Privacy Policy

Last updated: 12 November 2026

Kaidan-Island is developed and operated by Juan Crespillo Osuna, an individual developer based in Spain (“we”, “us”). We are responsible for the personal data described here. Short version: almost everything the app does stays on your PC. Our server only keeps what’s needed to run your account and license.

1. What we keep on our server

• Account: email, name (if you give one), your password protected with a one-way hash (we can’t read it), whether you confirmed your email, and your language.
• License: plan, expiry date, account status and, if you bought through Paddle, your Paddle customer and subscription IDs.
• Device: a coded identifier of your PC (not your serial numbers), your PC’s name, the app version and when it last checked your license. This is how we apply “up to 2 PCs per account”.
• Payments: date, plan and amount of each payment. We never see your card details: Paddle handles them.
• Security logs: your IP address is processed briefly to block abuse (for example, too many password attempts) and kept in technical logs for a short time.

2. What stays only on your PC

Settings, notes, tasks, your clipboard history, screenshots, wallpapers, coding time and the notifications the island shows are stored only on your computer. The music rhythm is measured from your sound output in real time, it is never recorded. Calendar and Discord access tokens are stored encrypted with Windows on your PC.

3. Services the app contacts directly

Some features talk directly to other services from your PC, only when you use them:

• Weather: Open-Meteo receives your approximate location (from Windows, or from your IP via ipwho.is / ipapi.co).
• Song lyrics: LRCLIB receives the song title and artist.
• Sports results (off by default): ESPN.
• Calendars you connect: Google Calendar and/or iCloud.
• Discord: the app talks to the Discord app on your own PC.
• AI assistant you choose (Claude, ChatGPT, Gemini…): it opens its own website inside the island, under its own privacy policy. Text or images are only sent when you ask.

4. Companies that help us

• Paddle (payments, taxes and invoices; Merchant of Record).
• OVH (server hosting in the EU).
• Cloudflare (domain, website delivery and security).
• Resend (sending account emails such as confirmations and password resets).

Some of them may process data outside the EU; when they do, they use the safeguards required by the GDPR (such as Standard Contractual Clauses).

5. Why we use your data

To provide the app and your license (contract), to keep the service secure and prevent fraud (legitimate interest), and to meet legal obligations (for example, accounting). We don’t sell your data and we don’t use it for advertising.

6. How long we keep it

While your account exists. If you ask us to delete your account, we delete it, except for payment records that must be kept by law. Technical logs are deleted after a short period.

7. Your rights

You can ask to access, correct, delete or export your data, or object to its use, by writing to [email protected]. You can also complain to the Spanish Data Protection Agency (aepd.es) or the authority of your country.

8. Children

Kaidan-Island is not intended for children under 14.

9. Changes

If we change this policy in an important way, we’ll let you know by email or in the app.