Privacy Policy

Last updated 14 August 2026

Kaisho keeps your diary on your phone. Nothing leaves the device unless you create an account, and even then only what you choose to sync.

The short version. No analytics. No advertising. No trackers. No third-party SDKs beyond the one that talks to our own database. We do not sell or share your data with anyone, ever. You can export everything or delete your account from inside the app.

Who we are

Kaisho is operated by Alle Hub. For anything in this policy, write to kaisho@allehub.tech.

What stays on your device

If you never create an account, this is everything, and none of it reaches us:

Your diary — what you watched, star ratings, per-axis ratings, reviews, dates, rewatch and liked flags
Your watchlist and episode progress
Your 3×3 favourites grid and the watcher type calculated from it
Preferences: theme, episode reminders, whether you have seen the intro
A cache of anime metadata so screens load without asking the network again

Deleting the app deletes all of it.

What we store when you have an account

Data	Why
Email address	To sign you in. With Sign in with Apple this may be a private relay address, which is all we ever see.
Handle, display name, optional bio and avatar	So other people can recognise you
Diary entries you sync	So they survive a reinstall and friends can see your activity. Syncing is a button you press, not automatic.
Who you follow	To build your activity feed
Episode discussion posts and votes	They are the discussion
Lists you create, save or collaborate on	To show them to you and to anyone you shared them with
Filler and canon claims, and votes on them	They are community knowledge by design, and are visible to everyone
Reports you file and people you block	To keep the community usable. Reports are visible to our moderators; blocks are visible only to you.

What we never collect

Your location
Your contacts, photos, or anything else on your phone
Advertising identifiers — the app contains no ad or analytics code
Payment details. There is nothing to buy.

Who else is involved

Supabase

Our database and sign-in run on Supabase, hosted on AWS in the United States (us-east-1). They process data on our behalf and do not use it for anything else. If you are in Brazil or the EU, this means your data is transferred outside your country.

AniList

Anime titles, artwork, episode schedules and relationships come from AniList's public API. Your phone asks them directly, so AniList sees the request and your IP address, exactly as visiting a website would. We never send them your account, your diary or anything about you.

Apple

If you use Sign in with Apple, Apple confirms your identity to us. We receive an identifier and an email address — a private relay one unless you chose to share your real address. Apple's own privacy policy governs what they do.

Notifications

Episode reminders are scheduled by your phone from broadcast times it already downloaded. They are not push notifications: there is no server sending them, and we hold no device token.

How long we keep things

Until you delete them. Delete your account and every row keyed to you goes with it — profile, synced diary, posts, votes, lists, claims, follows, reports and blocks — immediately and permanently. There is no grace period and no archive.

Two things survive by design, because they are not about you: anonymous aggregate counts, such as how many people voted on a filler claim, and the franchise relationship data derived from AniList, which contains no personal information.

Your rights

Under Brazil's LGPD and the EU/UK GDPR you can access, correct, export or delete your data, and object to how it is processed. Two of these are buttons in the app rather than requests you have to make:

Export — Profile → Export your data. Everything the app holds about you, as a JSON file.
Delete — Profile → Delete account.

For anything else, email kaisho@allehub.tech and we will respond within 30 days.

Children

Kaisho is not intended for children under 13. We do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

Security

Traffic is encrypted in transit. Access to your rows is enforced by the database itself rather than by the app, so an out-of-date or modified client cannot read somebody else's data. We never see your password: sign-in is handled by Supabase Auth, and Sign in with Apple means there is no password at all.

Changes

If this policy changes materially we will update the date above and say so in the app before the change takes effect.