Privacy

Who looks after your data

TaFacin is the project of its founder, Felipe Custodio, and the service is sold from Ireland.

For any request about your data, use the contact form or write to [email protected].

For people in Brazil, the data protection officer is the founder, at the same email.

What we keep and why

• Account. Your email, the password stored only as a hash, the passkeys you add and the open sessions. They let you in and keep everyone else out.
• Payment. The customer and subscription identifiers at Stripe and the state of your access. The card number stays with Stripe and never passes through our server. For a Pix payment, we keep the payment's reference.
• What you tell the app. Routine, tasks, goals, money, training, diet, sleep and anything else you enter, the conversations with Kairos and the files you send in them (photo, audio, video, PDF). Kairos uses it to cross the areas of your life and recommend.
• Weather. The place you give, as latitude and longitude, so Kairos can read the weather outside.
• Notifications. If you turn them on, the address your browser generates to receive the alert.
• Contact form. Name, email and message, to answer you.
• Site visits. Only a count by day: the page, the language, the site the visit came from and the click on I want access. No cookie, no IP address, nothing that says who visited.

Training, diet, sleep and what you tell about your body are health data.

They only come in with your explicit consent, given when you create the account, and you can withdraw that consent whenever you want.

On what basis

• Account, payment and what you tell the app. The contract you accept when you subscribe.
• Health data. Your explicit consent.
• Billing data. The legal duty to keep it.
• Contact form and the service's security. The legitimate interest in answering whoever writes and keeping the service running.

Who else receives it

Only the providers that make the service work, each with a data processing agreement.

• Google, through the Gemini API. Receives the conversation and the context Kairos needs to answer. On the paid plan, Google does not use it to train models. It keeps it for a limited time only to detect abuse, and for 30 days when the answer uses Google Search.
• Stripe. Processes card payments.
• Resend. Sends the account and subscription emails.
• Cloudflare. Carries the traffic to the server and forwards the contact emails.
• A weather service. Receives only the place, with no name and no email, and returns the weather.
• Your browser's notification service. If you turn notifications on, it receives the encrypted alert.

None of your data is sold, and no advertiser receives anything.

Where it lives

On TaFacin's server, in Ireland.

Google, Stripe, Resend and Cloudflare may process it outside the European Union, and that transfer follows the European Commission's standard contractual clauses or an adequacy decision. You can ask for a copy.

For how long

• The account and what you told it. As long as the account exists. When you ask to delete it, we delete it within 30 days, backups included.
• Billing data. 6 years, the period Irish tax law sets.
• Form messages. 12 months after the answer.

What you can do

At any time, you can

• download what you entered and your conversations with Kairos in one file, from the Profile;
• correct anything wrong, in the app itself;
• ask to delete the account and everything in it;
• withdraw the consent for health data;
• object to a use and ask to restrict it;
• complain to the authority. In Ireland, the Data Protection Commission (dataprotection.ie). In Brazil, the ANPD (gov.br/anpd).

Ask through the contact form or at [email protected].

Through the form, the confirmation arrives at once, and the answer comes within 15 days.

A recommendation is not a decision

Kairos recommends, and the decision is yours.

No decision with legal effect on you is taken by a machine alone.

Cookies

The site uses three cookies, and all three are necessary: the session of whoever signed in, the language you chose and the state of the app's menu.

None is for ads or measurement, and no third-party script runs on the site. That is why there is no banner.

Age

The service is for people aged 18 or over.

When this text changes

A change that matters to you is announced by email before it takes effect.