Privacy Policy

karrot is run by KNK Consulting, Finland, which is the data controller for your personal data. Contact: nina@ninakolari.com.

• Account details: your email address and, if you sign in with Google, your name and profile picture.
• Your app details: the app name, description, website and anything else you add to your profile.
• Your checklist activity: statuses, notes, scores and weekly plans.
• AI coach chats: messages you send to the coach and its replies, so you can return to the conversation.
• Feedback you choose to send us.
• Payment details: handled by Paddle.com, our Merchant of Record, which sells karrot subscriptions, manages payments, tax and invoicing. We never see or store your full card number.
• Basic technical data: such as sign-in times and usage counts, needed to run, secure and limit the service.

• To provide the service you signed up for (contract).
• To keep karrot secure, prevent abuse and enforce fair-use limits (legitimate interest).
• To improve karrot using totals and trends, not your individual content (legitimate interest).
• To meet accounting and tax rules (legal obligation).
• To send product news, only if you agree (consent). You can opt out at any time.

Your checklist, notes and coach chats are private to your account. Other users can never see them. We do not read your coach chats.

For support, the karrot owner can see your account details, app profile and checklist progress. We do not sell your data and we do not use it for advertising.

We use trusted providers to run karrot: cloud hosting and database, sign-in (including Google), AI model providers that generate coach replies and scores, and Paddle.com as Merchant of Record for sales, subscriptions, payments, tax and invoicing. They only process data on our instructions.

Some providers may process data outside the EU/EEA. When they do, we rely on safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

If you connect karrot to an AI tool such as Claude or ChatGPT, that tool can read and update your karrot checklist on your behalf. What happens inside that tool is covered by its own privacy policy. You can disconnect it at any time.

We keep your data while your account is active. If you delete your account, we delete your personal data within 30 days, except records we must keep by law (for example invoices, which Finnish accounting law requires us to keep for up to 10 years).

We only use cookies and browser storage that are needed for sign-in and to remember your settings. We do not use advertising cookies.

You can ask to see, correct, download or delete your data, object to or limit how we use it, and withdraw consent. Email nina@ninakolari.com and we will reply within 30 days.

You also have the right to complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Data is encrypted in transit, access is limited by strict per-user rules in our database, and we review access regularly. No system is perfect, but we work hard to keep your data safe and will tell you promptly if a breach affects you.

karrot is not meant for anyone under 16, and we do not knowingly collect their data.

If we change this policy in a meaningful way, we will tell you by email or in the app before the change takes effect.