Kitelo
Kitelo: privacy policy
Last updated: October 24, 2026
Kitelo (kitelo.app) is a day planner operated by Connor Kay. Kitelo is in private beta; access is by request. This policy explains what we collect and how we use it.
What we store
Your account email and the blocks, tasks, notes, clients, projects, invoices and settings you enter. These are stored in a database hosted by Supabase (US). Row-level security means each record can only be read by the account that owns it. We don't sell your data or show ads. Your planning history is kept for as long as you keep your account.
Google user data
If you connect Google Calendar, Kitelo asks for three permissions and uses them only as follows: (1) calendar.app.created, to create one calendar named "Kitelo" and keep its events matched to your blocks. It cannot change your other calendars. (2) calendar.calendarlist.readonly, to list your calendars so you can choose which to import meetings from. (3) calendar.events.readonly, to read the title, start and end time of events on the calendars you choose, for today and the next 14 days, and show them in your planner. Google tokens are stored encrypted on our server and never sent to the browser. Google data is used only to provide these features to you. It isn't sold, used for advertising, used to train AI or ML models, or shared with anyone except as needed to run the service (our hosting provider, Supabase), to comply with law, or with your consent. Humans don't read it unless you ask for support, it's needed for security, or the law requires it.
Limited Use
Kitelo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI agents and MCP access
You can create personal access tokens (starting with clk_) under ⋯ → Agent access to let an AI assistant you choose read or change your planner through Kitelo's MCP endpoint. A token acts only on your own account and can be revoked at any time. Agents you connect can read your planner, including the Google Calendar meetings you've imported into Kitelo. When you connect an agent, data it reads goes to that agent's provider under their terms. Kitelo passes Google data to an agent only when you've connected that agent yourself, and only so it can do what you ask. Kitelo never uses Google data for ads, never sells it, and never uses it to train AI models.
Retention and deletion
Disconnecting Google (⋯ → Google Calendar → Disconnect) deletes the Kitelo calendar, revokes access, and deletes stored Google tokens and imported upcoming meetings. You can also revoke access at myaccount.google.com/connections. To delete your account and all its data, email [email protected] and we'll delete it within 30 days. Export a full copy at any time with ⋯ → Export JSON.