Privacy Policy
Who we are
Stranza (“we”) is a personal daily planner available at stranza.app. It is operated by its independent developer, who is the data controller for the personal data described here. Contact: domantaxas99@gmail.com — a person reads every message.
What we collect
Only what running the product needs — nothing else:
- Your account. Your email address and sign-in identity, managed by our sign-in provider, AWS Cognito. You can sign in with Google or with an emailed code. Signing in with Google gives Stranza no access to your Google data beyond your name and email address.
- What you create. Tasks, notes, captures, projects, folders, comments, reminders, time blocks, files you attach, and the briefs Stranza generates for you.
- Voice input, if you use it. Audio is transcribed by AWS Transcribe inside our own AWS environment and deleted once transcription finishes (a 30-day cleanup catches any stragglers). The transcript stays, as a regular capture.
- Your calendars, only if you connect them. With your permission, Stranza keeps a read-only copy of events from the calendars you choose — Google Calendar, or iCloud via an app-specific password you create. It reads them; it does not write to them. The credentials are stored encrypted with a dedicated key.
- Push notifications, if you enable them. A push subscription for each device you enable. Notification content is encrypted so that the push relay (Apple, Google or Mozilla, depending on your browser) can see that a message was delivered — never what it says.
- Security records. A limited log of account-level events (sign-in-related events, exports, deletion requests) including IP address, plus short-lived server logs.
What we never do
- No ad-tech, no analytics scripts, no trackers — not on this site, not in the app.
- We never sell or rent your data.
- We don’t use your content to train AI models — and today, no AI provider receives your data at all. If Stranza adds AI features, this policy will be updated before any of your data reaches an AI provider.
Why we process it
- To provide Stranza: storing your content, building your views and briefs, and delivering the notifications you asked for (performance of our contract with you).
- Calendar reading, voice transcription and push notifications run only with your consent, and you can withdraw it at any time — disconnect a calendar, or turn notifications off.
- Security logging and abuse prevention (our legitimate interest in running a safe service).
Where your data lives
In Amazon Web Services’ Stockholm region (eu-north-1), in the European Union — encrypted in transit and at rest. We do not transfer your content outside the EU. Push delivery runs through your browser vendor’s relay (Apple, Google or Mozilla), which sees delivery metadata only.
Who receives it
We use a small number of service providers, and this list is the complete one:
- Amazon Web Services — all hosting, storage and voice transcription.
- Google — only if you sign in with Google or connect Google Calendar (read-only).
- Apple — only if you connect iCloud calendars (read-only) or receive notifications on an Apple device.
- Push relays (Apple, Google, Mozilla) — delivery metadata for notifications you enabled; the content is encrypted to your device.
No analytics providers. No ad networks. No AI providers.
Google user data
Stranza’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: your calendar data is read-only, used only to show your events and include them in your briefs, never used for advertising, never sold, and not read by any human except with your explicit permission or where required for security or by law.
Cookies
This site sets no cookies. The app keeps your session on your device, and our sign-in provider (AWS Cognito) uses cookies strictly for signing you in — nothing is used for tracking, so there is no cookie banner to click.
How long we keep it
- Your content: for as long as your account exists.
- Deleted tasks, notes and captures: recoverable for 30 days, then permanently deleted — not hidden.
- Voice audio: deleted after transcription.
- Briefs and notification history: up to 12 months.
- Security logs: up to 12 months. Server logs: 14 days.
Your rights
Under the GDPR you can access, correct, export, delete or restrict the processing of your data, object to processing based on legitimate interests, withdraw consent, and complain to your local data protection authority. Export is built in — Settings → Export gives you your data as JSON or Markdown, no request needed. For everything else, email domantaxas99@gmail.com; we answer within 30 days.
Deleting your account
Settings → Danger zone → Delete account deactivates your account immediately and signs you out everywhere. To have your data permanently erased, email us from your account address — erasure is completed within 30 days of your request.
Children
Stranza is not directed at children, and you must be at least 16 to use it.
Changes to this policy
We’ll post any change here with a new effective date, and announce material changes in the app before they take effect.