Privacy Policy

Last updated: June 24, 2026

kiriboard is a free, self-displayed family dashboard that shows your calendar and weather on any screen — a tablet, monitor, TV, or spare laptop. This policy explains what information kiriboard accesses, how it is used, and how it is protected.

Information we access

Account information. When you sign in or connect a Google account, we receive your email address to identify your account and the calendars you connect.
Google Calendar data (read-only). With your consent (calendar.readonly scope), we read events from the calendars you choose to connect, so they can be displayed on your dashboard. kiriboard never creates, edits, or deletes your calendar events.
Settings you provide. Preferences such as your weather location, theme, and display options.

How we use information

We use the information solely to operate kiriboard for you: to display your connected calendars and the weather for your chosen location on your own dashboard. We do not use your data for advertising, and we do not sell it.

Google user data — Limited Use

kiriboard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell Google user data, and we do not use it for serving advertisements or for any purpose other than providing the dashboard features you requested.

Storage and security

Calendar events and settings are stored in our database (hosted on Supabase) and are accessible only to your account. OAuth tokens used to access Google on your behalf are encrypted at rest (AES-256-GCM) and are never exposed to the browser. The application is hosted on Vercel. Access to your data is protected by row-level security scoped to your account.

Sharing

We do not sell or share your personal data. Data is processed only by the infrastructure providers required to run kiriboard (Google, Supabase, and Vercel), acting on our behalf.

Retention and deletion

You can disconnect a Google account from within kiriboard at any time, which removes its stored tokens, calendars, and events. You can also revoke kiriboard's access from your Google Account permissions. To delete your kiriboard account and all associated data, contact us at the address below.

Cookies

kiriboard uses a cookie only to keep you signed in. It does not use tracking or advertising cookies.

Changes

We may update this policy as kiriboard evolves. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data? Email decastervincent@gmail.com.