The short version
- No account is needed. Without one, Kanbond knows you only by a random ID your browser makes up and the name you choose.
- What you put on a board is seen by everyone who has its link. Boards are deleted after 60 days without a visit or edit.
- If you sign in, we keep your email address, your name and the list of your boards, so they follow you to other devices.
- No ads, no analytics, no tracking cookies. We don't sell or rent your data.
- Voice calls go directly between browsers and are end-to-end encrypted. We never record them. AI meeting notes only happen if you choose Allow.
Who we are
Kanbond (kanbond.com) is run by Juhl Catiggay, an independent developer based in the Philippines, who is responsible for your data under this policy. In this policy, “we” means Kanbond. Questions and requests go to hello@kanbond.com.
What we collect
When you use a board without an account
In your browser. Kanbond keeps a few things in your browser's local storage: a random browser ID, the name and color you use on each board, the boards you've opened (the last 50), the keys that make you a board's host or co-host, access to password-protected boards, and preferences such as the theme. These stay on your device. Clearing this site's data in your browser removes them.
On the board. Each board keeps what people put on it: columns, cards, notes, chat messages and files, together with the display name of whoever made or last changed each thing and a history of changes. Everyone who has the board's link can see all of this. The board also remembers your random browser ID next to your name, so you get the same name back next time. That ID stays on the board's server and is never shown to other people.
Passwords. If a host sets a board password, we store only a salted hash of it, never the password itself.
When you sign in
Signing in is optional. It only syncs your boards and your name across devices, and it's needed for My Day.
- Your account: your email address and name. With Google, also your profile picture and the sign-in tokens Google gives us. We ask Google only for your basic profile and email.
- Sign-in records: when each session started and expires, plus the IP address and browser it came from, so you can sign out everywhere and so we can spot misuse.
- What syncs: the boards you've opened (title, last visit), your host and co-host keys, sealed access to password-protected boards, and the name and color you use on boards.
- My Day: the tasks you write and the board cards you plan. These are private to you and never shown on a board.
Huddles (voice calls)
Calls go directly between the browsers in the call, encrypted end to end by WebRTC. We never receive, record or store audio or video from a call. To connect you, your browser shares its network address (IP address) with the others in the call and with Google's public STUN servers. When no direct path exists, the call is relayed through Cloudflare's TURN service, which passes on the encrypted stream without being able to read it.
AI features
AI Helper. When you ask it for a draft, we send your request and a short summary of the board (column and card titles and labels, and the details of any card you name) to an AI model run by Cloudflare Workers AI. The draft is shown only to you until you keep it.
AI HuddleMate. It only records people who choose Allow. While it's on, your browser records your own microphone in 15-second pieces and sends only the pieces in which you spoke. Each piece is turned into text and the audio is thrown away at once; it is never stored. The text is kept until the meeting's draft cards are made, then deleted. The drafts stay on the board for up to 7 days unless someone keeps or discards them first.
Cloudflare says it doesn't use what is sent to Workers AI to train its models.
Technical data
Like every website, our servers see your IP address and browser details when you connect. We use them to deliver the site, to limit how fast one network can create boards or guess passwords, and to block abuse. Rate-limit counters last minutes to an hour. Our hosting providers keep short-lived request logs for troubleshooting. When you create a board, Cloudflare Turnstile checks that you're a person and not a bot.
What we don't do
- No advertising, no analytics tools, no tracking pixels and no third-party trackers.
- No selling, renting or trading your data.
- Pictures linked on cards and notes are hosted by other sites, so they load only when you click them (or from sites you chose to always allow), and without telling that site which board you're on.
Cookies and browser storage
Kanbond sets one cookie, and only when you sign in: the session cookie that keeps you signed in. Everything else Kanbond remembers lives in your browser's local storage, as described above. There are no advertising or tracking cookies, so there's no cookie banner.
How we use it
- To run Kanbond: show boards live, sync them to your devices and send sign-in emails.
- To keep it safe: limit abuse, investigate reports and remove illegal content.
- To meet legal obligations, such as answering valid requests from authorities.
We rely on providing the service you asked for, on our legitimate interest in keeping Kanbond secure and working, and on your consent where we ask for it (your microphone and camera, and AI HuddleMate).
Who it's shared with
People with the link. A board's content, and your name and color on it, are visible to everyone who opens it. Share board links only with people you want on the board.
Service providers that run Kanbond for us, and only for that:
- Cloudflare: hosts the boards, accounts, chat files and AI models, relays calls that need a relay, and runs Turnstile.
- Vercel: serves the website's pages.
- Google: Google sign-in, if you use it, and the STUN servers that help calls connect.
- Resend: sends sign-in links, if you sign in by email.
When the law requires it. We may disclose information to comply with a valid legal request, or to protect people's safety. Where we're allowed to, we'll tell you first.
Where it's stored
Everything is stored on Cloudflare's network. A board's data lives in a Cloudflare location near the person who created it, so it may be stored in a different country from yours. Our providers protect data they hold for us under their own security and data processing terms.
How long it's kept
- Boards: until 60 days pass with no visit and no edit, or until the host deletes the board. Then everything on it is deleted, including its chat files.
- Inside a board: deleted items stay in the trash for 7 days, daily backups for 7 days, the history keeps the last 2,000 changes, and chat keeps the newest 500 messages (older files are deleted with their messages).
- Accounts: until you delete yours. Deleting it removes your sign-in, your synced board list, your name and color, and your My Day tasks. Boards themselves stay for the people using them, so what you added to a board stays there until the board is deleted.
- Logs and counters: a few days at most.
Your rights and choices
Wherever you live, you can ask to see the data we hold about you, correct it, delete it, get a copy of it, or object to how we use it. Under the Philippine Data Privacy Act of 2012 you can also complain to the National Privacy Commission, and in many countries you can complain to your local data protection authority.
- Change your name on any board from your avatar menu.
- Delete your account from the account menu.
- Export any board as JSON or Markdown from its More menu.
- Anyone with a board's link can edit or delete what's on it. For anything you can't remove yourself, such as a chat message, write to hello@kanbond.com with the board link.
Because Kanbond doesn't ask who you are when you use a board, we may not be able to tell which board content is yours. Tell us the board and what to look for, and we'll do what we can.
Children
Kanbond isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, tell us and we'll delete the account.
Security
How we protect boards, passwords and accounts is described on the Security page.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects what we collect or who we share it with, we'll say so on the site before it takes effect. Paid plans aren't on sale yet; this policy will be updated before they are.
Contact
Questions, requests or complaints: hello@kanbond.com.