Kanduck Kanduck Start a board

Last updated October 24, 2026

Privacy policy

Kanduck is a free board app with a duckling helper called Dilly. This page says what we store, who else touches it, and how to get rid of it. We don't sell your data, we don't show ads, and we don't use your boards to train AI models.

Who we are

Kanduck (formerly called Duckling) is run by KMF Ventures ("we", "us"). You can reach us at privacy@kanduck.com.

What we store

Your boards

Everything you put in the app: board and list names, cards, notes, checklists, due dates, comments and chat on cards, notes and links in your library, and files you attach. Boards and accounts are stored in Cloudflare's database (D1) and file storage (R2).

Your space key

The first time you open Kanduck without signing up, we create a random secret key for you. It stays in your browser and works like a password for your boards. On our side we keep only a one-way hash of it, so we can recognise the key but not read it. If you later save your boards to an account, we also keep an encrypted copy so that signing in on another device can give the key back. If you never sign up and you clear your browser data, nobody, including us, can restore those boards.

Your account, if you make one

People you invite

If you add someone to a board by email, we store their email address so the board appears when they sign in with it. They can leave, and you can remove them at any time.

Telegram, if you connect it

We store your Telegram chat ID and the messages and links you send the Kanduck bot. Links you share are fetched and summarised, and the summary is saved to your notes. Send /stop to the bot, or disconnect in Settings, to turn it off.

Push notifications, if you turn them on

We store the address your browser gives us for sending you reminders, and the time of day you want them. Turning notifications off in the app or your browser removes it.

Google Drive, if you connect it

Kanduck asks Google for one narrow permission, drive.file, which only lets us see and manage files that Kanduck itself creates in your Drive. We cannot browse the rest of your Drive. We store an encrypted token so uploads keep working until you disconnect. Files you upload to your library are kept in your Drive.

Kanduck's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use that data only to provide the Drive features you ask for. We don't use it for advertising, we don't sell it, and no person reads it unless you ask us to for support, it is needed for security, or the law requires it.

Usage and logs

We keep simple counts of what happens in the app, such as "app opened" or "card moved", tied to your space but never to board content, so we can see what works and what breaks. If we switch on product analytics, it runs through our own domain and receives only anonymous event names and a hashed identifier, never board text, email addresses or file names. Cloudflare also keeps ordinary request logs, which include IP addresses, for security and debugging.

How AI works here

We don't use your content to train AI models. Each provider processes requests under its own terms.

Who else gets your data

We may also disclose information if the law requires it, or to protect people from harm or abuse of the service. If the business is ever sold, your data would move to the new owner under this same policy.

Cookies and local storage

We use a sign-in cookie when you have an account. Your browser also keeps your space key, theme, cached boards (so the app works offline) and a service worker that caches the app. There are no advertising cookies and no third-party trackers.

How long we keep things

We keep your boards until you delete them. Deleting a board removes its lists, cards and attached files. Copies can remain in database backups for up to 30 days. To delete your account and everything linked to it, email privacy@kanduck.com from the address on the account and we'll do it within 30 days. Files saved in your own Google Drive stay there until you delete them.

Security

Everything travels over HTTPS. Space keys are stored as hashes, saved copies and Drive tokens are encrypted, and sign-in uses passkeys, Google or one-time email links rather than passwords. No system is perfectly secure, so please keep your agent link and share links private.

Your choices and rights

You can see and edit your boards in the app, export them by asking us, and delete boards yourself. Wherever you live, you can ask us to access, correct, export or delete the personal data we hold about you, or object to how we use it, by emailing privacy@kanduck.com. If you are in the EU, UK or California, those rights are set out in law and we'll honour them. We process your data to provide the service you asked for, to keep it secure, and, where you've chosen to connect something, with your consent, which you can withdraw by disconnecting it. Kanduck runs on Cloudflare's global network, so your data may be processed in the United States and other countries where Cloudflare operates.

Children

Kanduck isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.

Changes

If we change this policy in a meaningful way, we'll update the date above and tell you in the app before it takes effect.