Security and data protection

Where your data is stored and how we protect it

Kanbalino runs on our own server in Nuremberg. This page sets out how we protect your data, which service providers are involved and what does not exist yet.

Location and operation

Our own server in Germany

Our own server in Nuremberg

Daily backup

Monitoring every five minutes

Access

The database decides who may see what

In the browser

What the application does not do

No cookies

The application sets no cookies. Your sign-in and the settings of the interface are kept in the local storage of your browser and stay on your device.

No statistics tool

No analytics tool runs in the application. Fonts and scripts come from our own server; the application does not call third-party servers.

Dictations stay with us

When you dictate a note, our own server converts the recording into text. No third-party service is involved, and the application does not store the recording.

Service providers

Four service providers in ongoing operation

These companies process content from your workspace on our behalf. We operate the spam protection of the forms and the text recognition ourselves. A fifth is added only if you switch on the AI add-on.

netcup GmbH

Task: provides the server and the data centre. The application, the database and the file storage run on it.

Location: Nuremberg, Germany

Emailit (FunFirst s.r.o.)

Task: sends the application’s emails, such as notifications, invitations and messages from a card.

Location: Prague, Czech Republic

pCloud International AG

Task: stores the daily backups. We encrypt them before uploading; pCloud receives only the encrypted files.

Location: Luxembourg data centre (EU region), registered office of the company in Switzerland

Mittwald CM Service GmbH & Co. KG

Task: incoming mailbox for cards and requests by email. Messages are kept there until our server collects them.

Location: Espelkamp, Germany

Only with the AI add-on: Anthropic Ireland, Limited

Task: creates summaries and draft replies and revises texts that a member has written. For a summary and a draft, Anthropic receives the contents of the card for which a member calls the AI: title, status, description, checklist, comments and messages, including names in them. When revising, Anthropic receives only the text that is to be revised. Under Anthropic’s terms and conditions, the contents are not used for training and, according to Anthropic, are deleted within 30 days; Anthropic keeps them longer only if it is examining a breach of its usage policies or the law requires it. Without the add-on, Anthropic receives nothing.

Location: storage in the USA, processing there or in other countries

Frankly speaking

What does not exist yet

Better an honest list than a promise that is not true.

Deleting the account and export

The application does not yet have a button for deleting the account or for a complete export. We do both by hand on request.

Passkeys and third-party sign-in

You sign in with your email address and password, with a second step if you wish. Passkeys and sign-in via Google or Microsoft are not available.

Frequently asked questions

Frequently asked questions about security and data protection

On our own server in the Nuremberg data centre. The daily backups are stored encrypted in the EU region, in the Luxembourg data centre.

Yes, but only with this add-on and only for the card for which a member calls the AI. The title, status, description, checklist, comments and messages of this card go to Anthropic Ireland, Limited. They are stored in the USA and processed there or in other countries. Under its terms and conditions, Anthropic does not use the contents for training and, by its own account, deletes them within 30 days; it keeps them longer only if it is examining a breach of its usage policies or the law requires it. An admin confirms this before switching on the add-on. Without the add-on, Anthropic receives nothing.

Yes. If you use Kanbalino for work and record other people’s data in it, we conclude a data processing agreement (DPA) with you in accordance with Article 28 of the General Data Protection Regulation (GDPR). To arrange this, write to us at info@weitsicht-webdesign.de.

No. The application at app.kanbalino.com sets no cookies and contains no statistics tool. Measured on 2 October 2026 on the sign-in page: zero cookies, requests only to our own server. This website is separate from that. Which services it uses is set out in the privacy policy.

Yes. As an admin of a workspace you make sign-in in two steps mandatory. The database enforces this, not just the interface: without a second step it releases no content of the workspace.

Only the board or the individual card that you share. Guests do not see other boards.

Not yet in the application. We carry out a deletion or a handover of your data by hand on request. Write to info@weitsicht-webdesign.de.

This page is as of 5 October 2026. The privacy policy and the terms of use are authoritative.

Try it for free now

Create an account, set up a board and switch on two-factor sign-in straight away. No credit card and no trial period that runs out.