Privacy Policy

Last updated: May 24, 2026

Kon Look Siuu is a small studio in Bangkok that builds tools we use ourselves. We care about your privacy and try to collect as little data as possible.

1. Scope

This policy covers the konlooksiuu.com website and the products we ship — currently GoGoal, Cappybara, and Planto. Individual apps may publish their own product-specific policies; where they do, the product-level policy governs that app.

2. What we collect on this website

The konlooksiuu.com landing site does not use analytics, advertising, or third-party tracking. We do not set cookies for tracking. Basic server access logs may be retained briefly by our hosting provider for abuse prevention.

3. What our products collect

• Transaction & app data you enter or import (e.g. amounts, dates, categories, portfolio movements, schedules, inventory items) — used to power the feature you are using.
• Sign-in identifiers when you choose to sign in (Sign in with Apple or Google: user ID, name, email) — used for cloud sync and account recovery.
• On-device processing: features like slip scanning run on your device using Apple's Vision framework. Slip images do not leave your device.

We do not use advertising networks, do not sell your data, and do not share it with third parties for marketing or cross-app tracking.

4. Planto — what we collect

Planto is a team and inventory management app for hospitality businesses. It is account-based and team-shared, so most data is intentionally shared with your team and employer. Specifically:

• Contact info: your name and email from Sign in with Apple or Google; phone number if you or your manager add it to your employee profile.
• User content: profile photos, item/inventory photos you upload, chat messages you send to your team, and work data you create (shifts, time off, stock counts, schedules, employee records).
• Identifiers: a Planto user ID we generate, and a device push-notification token so we can send you shift, chat, and approval notifications.
• Usage data: anonymous product interaction events (screens viewed, taps, feature usage) via PostHog, linked to your Planto user ID. We use this to understand which features are useful and to fix bugs. It is not shared with advertisers and not used to track you across other companies' apps or websites.
• Diagnostics: basic error logs to help us debug.

Planto requires permission to access your camera and photo library only when you choose to add a photo, and to your calendar only if you opt in to syncing shifts to your device calendar. Microphone access is requested for voice messages in team chat. We do not collect location, contacts, browsing history, or any sensitive categories not listed above.

Because Planto is multi-tenant, your work data (shifts, inventory, chat, HR records) is visible to other members of the company workspace you join, according to their role permissions. Your employer is the controller of that workspace data.

5. Google integrations

Where our apps integrate with Google services (e.g. Cappybara's Google Sheets sync), we comply with Google's API Services User Data Policy, including the Limited Use requirements. We request only the minimum scopes needed — typically spreadsheets (to create and write to your expense sheet) and drive.file (to share the sheet with our sync service). You can revoke access any time from your Google account settings.

6. Storage & security

Data is transmitted over HTTPS and authentication tokens are stored in iOS Keychain. Account-based product data (e.g. Planto workspace data) is stored on our managed cloud infrastructure and retained until you delete your account or your employer removes you from the workspace. Some apps (e.g. GoGoal, Cappybara) store data primarily on-device; cloud sync is optional.

7. Your choices

• For solo apps (GoGoal, Cappybara), use the app entirely offline — cloud sync is optional.
• Disconnect Google or other integrations at any time from the app settings or the provider's account page.
• Revoke camera, photo, calendar, or microphone permissions any time in iOS Settings.
• Request account and data deletion by emailing us (see contact below). For Planto, deletion of an individual account removes your personal profile and chat authorship; team-shared work records (shifts, inventory, approvals) you created remain visible to your workspace as historical business records, owned by your employer.

8. Children

Our products are not directed to children under 13 and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy as our products evolve. Material changes will be reflected by updating the date above. Continued use of our website or products after changes constitutes acceptance.

10. Contact

Questions about privacy, or want your data deleted? Email hello@konlooksiuu.com.