Privacy Policy

Last updated: February 23, 2026

1. Introduction

Welcome to Karya ("we," "our," or "us"). Karya is a work management platform that helps teams plan, track, and collaborate on projects. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services available at arogyaherb.store (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you register, we collect your name, email address, and password.
  • Profile Information: Any additional details you choose to provide, such as profile pictures or display names.
  • Content: Tasks, projects, notes, comments, ideas, and any other content you create within the Service.
  • Team Information: When you create or join a team, we collect information related to team membership and invitations.

2.2 Information from Third-Party Services

  • Google Account Data: If you sign in using Google OAuth, we receive your name, email address, and profile picture from your Google account.
  • Google Calendar Data: If you connect your Google Calendar, we access your calendar to create, update, and delete events related to your tasks and deadlines within Karya. We only access calendar data necessary to sync your tasks.

2.3 Automatically Collected Information

  • Usage Data: We may collect information about how you interact with the Service, including pages visited, features used, and timestamps.
  • Device Information: Browser type, operating system, and device identifiers.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Create and manage your account.
  • Sync tasks and deadlines with your Google Calendar when you enable this integration.
  • Facilitate team collaboration, invitations, and project management.
  • Send you notifications related to your tasks, projects, and team activity.
  • Improve, personalize, and expand the Service.
  • Communicate with you about updates, security alerts, and support.
  • Detect, prevent, and address technical issues and security threats.

4. Google API Services – Limited Use Disclosure

Karya's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only request access to Google Calendar data that is necessary for the functionality of syncing your tasks and deadlines.
  • We do not use Google user data for serving advertisements.
  • We do not transfer Google user data to third parties unless necessary to provide or improve the Service, comply with applicable laws, or as part of a merger or acquisition (with user consent).
  • We do not use Google user data to develop or improve AI/ML models unrelated to the core functionality of the Service.
  • Human access to Google user data is limited to what is necessary for security purposes, compliance with law, or at your explicit request.

5. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use secure database services and encrypt sensitive information such as passwords using bcrypt hashing. Access tokens for third-party services (such as Google) are stored securely and refreshed automatically.

While we strive to use commercially acceptable means of protecting your data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your team: Information you add to shared projects, tasks, and comments is visible to other members of your team or workspace.
  • Service Providers: We may share data with trusted third-party providers who assist in operating the Service (e.g., database hosting, email delivery via Resend).
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests.

7. Your Rights and Choices

  • Access & Update: You can access and update your account information at any time through the Service.
  • Delete Account: You may request deletion of your account and associated data by contacting us.
  • Revoke Google Access: You can disconnect your Google account and revoke calendar access at any time through your Google Account permissions.
  • Data Portability: You may request a copy of your data by contacting us.

8. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use third-party tracking or advertising cookies.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: support@arogyaherb.store