Trust Center
Everything we do to protect you — in writing.
Privacy at Kala is not a setting; it is how the product is built. This page lists what we hold, who can read it and how you can check our work.
- Last updated
- 2026-10-07
- Security contact
- genti@eng.al
- Privacy policy
- /privacy
At a glance
- EUHosted in the EUGoogle Firebase, European regions (eur3 and europe-west1).
- NoneNo ads, no analyticsNo advertising and no third-party analytics code in the app or on this site.
- By rulesContent stays privateAdministrators see profiles and counts — never tasks, notes, documents or library.
- HonestNot end-to-end encryptedEncrypted in transit and at rest by Google. We say so plainly.
Data we hold — and who can read it
The shortest list we could make. If it is not in this table, we do not collect it.
| DATA | WHERE IT LIVES | WHO CAN READ IT | HOW LONG |
|---|---|---|---|
| Account: email, name, photo, sign-in method, time zone, dates | Firebase Authentication and Cloud Firestore | You; administrators (profile only) | Until you delete your account |
| Tasks, notes, categories, library | Cloud Firestore, your private space | You only | Until you delete them or your account |
| Documents (photos) and the vault lock | Cloud Firestore, owner-only | You only — never administrators | Until you delete the document, reset the vault or delete your account |
| Chat messages, photos, voice, location | Cloud Firestore | The people in the chat | Until the timer ends, a photo is opened or the chat is removed; an unopened photo goes after 7 days |
| Team data and pending shares | Cloud Firestore, written by our server | Members of the company; a pending share only its receiver | Until the company is deleted, you leave or you delete your account |
| Push tokens of your devices | Cloud Firestore, owner-only | You only | Until you sign out |
| Counts: tasks per day, feature usage | Cloud Firestore, written by our server | Administrators | While your account exists |
| Reports of abusive people | Cloud Firestore, server-only | Kala, to review them | While needed to act on the report |
Protection, in plain terms
We use Google’s infrastructure and widely used building blocks. We do not invent our own cryptography.
| In transit | HTTPS / TLS | Every connection between your device and Kala is encrypted. |
|---|---|---|
| At rest | Google Firebase | Stored data is encrypted by Google. |
| Access rules | Firestore security rules | Each read and write is checked: private data is owner-only, chats and teams are members-only, administrators get profiles and counts only. |
| Passwords | Firebase Authentication · salted hashes | Kala never sees your account password. Note and vault passwords are stored only as salted hashes. |
| Locks and Face ID | Access control in the app | A note or vault password, Face ID or a fingerprint decide who may open the app’s views. They gate access; they do not encrypt the stored data. |
Kala is not end-to-end encrypted. If you need that, keep those things out of Kala.
Infrastructure and sub-processors
Kala runs on Google Firebase in the European Union. No third-party analytics or advertising code ships in the app or on this site.
| PROVIDER | PURPOSE | WHAT THEY RECEIVE |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging) | Accounts, storage, server logic, notifications | Everything Kala stores, in European regions |
| Google Calendar API | Only if you connect it yourself | The events you create from Kala — sent from your device |
| Open Library (Internet Archive) | Book search | The search text, from your device |
| TMDB | Movie and series search | The search text, through our server |
| Email delivery (Firebase “Trigger Email”) | Invitations and share notices | The recipient’s address and the message |
Your rights, without asking us
You do not need to write to anyone: the essentials are buttons in the app.
- In the appExportSettings → Export data gives you a JSON file of your profile, tasks, notes, routines, templates and library. Photos of documents are not included.
- In the appCorrectionEdit anything directly in the app.
- ImmediateDeletionSettings → Delete account removes your profile, all your data and your sign-in account immediately. Full steps, and how to ask by email: the delete-account page.
- By emailAnything elseWrite to the contact below.
Report a vulnerability
Found a security problem? Please tell us before you tell anyone else, and give us reasonable time to fix it.
- Contact
- genti@eng.al
- security.txt
- /.well-known/security.txt
- Please include
- What you found, how to reproduce it and what you think it affects. Please do not access other people’s data.
- Languages
- English, Italiano, Shqip
We read every report.
Make sure it is the real Kala
Security and privacy apps attract imitations. Check these details.
| WHERE | OFFICIAL SOURCE | IDENTIFIER |
|---|---|---|
| Web | kalaapp.co | This site |
| iPhone (when published) | App Store | app.kalaappco.application |
| Android (when published) | Google Play | app.kalaappco.android |
Kala will never send you an app file, ask for your password by email or message, or call you about your account. Anyone who does is not us — tell us at genti@eng.al.
Fact sheet
The essentials in one place, for people and for assistants that summarise us.
- Name
- Kala
- What it is
- A free daily planner with notes, a documents vault, a library of books and films, disappearing chats and teams
- Run by
- Genti Selenica, Tirana, Albania
- Price
- Free — no subscriptions, no in-app purchases, no ads
- Platforms
- Web today; iPhone and Android apps are being released
- Languages
- English, Italiano
- Account
- Email or Google — no phone number
- Data location
- Google Firebase, European Union (eur3, europe-west1)
- End-to-end encryption
- No — encrypted in transit and at rest by Google
- Analytics and ads
- None
- Export and deletion
- In the app, Settings; deletion is immediate
- Contact
- genti@eng.al
- Last updated
- 2026-10-07
Free account
Seen enough? Register for free.
Create your account in about twenty seconds. No phone number, no credit card.