Version 2026-09-29
This policy explains which personal data we process, why, on what legal basis, who else receives it and how to exercise your rights, under Regulation (EU) 2016/679 (GDPR).
Data controller: ⚠ [PENDIENTE DE COMPLETAR] · Tax ID: ⚠ [PENDIENTE DE COMPLETAR] · Address: ⚠ [PENDIENTE DE COMPLETAR] · Email: privacy@katanith.com
For any question about your data, write to privacy@katanith.com.
Katanith does not need health data, political opinions, religion or other special categories. Emotion notes and tags are free text you write: do not include sensitive data about third parties or anything you do not want stored. Do not enter bank account numbers, broker passwords or API keys.
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Create and manage your account and provide the service (journal, analytics, calendar) | Performance of a contract (6.1.b) |
| Verify your email, protect the account and prevent fraud, abuse and automated attacks | Legitimate interest in the security of the service (6.1.f) |
| Handle payments, subscriptions and invoices | Performance of a contract (6.1.b) and legal tax and commercial obligations (6.1.c) |
| Answer enquiries and support tickets | Contract or pre-contractual steps (6.1.b) and legitimate interest (6.1.f) |
| Send service notices (security, changes to terms, billing) | Contract (6.1.b) and legitimate interest (6.1.f) |
| Send product news or weekly summaries, only if you enable them in Settings → Notifications | Consent (6.1.a), which you can withdraw at any time |
| Prove that you accepted the Terms and the Privacy Policy | Legitimate interest in being able to demonstrate it (6.1.f) |
We make no automated decisions with legal effects on you. The statistics and metrics on your dashboard are computed only from your own data, for you.
We do not sell your data or share it for advertising. We work with providers acting on our behalf under data processing agreements:
| Provider | Purpose | Location / safeguards |
|---|---|---|
| Supabase | Database, authentication and file storage | ⚠ [PENDIENTE DE COMPLETAR]. Standard contractual clauses where applicable |
| Cloudflare | Hosting, content delivery, anti-bot protection (Turnstile) | Global. EU-US Data Privacy Framework and standard clauses |
| Stripe | Payments and subscription management (also acts as controller for its own fraud and legal duties) | EU and US. Standard clauses and EU-US framework |
| Brevo | Transactional email (verification codes and replies) | European Union |
| Only if you choose “Continue with Google” to sign in | US. EU-US Data Privacy Framework |
We may also disclose data to authorities, judges and courts when the law requires it.
Some providers may process data outside the European Economic Area. When they do, it is under an adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission. Ask us for more information at privacy@katanith.com.
You may at any time exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent where we asked for it:
We apply reasonable technical and organisational measures: encrypted connections (HTTPS/TLS), hashed passwords, per-user access control at database level, private screenshot storage with temporary links, anti-abuse limits and anti-bot protection. No system is infallible: if a breach creates a risk for you we will notify you, and the supervisory authority where the law requires it.
Katanith is intended for people aged 18 or over. If we find that a minor has created an account, we will delete it.
We only use strictly necessary technical storage. See the Cookie Policy.
If we change this policy materially we will update the version date (2026-09-29) and ask you to accept the new version when you next sign in.