Privacy Policy

Last updated: 9 October 2026

Who we are

Kessa is built by Bytes & Pixels GmbH, Germany. Contact: support@bytes-and-pixels.de. We are the controller of the personal data described here under the GDPR.

What we collect

• Account data: your email address (if you create an account), your name as you enter it, and a random account identifier. You can also use Kessa without an account — the household then lives on your phone under an anonymous identifier until you choose to save it.
• Your household: the household name, the assistant's name, the first names of the children you add, and the people you invite.
• Your plans: the events, to-dos, routines and reminders you or your partner confirm, and who they are assigned to.
• Your messages to the assistant: what you type or say to Kessa, and its replies, are stored so the household can see its log.
• Voice: when you use the microphone, the recording is sent to OpenAI for speech-to-text, turned into text, and discarded. The audio is never stored.
• Captured documents: letters, photos, PDFs and text you add to Capture or share into Kessa. The file is kept privately for at most six hours while it is read, then deleted; the events and to-dos found in it are kept only if you confirm them.
• Family photos: a profile photo you choose for an adult or a child, visible only to your household. It is never sent to OpenAI.
• Purchase state: whether your household has an active subscription, processed by Apple and RevenueCat. Superwall shows the subscription offer. We never see your payment details.
• Usage analytics: product events (screens viewed, features used, crashes) via PostHog, used only to improve the app.
• Push notifications: if you allow them, a device token so we can notify you about clashes, reminders and your partner's requests.
• Emails and app messages: if you have an account, your email address, your account identifier and app events such as signing up are sent to Customer.io (EU region), so we can send you a welcome email, tips and service messages.

Your own calendar stays on your phone

If you link the calendars on your device, Kessa reads them on the phone to spot clashes with family duties. The contents of those calendars are never uploaded to our servers and your partner cannot see them. When you ask your partner to cover a duty, only the time window you are busy is shared with them — never the title or details of the appointment.

AI processing with OpenAI, only if you allow it

Kessa's assistant, voice input and Capture use AI from OpenAI (OpenAI, L.L.C., USA). Before the first time any of them would send something, the app shows what is sent and to whom and asks for your permission. If you choose "Not now", nothing is sent and the calendar, to-dos and lists keep working without AI. You can withdraw the permission at any time in Settings → AI assistant (OpenAI); requests already sent cannot be called back.

With your permission, Kessa sends OpenAI only what is needed for the request you make:

• Assistant: your message, the recent conversation, and the household details needed to answer — the first names of household members and children, your events, to-dos, routines, and the notes Kessa remembers for your household.
• Voice: the recording, to turn it into text.
• Capture and sharing: the letter, photo, PDF or text you choose, to find the events and to-dos in it.

OpenAI uses this data only to produce the answer, transcript or extraction for Kessa. It acts as our processor under a data-processing agreement, does not use API data to train its models, and may keep requests for up to 30 days to monitor abuse (some image or file inputs may be kept longer for review), after which they are deleted. Nothing the assistant proposes is saved until you confirm it in the app. AI can make mistakes: check dates, times and other important details before relying on them. Our legal basis is your consent (Art. 6(1)(a) GDPR).

Advertising measurement with X, only if you allow it

Kessa advertises on X (formerly Twitter). On iPhone, the app asks once whether you allow tracking. If you allow it, we tell X when you download the app, add an email address, start a trial or subscribe in the app, together with a scrambled (SHA-256 hashed) version of your email address, so X can recognise people who use X and show our ads to families like yours. We never send X your name, your family's plans, your messages or a device advertising identifier. If you don't allow it, nothing is sent. You can change your answer at any time in the iOS Settings; the app passes the change on and stops sending. X receives this data as an independent controller under its own privacy policy, and may process it outside the EU. Data X has already received cannot be called back by deleting your Kessa account; you can exercise your rights with X directly. Our legal basis is your consent (Art. 6(1)(a) GDPR).

What we don't do

• We don't sell your data.
• We don't track you across other apps or websites, except the advertising measurement with X described above, and only if you allow it.
• We don't show third-party ads.
• We don't collect your children's data beyond the first name you enter, and Kessa is not directed at children.

Who we share data with

Only with the providers that run the service, each bound by a data-processing agreement: Supabase (database and authentication, EU region), OpenAI (assistant, speech-to-text and Capture, only with your permission), RevenueCat (subscriptions), Superwall (showing the subscription offer), PostHog (analytics, EU region), Customer.io (emails and app messages, EU region), Apple (sign-in, purchases, push delivery) and Google (sign-in, if you choose it). These providers may use the data only to deliver their service to us, and must protect it at least as well as this policy does. If you allow tracking, X receives the advertising-measurement data described above as an independent controller.

Where your data lives

Your data is stored with Supabase in the European Union and protected by row-level security: only members of your household can read your household's data. Data sent to OpenAI may be processed outside the EU under standard contractual clauses.

Your data stays until your household is deleted

We keep your household's data for as long as the household exists, whether or not you saved it to an account. When the last adult deletes their account, the household is deleted with it.

Your rights

Under the GDPR you can access, correct, export or delete your data, and object to or restrict processing. Most of this you can do yourself in the app; for anything else email us. You can also complain to your local data-protection authority.

Deleting your data

Settings → Delete account permanently removes your account, your messages and — if you are the last member — the whole household, including its events, to-dos and routines. Subscription records are kept only as long as Apple, Google and tax law require. You can also ask us to delete your account by email; see Delete your account.

Changes

We'll update the date above when this policy changes and tell you in the app if the change matters.