

Effective Date: September 6, 2026 • Application: Kiroku (kiroku.xyz)

1. Overview & Core Philosophy

Welcome to Kiroku (“we”, “our”, or “us”), accessible at https://kiroku.xyz, created and operated by Ullas Kunder (ullaskunder.com).

Kiroku is a serene, high-speed living documentation library and writing environment. We believe that your thoughts, notes, and documentation belong strictly to you. We are committed to transparency, minimal data collection, and robust user privacy.

2. Information We Collect

We only collect information strictly necessary to provide, authenticate, and maintain your workspace:

A. Account & Authentication Information

When you register or sign in, we collect your name, email address, and authentication credentials. If you sign in via OAuth providers (such as Google), we receive basic public profile information (such as your name, email address, avatar URL, and Google Account ID).

B. Documents & Workspace Content

We store and synchronize the books, chapters, pages, markdown text, code blocks, diagrams, and revision histories that you create inside Kiroku to allow seamless multi-device editing and backup.

C. Technical & Diagnostic Data

When you access Kiroku, we may log standard technical data including browser type, operating system, IP address, device identifiers, and crash logs to monitor service reliability and prevent abuse.

D. Information We DO NOT Collect

We do not collect phone numbers, physical addresses, biometric identifiers, or government-issued IDs.

3. Google API Services & OAuth User Data Compliance

Kiroku allows users to sign in and authenticate using Google OAuth. When you authenticate using Google, Kiroku only accesses basic profile information (name, email address, avatar image, and user identifier) to create and authenticate your account session.

Google Limited Use Disclosure:

Kiroku’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We do not sell, rent, or trade Google user data to third parties, advertisers, or data brokers.
  • We do not use Google user data or your private documents to train generalized artificial intelligence (AI) or machine learning (ML) models.
  • You may revoke Kiroku’s access to your Google account at any time via Google Security Settings.

4. How We Use Your Information

We process your information exclusively for the following purposes:

  • To provide, operate, and maintain your distraction-free documentation workspace.
  • To authenticate your identity and protect against unauthorized access.
  • To save, sync, and restore your documents across your connected devices and sessions.
  • To manage optional subscription tiers (Lite Power / Pro) and feature entitlements.
  • To respond to your support requests and communicate critical security notices.

5. Data Storage, Retention & Security

We implement industry-standard encryption (HTTPS/TLS in transit and secure database access controls) to safeguard your data.

Data Retention: We retain your personal data and documents for as long as your account remains active or as required to fulfill the purposes outlined in this policy. When you delete a page or document, it is immediately removed from your workspace or moved to your designated trash archive.

6. Your Rights & Data Deletion Process

Regardless of your location (including rights under GDPR, CCPA, and global privacy standards), you have full control over your personal data:

Access & Export

Export your documents, markdown files, and workspace archives locally at any time.

Account & Data Deletion

Request full deletion of your account, profile, and cloud workspace data.

To request complete deletion of your account and associated data, contact us directly at our contact page. Requests are processed promptly within 30 days.

7. Third-Party Service Providers

We may utilize trusted third-party cloud infrastructure providers to operate the service:

  • Hosting & Edge CDN: Vercel Inc.
  • Database & Edge Persistence: Turso / LibSQL
  • Authentication: Better-Auth & Google OAuth

These third parties are bound by strict data protection agreements and only process data as necessary to perform their respective services.

8. Children’s Privacy

Kiroku is not directed at children under the age of 13 (or under 16 where applicable by local law), and we do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information without parental consent, please notify us immediately so we can delete the account and associated data.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our service or changes in legal requirements. Any modifications will be posted on this page with an updated “Effective Date”.

10. Contact Information

If you have any questions, feedback, or privacy-related inquiries regarding this Privacy Policy or your personal data, please contact:

Developer: Ullas Kunder

Service: Kiroku (https://kiroku.xyz)

Contact Form: https://www.ullaskunder.com/contact

Website: http://ullaskunder.com/