Kalava has no accounts. What a family keeps is theirs, it stays on their own devices, and most of the app never speaks to a server at all.
The days you keep, what you have completed, your notes, your vows and your japa counts are stored on your device. If iCloud is switched on, a copy is kept in your app's private iCloud database, under your own Apple ID. That is Apple's storage, not ours — we have no access to it and no ability to read it. It syncs your own devices to each other and nowhere else.
To remove everything, delete the app and, if you wish, delete its iCloud data from Settings → your name → iCloud. Because we hold nothing of yours, there is nothing on our side to ask us to erase.
Kalava asks for your location only while you are using it, and only to name your place and compute the day's times there. Finding the name of a place and searching for one are handled by Apple's Maps services, under Apple's privacy policy. Your coordinates are never sent to Kalava's servers. You can instead pick any town by hand, and never grant the permission at all.
The festival packs, recordings and photographs are downloaded from
content.kalava.app, which is served by Cloudflare. Like any web server, it sees the
IP address of the request and which file was asked for. These logs are kept briefly for security
and troubleshooting, are not joined to anything else, and are not used to build a profile of you.
Subscriptions are sold by Apple through the App Store. Apple tells us whether a purchase is valid through RevenueCat, which assigns your installation an anonymous customer identifier. We keep a ledger of subscription events against that identifier — started, renewed, cancelled, expired — so that we can answer a billing question and know what is active. It carries no name, no email address and no payment details; Apple never gives us those.
Kalava asks once whether you are willing to share anonymous usage data. Until you say yes, nothing is sent, and the app is entirely functional if you say no. If you agree, product events — which screens are opened, whether a guided sitting was finished — are sent to PostHog. Screen contents are not captured. Your notes, your vows and the text of anything you write are never sent.
When you share a card, Kalava can mint a short kalava.app/s/… link so that whoever
receives it sees a preview. That link holds only the few facts the card itself states — a day, a
place, a date. It carries no device or installation identifier. Links are deleted automatically
after 180 days.
Reminders are scheduled on your device by the app itself. Kalava operates no push server and sends you nothing from the outside.
Kalava is not directed at children under 13 and does not knowingly collect their personal information.
Under India's Digital Personal Data Protection Act, the UK and EU GDPR, and comparable laws elsewhere, you have rights of access, correction, erasure and portability. Because Kalava holds no account and no personal record of you on its own servers, these are mostly exercised on your own device: the app can export your whole record as a file, and deleting the app removes it. For the anonymous purchase ledger described above, or any other question, write to hello@kalava.app and we will respond within 30 days.
If this policy changes materially, the app will say so before the change takes effect.