Kshan is an automatic time tracker. That makes privacy the main thing you need to know about it, so this policy is written to be read. The short version: activity data is written to a database on your own computer; nothing leaves it unless you turn on cloud features; and you can delete everything at any time.
The data controller is Psycodex LLP, Floor 7, Tower 42, 702, Gold Tower, Amnora Park Town, Hadapsar, Pune, Maharashtra 411028, India. Privacy questions and requests: abhishek@psycodex.com.
1. What the app records on your computer
While tracking is on, Kshan polls the foreground window and records:
- the application name;
- the window title;
- for browsers, the URL of the active tab where the operating system allows it (macOS Automation permission, Windows UI Automation, Linux accessibility);
- start and end times, so sessions can be grouped into categories and a Focus Quality Score.
Kshan never takes screenshots, records video or audio, or logs keystrokes or mouse clicks, on any plan.
Built-in filters stop recording automatically for incognito and private windows, password managers, system settings, and known banking and account sign-in sites. You can add your own apps, domains or rules to a "Do Not Track" category; matching sessions are discarded, and existing ones are deleted.
All of this is stored in a SQLite database in your user profile on your own machine. In the default Offline only mode it is never uploaded anywhere.
2. What we store in the cloud, and when
Nothing in section 1 reaches our servers unless you choose a storage mode that sends it:
- Offline with backups: the app writes a backup copy of the local database to a folder you pick (Dropbox, OneDrive, Google Drive or iCloud Drive). The file is not encrypted by Kshan, so it is protected only by that folder and provider; we never see it.
- Cloud backup / sync: daily summaries, tasks, categories and rules, and, if you enable session sync, individual sessions, are stored in your account in a PostgreSQL database hosted by Supabase. This is what allows restore on a new machine, weekly and longer reports, AI summaries and the daily email.
Your account itself holds your email address, display name and avatar from the sign-in provider (Google), your plan and subscription status, and your preferences.
3. Other data we collect
| Data | Purpose | Processor | | --- | --- | --- | | Crash reports and errors (stack trace, OS, app version, no activity data) | Fix bugs | Sentry | | Pseudonymous usage events (screen opened, feature used, aggregate daily totals such as tracked minutes and focus score; OS, app version, language, country; no app names, window titles or URLs) | Understand which features matter and whether users keep using the app | PostHog | | Remote configuration fetches (app version, platform) | Deliver update notices and legal-document URLs | Firebase Remote Config | | Website visits to kshan.io (pages viewed, downloads clicked and for which platform, FAQ and pricing interactions; country from your IP address, which is then discarded; browser and device type) | Understand how many people visit, where they come from and what they do before downloading | PostHog | | Feedback you send from the app, with your account id | Reply to you | Supabase |
Website analytics is cookieless by default. Until you accept statistics cookies in the cookie banner, kshan.io stores nothing on your device for analytics: PostHog counts visits from a hash of your IP address, browser and the day, which is salted and discarded daily and cannot be reversed or linked across days. If you accept, PostHog sets a first-party cookie and localStorage entry (ph_*_posthog, 1 year) so that return visits and the path from first visit to download can be counted; the banner's Declaration tab lists it. Withdrawing consent in the footer's cookie preferences deletes that cookie and returns to cookieless counting. Analytics requests are relayed through kshan.io itself (/ingest), not loaded from a third-party domain. We never use session recording, heatmaps or surveys on the website, and never link website visits to an account.
Usage events are keyed by a random identifier generated on first launch and stored only on your computer. It is never linked to your email, account id or any hardware identifier, so PostHog can count how many installs keep using a feature but cannot tell who you are; a reinstall starts a new identifier. Analytics is on by default and you can switch it off on the onboarding privacy step or under Settings → Privacy → Usage analytics.
4. Paid features that process your data
- AI summaries (Pro, cloud sync on): once a day, an hour-by-hour summary of your categories and durations (not window titles or URLs) is sent to Google's Gemini API to write your end-of-day narrative and recommendations. Google does not use data sent through this API to train its models. The result is cached in your account.
- Daily email (cloud sync on): your daily report is emailed to your account address through Resend. It is on by default for synced accounts and can be switched off in Settings.
- Payments: paid plans are sold by Dodo Payments as merchant of record. Dodo collects your payment details and billing address under its own privacy policy; we receive your email, plan, and transaction identifiers, never your card number.
5. Integrations
You can connect Google Calendar, Gmail, Outlook, Apple Calendar, Trello, GitHub, Asana, monday.com, Jira, Linear, Todoist, Notion, Slack and Microsoft Teams. Each connection is optional and uses the provider's OAuth consent screen. Access tokens are stored on your computer only and are not synced to our servers. Calendar events and task titles you import are treated like your other tracking data (sections 1 and 2). Disconnecting in Settings revokes the token where the provider allows it and removes it locally.
Google user data. Kshan's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you importable items and to generate summaries you asked for; it is never used for advertising, never sold, and never read by a human except with your consent for support or as required by law.
6. Legal bases (EEA and UK)
We process your data to perform our contract with you (running the app and your account), for our legitimate interests (security, crash fixing, pseudonymous product analytics), with your consent (optional cloud sync, integrations, AI summaries, the daily email, analytics cookies), and to meet legal obligations (tax and accounting records for purchases).
7. Retention
Local data stays on your machine until you delete it or uninstall the app. Cloud data stays in your account while it exists. Crash reports are kept for 90 days, pseudonymous usage analytics for 24 months, and purchase records for as long as tax law requires (currently 8 years in India).
8. Deleting your data
- Local: Settings → Data lets you wipe the local database, or uninstall the app and remove its data folder.
- Cloud: switch to Offline only to stop syncing, then email abhishek@psycodex.com from your account address with the subject "Delete my account". We delete your account and all synced data within 30 days and confirm by email. Backups expire within a further 30 days.
9. Your rights
Depending on where you live (including under the GDPR, the UK GDPR, the CCPA and India's Digital Personal Data Protection Act), you can ask for access to, correction of, portability of, or deletion of your personal data, object to or restrict processing, withdraw consent, and complain to your data protection authority. Email abhishek@psycodex.com; we respond within 30 days and never charge for a first request. We do not sell personal data and do not discriminate for exercising your rights.
10. International transfers
We are in India and our processors are in the United States and the EU. Where the GDPR applies, transfers rely on the processors' Standard Contractual Clauses or an adequacy decision.
11. Security
Data in transit is encrypted with TLS. Cloud data is protected by per-user row-level security so only your account can read it. No system is perfectly secure; if we learn of a breach affecting you we will notify you as the law requires.
12. Children
Kshan is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
13. Changes
The date at the top shows the current version. We announce material changes in the app or by email before they take effect, and the app may ask you to accept updated terms on your next sign-in.
14. Contact
Psycodex LLP, Pune, India. Email: abhishek@psycodex.com. See the Contact page for postal details.