Kendoshi collects no data.
Your tasks, projects and notes live on your devices
and in your personal iCloud.
The developer has no access to them.
There is no tracking, no advertising and no analytics.
This page is the privacy policy for the Kendoshi app for macOS, iOS and iPadOS
Section 01
Controller
Nico PlagemannPost Hope Production
Rua das Trinas 34
1200-858 Lisboa
Portugal
Email: help@posthopeproduction.com
Phone: +351 924 723 686
Section 02
What the app processes
Kendoshi processes the content you create yourself: folders, projects, groups, tasks, subtasks, notes, links, dates and settings. This data is stored exclusively on your device and, if you are signed in to iCloud, in the private database of your iCloud account (Apple CloudKit).
Section 03
iCloud sync
Syncing between Mac, iPhone and iPad runs through Apple CloudKit in the private database of your iCloud account. Only you have access. Apple's privacy policy applies to the transfer. Without an iCloud sign-in the app works purely locally.
Section 04
“Connect to team” mode
If you choose this mode, you enter the address of a Kendoshi server yourself (your own or your team's). The data is then transferred to that server, not to the developer. The operator of that server is responsible for the processing that happens there.
Section 05
Apple Calendar
Kendoshi can optionally display events from Apple Calendar. The app asks for permission first. The events are only read and only shown on the device, never copied or transferred.
If you switch on calendar sync, Kendoshi creates its own calendars (“Kendoshi · project name”) in your iCloud and writes your dated tasks into them as events. Your own calendars and events are never changed; when you switch it off, Kendoshi removes its calendars again.
Section 06
External calendars (ICS)
If you enter a calendar link (ICS), the app loads it directly from that provider. The provider sees your IP address, as with any request on the internet. The developer is not involved.
Section 07
Notifications
Reminders and timer notifications are scheduled locally on the device. Silent push messages from Apple serve only to trigger the iCloud sync; they contain no content.
Section 08
Local access for your own AI clients (Mac only)
On the Mac, in solo mode, you can switch on a local access point that lets an AI client you set up yourself read and create your tasks. This access is off by default. It is reachable only on your own machine (127.0.0.1), not from your network and not from the internet, requires a token you generate in the app, and only runs while the app is open. Kendoshi transfers nothing to the developer in the process.
What your AI client then passes on is decided by that client, not by Kendoshi. If it works with a model in the cloud, the requested content leaves your device and is processed by the provider of that model. Kendoshi itself contains no language model.
Section 09
AI button
Every task has an AI button that helps you break it down, clarify it or get started. Kendoshi itself contains no language model.
Without a key, Kendoshi only builds a prompt. With “Open in Claude”, “Copy” or “Share” you decide where it goes; Kendoshi sends nothing itself. In Claude the prompt is pre-filled and only goes out when you send it there. Anthropic's terms apply.
With your own API key, Kendoshi asks a provider of your choice (an OpenAI-compatible service, for example OpenRouter) for a suggestion. Before the first request to a provider, the app asks for your permission and names the provider, the model and the data. Only on your tap, and only for the task you request a suggestion for, the following go directly from your device to that provider: title, project, status, priority, due date, subtasks, up to 4,000 characters of notes and your instruction. The provider processes them under its own terms. The developer receives nothing. Your key is stored only in this device's keychain, not in iCloud and not in Kendoshi backups. You can revoke your permission and delete the key at any time in Settings → AI.
Kendoshi Desktop, the separate program for the Mac, can also use Claude Code or Codex on your Mac with your own subscription, in solo mode only. For the one task, title, project, status, priority, due date, subtasks, shortened notes and your instruction then go through your account to Anthropic (Claude Code) or OpenAI (Codex). Kendoshi Desktop stores none of it and only logs the provider and the duration.
Section 10
No collection, no tracking
Kendoshi sends no usage data, crash reports or identifiers to the developer. No advertising or analytics services are used. For crash reports, only your device's setting for sharing with Apple applies.
Section 11
Backup and deletion
You can export your data as a file at any time (Settings → Data). Deleted items stay in the archive for 30 days and are then removed. Deleting the app and its iCloud data (iOS: Settings → Apple Account → iCloud → Manage Storage) removes all data completely.
Section 12
Your rights
For the app, the developer stores no personal data about you, so there is nothing to disclose, correct or delete on his side. If you have signed up for update emails (section 14), you have the right of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 21 GDPR), and you can withdraw your consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Portuguese Comissão Nacional de Proteção de Dados (CNPD). Questions about this policy are answered at the contact address above.
Section 13
This website
These pages are hosted by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) and embed no external services: no fonts from third-party servers, no maps, no videos from third-party platforms, no analytics, no cookies. The short films are stored on the same server as the site, and a film file is only loaded when a film is started. When a page is requested, the host stores technically necessary server logs (including IP address, time, requested file, browser identification) in order to keep the service running; the legal basis is Article 6(1)(f) GDPR. The servers are located within the European Union. STRATO does not disclose the exact locations for security reasons. No transfer to a third country takes place. By its own account, STRATO keeps visitors' IP addresses for at most seven days, to detect and fend off attacks. Downloads are counted without personal data, see section 14.
Section 14
Downloads and update emails
Download counter. Downloads of the desktop apps and freebies from posthopeproduction.com go through a short download page. It counts each download with the date (without time), the app, the file, the page language and which of these websites the click came from (Kendoshi, ZimeZumi or the main page). No IP address, no browser information and no cookies are stored for this, so the count cannot be traced back to a person. Known bots are not counted. The purpose is to see which apps and versions are downloaded; the legal basis is Article 6(1)(f) GDPR.
Update emails (voluntary). On the download page you can leave your email address to hear about new versions of an app. It is used only for that. Sign-up uses double opt-in: you first get an email with a confirmation link, and only after you confirm is your address added to the list for that app. If you do not confirm, it is not added. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email or by writing to the contact address above; processing up to that point remains lawful. Your address stays on the list until you unsubscribe.
Service provider. The list and the sending of the emails are handled by Brevo (Sendinblue SAS, Paris, France) as a processor under a data processing agreement. Brevo stores the address, the list, the time of sign-up and confirmation and the technical data needed for delivery; depending on the settings, also whether an email was opened or a link was clicked. Details are in Brevo’s privacy policy. The address is not stored on this website’s server.
Protection against misuse. To stop the form from being misused, the IP address is kept for at most one hour, only as a salted hash, and then discarded. Visitors receive no cookies; only the site operator’s own statistics page uses a sign-in cookie.
As of 5 October 2026 · This page is not legal advice
Your data stays yours.
No account with the developer, no tracking, no ads. If you want to know more, just write.