TaktraPrivacy Policy
Taktra ("Taktra", "we", "us") is a personal accountability assistant that you use through Telegram. This policy explains what data Taktra collects, how it is used, where it is stored, who it is shared with, and how you can have it deleted. It covers data from Google APIs in particular detail, because that data is subject to extra rules.
Limited Use disclosure. Taktra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1. Data we collect
Data you send us through Telegram
- Your Telegram user ID, chat ID, and display name, so Taktra knows who is talking to it and only answers approved users.
- The messages and voice notes you send, and the tasks, notes, reminders, and preferences created from them.
Data from Google Calendar (only if you connect it)
When you connect Google Calendar, you grant Taktra the OAuth scope https://www.googleapis.com/auth/calendar.events ("View and edit events on all your calendars"). With it, Taktra can access:
- event titles, descriptions, locations, start and end times, all-day status, attendee email addresses, video-call links, and event status;
- the ability to create, update, and delete events.
Taktra does not request access to your Gmail, contacts, Drive, or any other Google service, and does not access calendar sharing settings.
Technical data
- Operational logs and diagnostic traces of what the assistant did (for example, which tool it called and whether it succeeded), used to find and fix problems.
2. How we use Google user data
Taktra uses Google Calendar data only to provide and improve the user-facing features you can see and ask for:
- Reading events to tell you what is coming up, to include today's schedule in your morning brief, and to check for conflicts before scheduling something.
- Creating events when you tell Taktra about a commitment with a specific time, including a reminder so you are warned in advance.
- Updating or deleting events only when you ask. Deleting an event always requires your explicit confirmation of which event it is.
We do not:
- sell Google user data, or transfer it to data brokers or information resellers;
- use it for advertising, including personalised, retargeted, or interest-based advertising;
- use it to determine creditworthiness or for lending purposes;
- use it to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models;
- allow humans to read it, except (a) with your affirmative consent for specific messages, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) when it is aggregated and anonymised for internal operations.
3. How we share data
Taktra shares data only with the service providers needed to run the features you use, and only for that purpose:
| Provider | What it receives | Why |
|---|---|---|
| OpenAI (API) | Your messages, and the calendar events and tasks relevant to the current request | To understand your request and write Taktra's reply. Data sent through OpenAI's API is not used to train OpenAI's models. |
| OpenAI (API), for voice notes | The audio of voice notes you send | To transcribe them into text. |
| Telegram | Taktra's replies to you | To deliver messages. Telegram's own privacy policy applies to your use of Telegram. |
| Calendar requests you make through Taktra | To read and change your calendar. |
These transfers are limited to what is necessary to provide the feature you asked for. We do not share your data with anyone else, except where required by law, or as part of a merger or acquisition where you will be notified and this policy's protections continue to apply.
4. Storage and security
- Your tasks, notes, conversation history, and the Google authorisation token are stored on a private server that we operate. The server's API is not exposed to the internet.
- Google Calendar events are fetched when needed and are not copied into a separate database. Details of events that come up in conversation may remain in your conversation history, and in diagnostic traces for up to 14 days.
- All connections to Google, OpenAI, and Telegram are encrypted in transit with TLS.
- Access to the server is restricted to the operator, using key-based authentication.
5. Retention and deletion
- Diagnostic traces are deleted automatically after 14 days.
- Tasks, notes, and conversation history are kept while your account is active, so Taktra can follow up on them.
- Deleting your data: email privacy@khaytai.com and include your Telegram username. We will delete your account data, including the stored Google authorisation, within 30 days and confirm when it is done.
- Disconnecting Google Calendar: you can revoke Taktra's access at any time at myaccount.google.com/permissions. Taktra then immediately loses access to your calendar. Events it created stay on your calendar unless you delete them.
6. Your rights
You can ask to see, correct, export, or delete the personal data Taktra holds about you, or object to how it is used, by emailing privacy@khaytai.com. We will respond within 30 days.
7. Children
Taktra is not intended for anyone under 16, and we do not knowingly collect data from children.
8. Changes to this policy
If we change how Taktra uses your data, we will update this page and its effective date, and tell existing users through the Taktra bot before the change takes effect. We will ask for your consent again before using Google user data in any new way.
9. Contact
Questions about this policy or your data: privacy@khaytai.com.