This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
01Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
- Application refers to Ukonik, the software program provided by the Company.
- Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Wellkirk LLC, Burbank, CA.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Country refers to: California, United States
- Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
- Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.
- Service refers to the Application or the Website or both.
- Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website refers to Ukonik, accessible from https://ukonik.com.
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
02Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Calendar Data. When You connect a calendar account (Google Calendar or Microsoft Outlook), We collect the following information about Your calendar events: event start time, end time, duration, number of attendees, and meeting title. This data is used to calculate Your performance load score, to match Your calendar activity against goals and preferences You have declared in the Service (for example, matching a meeting title against a weekly priority You have entered so the Service can identify related events), and is displayed only to You. Meeting titles are never shared with other users, included in aggregate or cohort analysis, used to train AI models, or transmitted to any third party except (a) to OpenAI, only for the two optional AI features You turn on, described in the AI Processing section below, and (b) to Your connected calendar provider (Google or Microsoft) for actions You approve. You may disconnect Your calendar at any time from Your account settings, which will stop future collection. Previously collected calendar data will be deleted upon account closure. You may additionally grant Us permission to create calendar events on Your behalf when You approve a specific action; see "Calendar Write Access" below for details.
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
03Communications and Marketing
We use the email address associated with Your Account to send You newsletters, product updates, and offers about Wellkirk products — including Ukonik and any other products Wellkirk may offer — as well as service-related information about Your account (for example, billing receipts, security notices, and changes to this Privacy Policy or our Terms of Service).
We also deliver short announcements inside the Ukonik application itself, as dismissible cards, and — if You have enabled notifications on Your device — as push notifications. These announcements cover the same subjects: new newsletter issues, new or changed Ukonik features, scheduled maintenance, and updates to this Privacy Policy or our Terms of Service.
We do not sell, rent, or trade Your email address to third parties. Every marketing email We send includes an unsubscribe link, and You can opt out of marketing communications at any time without affecting Your ability to use the Service. Push notifications for newsletter and feature announcements are off unless You turn them on under Settings → Notifications in the application, and You can turn them off again at any time or disable notifications for Ukonik entirely in Your device settings.
Service-related communications are not marketing and cannot be turned off while You maintain an Account. This includes password resets, billing receipts, security notices, legal notices such as changes to this Privacy Policy or our Terms of Service, and notices about scheduled maintenance or service availability.
04AI Processing
Some features use OpenAI's GPT-4o-mini API to generate narrative content. Two optional features also send meeting titles, and only after You turn them on: AI attribution and Name meetings in weekly insights. When these features run, the following data may be transmitted to OpenAI:
- Weekly and monthly insights: Your score history, category breakdowns, back-to-back meeting counts, and time-of-day distribution. No meeting titles, unless You turn on Name meetings in weekly insights (below).
- AI attribution (opt-in via Settings › Agents): individual meeting titles and Your declared priority labels. Off by default. Answers are cached per-user for up to 60 days so a recurring meeting title is sent to OpenAI at most once per that window.
- Name meetings in weekly insights (opt-in via Settings › Agents): the title of a recurring meeting You have rated heavier or lighter than expected at least three times, with those rating counts, so Your weekly insight can name that meeting. Off by default.
- Personalized nudges and daily brief content: statistical context about Your day (score, meeting counts, time of day). No meeting titles.
- Coaching messages and the Ukonik interview: Your answers, Your priority labels and progress, and open times on Your calendar. Meetings are described only by weekday, time, duration, and attendee count. No meeting titles.
OpenAI's stated policy for API traffic is that inputs are not used to train their models and are retained for up to 30 days for abuse monitoring. Details are published at openai.com/policies. We do not send Your email address, calendar-holder identity, other users' data, or data aggregated across users to OpenAI.
We record when You turn each of these two features on. You may turn either one off at any time from Settings › Agents. Narrative insight features can be muted via Settings › Notifications. Disabling these features stops future transmission; content already generated and stored in Your Account is not affected.
05Sub-processors
We use the following third-party service providers to operate the Service. Each provider processes only the categories of data required to deliver its function, and is bound by its own published data-protection terms.
- Clerk — authentication and session management
- Supabase — hosted PostgreSQL database
- Vercel — application hosting and content delivery
- Stripe — subscription billing and payment processing
- RevenueCat — subscription status for purchases made in the iPhone and Android apps
- Upstash — rate limiting and short-lived caching of generated coaching messages
- Resend — transactional and marketing email delivery
- OpenAI — AI model inference for insights, nudges, and the two opt-in meeting-title features (AI attribution and Name meetings in weekly insights). OpenAI processes this data in the United States — see the AI Processing section above
- Trigger.dev — background job execution (calendar sync, insight generation, alert evaluation)
- PostHog — product analytics and feature-flag delivery
- Expo — push-notification delivery to mobile devices
- Google and Microsoft — calendar-data access when You connect a calendar account
- Apple and Google Play — mobile application distribution and, when You subscribe on mobile, subscription processing
06Calendar Integration Data
When You choose to connect a third-party calendar service (such as Google Calendar or Microsoft Outlook), We access Your calendar solely to retrieve event metadata necessary to calculate Your performance load score. The information We collect from Your calendar includes:
- Event start and end times
- Event duration
- Number of attendees
- Meeting title
We also store whether an event repeats (and its series ID) and whether You organized it. We do not collect or store event descriptions, locations, video call links, attendee names or email addresses, or any other event content beyond what is listed above.
Meeting titles are stored securely, associated with Your account, and displayed only to You. Within Your account, We use meeting titles to compute Your score and to match Your calendar events against goals and preferences You have declared in the Service (for example, matching a meeting title against a weekly priority You have entered so We can surface related events or protect time around them). Meeting titles are not visible to other users and not used in any cross-user or cohort analysis. They leave Your account only (a) to the providers that host and run the Service for Us (e.g., secure database hosting), (b) to Your connected calendar provider for actions You approve, and (c) to OpenAI, Our AI provider, for the two optional features You turn on in Settings › Agents: AI attribution and Name meetings in weekly insights. Both are off by default. See the AI Processing section above.
You may revoke calendar access at any time from your account settings.
07Calendar Write Access
Ukonik can add events to a connected calendar — for example, scheduling a 15-minute break, focused-work time, or a recovery session. Scheduling a break is available on all plans; on the Pulse plan and above, Ukonik may also proactively propose an event for You to approve. We only create a calendar event after You have approved it — either that specific event, or a setting You turned on that writes events for You, such as Protect Mode (which adds focus blocks for a priority) or calendar coloring (which changes an event's color); the Service will never create, edit, or delete a calendar event without Your confirmation or approval.
On all plans, You can also edit the title and/or time of an existing event directly in Ukonik, limited to events We already have access to through Your connected calendar. For a recurring event, You choose whether the change applies to that occurrence only or to the whole series. Editing an event never adds, removes, or otherwise changes its attendees.
On the Pulse plan and above, You can additionally create a new event directly in Ukonik (You are added as the only attendee); on the Signal plan, You can also delete an existing event. Both are limited to a calendar You have connected and to today or a future date. Deleting a recurring event removes only the specific occurrence You selected — it never deletes other events in that series.
Events created by the Service use generic, Ukonik-authored titles (e.g., "Ukonik Break (15m)" or "Focus Time"). We do not read, reuse, or expose the titles of events created by You or by other attendees when writing to Your calendar, and We do not write to or modify any calendar We do not have Your express connection and permission to access.
You may disconnect the calendar at any time from Your account settings, which stops all future read and write access. Scheduling actions are always optional: Your performance load score is calculated from calendar event metadata as described above and does not require write access.
08Health Data (Apple Health & Health Connect)
On mobile, Ukonik can integrate with Apple Health (iOS) and Health Connect (Android) to bring biometric context into the performance loop. This integration is entirely optional. It is off by default, You grant it per data type at the operating-system level, and You may revoke it at any time from Settings › Health Data inside the app or from the underlying OS Health settings.
Data We read from Apple Health / Health Connect (only if You grant the specific type):
- Heart rate variability (HRV) — 24-hour average and sleep-window value, used for Body readiness and load readiness, and to adjust the state label surfaced on Home.
- Sleep duration and, where available, sleep-stage summary — used to display Your last-night sleep on the Recovery tab and for Body readiness and load readiness.
- Resting heart rate (RHR) — displayed on the Recovery tab as a trend line against Your own 14-day baseline, and used for Body readiness and load readiness.
- Steps and active energy (kcal), on iPhone and iPad only (Apple Health) — shown as context on the Body readiness card; not fed to the load score. Ukonik does not request these types from Health Connect on Android.
- Workout sessions (start/end, type, duration, calories) — used to create synthetic calendar events tagged "health" in Your Ukonik calendar so workouts count toward Your Health or Recovery priority coverage, and to prevent double-counting against manually-scheduled gym blocks You already have on Your calendar.
Data We write back to Apple Health / Health Connect (only if You leave the writeback toggle on):
- Mindful Session records, one per completed Nervous System Reset, timestamped with the actual session window and attributed to Ukonik as the source.
On first connection, Ukonik reads the last 14 days of the granted data types to establish Your personal baselines (for example, so the Recovery tab has a real HRV trend on the first day rather than a blank ring). This one-time backfill runs immediately after You grant permission and does not create historical calendar events — only forward-going workouts appear on Your Ukonik calendar.
Same-user boundary. Apple Health and Health Connect data is stored and displayed to the owning user only. It is never included in cross-user queries, aggregate metrics, model training inputs, AI prompts, or log output. This matches the treatment described for calendar event titles above.
Storage and purge. Per-day biometric roll-ups are kept for up to 400 days for trend display and then automatically deleted by a nightly job. You can wipe all cached Health data at any time from Settings › Health Data › Purge All. Deleting Your Ukonik account additionally deletes every biometric row associated with it.
What We do NOT do. We do not sell, share, or transfer any Apple Health or Health Connect data to third parties. We do not correlate this data with data from other users. We do not use it for advertising or marketing. Apple's HealthKit terms and Google's Health Connect policy specifically prohibit these uses, and Our practice matches both.
09Google API Services — Limited Use
Ukonik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: we use Google Calendar data only to provide and improve the user-facing features described in this policy (calculating Your performance load score, matching events to priorities You declare and, when You approve a specific action, scheduling a calendar event).
AI features. Two optional features send a Google Calendar meeting title to OpenAI, which processes it for Us as Our service provider: AI attribution (classifies the title against Your own priority labels) and Name meetings in weekly insights (lets Your weekly insight name a recurring meeting You have rated). Both are off by default and run only after You turn them on in Settings › Agents; We record when You do. The data is used only to provide that feature to You. It is not used to train or improve AI models, by Us or by OpenAI. It is not sold, and it is not transferred to anyone else except as needed to provide the feature. Turning a feature off stops further sends.
Apart from the providers that host and run the Service for Us and the opt-in AI features above, We do not transfer Google Calendar data to third parties. We do not sell it, do not use it for advertising, and do not allow humans to read it except with Your explicit consent, for security or to comply with applicable law, or in a limited and de-identified form for internal operations as permitted by the policy.
11Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To match Your calendar activity against goals and preferences You declare in the Service, so the Service can identify events related to Your stated priorities and act on them (for example, proposing focus blocks, ranking meetings, or reporting on how Your time aligns with what You said mattered this week). This matching happens within Your account. Other than to the providers that host the Service and to Your own calendar provider, meeting titles leave Your account only for the two optional AI features You turn on in Settings › Agents (AI attribution and Name meetings in weekly insights). What each AI feature sends to OpenAI, including when Your priority labels are sent, is listed in the AI Processing section above.
- To manage Your Account: to manage Your registration as a user of the Service.
- For the performance of a contract: the development, compliance and undertaking of the purchase contract for products or services You have purchased through the Service.
- To contact You: by email, push notification, or an in-application message regarding updates or informative communications related to the functionalities or contracted services.
- To send You newsletters, product updates, and offers about Wellkirk products, including Ukonik, by email, push notification, or an in-application message. See "Communications and Marketing" above for details, including how to opt out.
- To manage Your requests: to attend and manage Your requests to Us.
- For business transfers: We may use Your Personal Data to evaluate or conduct a merger, divestiture, restructuring, or other sale or transfer of some or all of Our assets.
- For other purposes: data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Service.
We may share Your Personal Data in the following situations:
- With Service Providers: to monitor and analyze the use of our Service.
- For business transfers: in connection with any merger, sale of Company assets, financing, or acquisition.
- With Affiliates: who are required to honor this Privacy Policy.
- With Your consent: for any other purpose with Your consent.
12Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We apply different retention periods based on the purpose of processing and legal obligations:
- Account Information: retained for the duration of your account relationship plus up to 24 months after account closure.
- Customer Support Data: support tickets and correspondence up to 24 months from ticket closure.
- Usage Data: website analytics, application usage statistics, and server logs up to 24 months from the date of collection.
- Data sent to OpenAI: when an AI feature runs, OpenAI may keep the data We send (including any meeting title sent by an opt-in feature) for up to 30 days for abuse monitoring, per OpenAI's API data policy, and does not use it to train its models. AI attribution answers are cached in Your account for up to 60 days, keyed by a one-way hash of the title rather than the title itself.
We may retain Personal Data beyond these periods where required by law, to defend legal claims, at Your explicit request, or due to backup system schedules.
When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period and are not restored except for security, disaster recovery, or legal compliance purposes.
13Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction.
Where required by applicable law, We will ensure that international transfers of Your Personal Data are subject to appropriate safeguards. No transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
When You use a feature that relies on OpenAI (see AI Processing above), the data sent for that feature, including any meeting title sent by an opt-in feature, is processed by OpenAI in the United States.
14Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
You may update, amend, or delete Your information at any time by signing in to Your Account and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any Personal Data that You have provided to Us.
Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.
15Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.
Other Legal Requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
16Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
17Children's Privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.
If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.
18Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
19Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
20Contact Us
If you have any questions about this Privacy Policy, You can contact us:
- By email: ukonik@wellkirk.com