Privacy Policy
Last updated: 17 September 2026
Freed (the sites and applications served under
kita-agents.dev, including freed.kita-agents.dev and
login.freed.kita-agents.dev) is a private, self-hosted set of web
applications operated by an individual, Reljod T. Oreta, based in
Taguig, Metro Manila, Philippines. This policy explains what data those applications
collect, why, and what you can do about it.
Privacy questions or requests: oretareljod@gmail.com.
1. Who can use these services
Freed is not a public product. There is no self-service sign-up: accounts are created by the administrator for the operator and for people he invites. Children under 13 are not permitted to use the services, and no data is knowingly collected from them.
2. What we collect
| Data | Why |
|---|---|
| Email address and password | To create and sign in to your account. Passwords are stored only as a one-way hash; nobody, including the operator, can read the original password. |
| Session cookies | Strictly necessary to keep you signed in across the Freed sites. |
| Account and service metadata | Account creation date, last sign-in, and similar records needed to run and secure the accounts. |
| Server logs | IP address, timestamp, requested URL, response status, and user agent, kept for security, abuse prevention, and troubleshooting. |
| Content you create | Whatever you store in the applications (trip plans, notes, finance records, documents, and so on). |
| Google user data | Only if you connect a Google account to an application, and only the data described in section 5. |
3. How we use it
- Authenticate you and keep one sign-in working across the sites.
- Provide the features of the applications you use.
- Operate, secure, debug, and back up the services.
- Respond to you when you contact the operator.
Freed does not sell, rent, or trade personal data, does not use it for advertising, and does not build advertising profiles. There are no advertising, analytics, or tracking cookies on these sites.
4. Cookies
The sites set only first-party session cookies (sAccessToken and
sRefreshToken), scoped to .freed.kita-agents.dev, used solely to
keep you signed in. They are set when you sign in and removed or invalidated when you
sign out or your session expires. No third-party cookies are set.
5. Google user data
Some applications can connect to a Google account when you choose to do so (for example, to read and write Google Calendar events or to send and read email on your behalf). When that happens:
- Access is granted through Google OAuth, and only for the scopes the feature you enabled actually needs.
- The data is used only to provide that feature inside the application, for you.
- The data is not sold, not shared with third parties for advertising or marketing, not used to determine creditworthiness, and not used to train or improve artificial intelligence or machine learning models.
- No human reads your Google data, except where you have asked for help and given permission, where it is needed for security or to fix a bug, or where the law requires it.
- The operator's use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
- OAuth credentials are stored on the operator's server and are not shared.
You stay in control. You can revoke Freed's access to your Google account at any time at myaccount.google.com/permissions. You can also email oretareljod@gmail.com to ask what Google data is stored and to have it deleted.
6. Sharing
Personal data is not shared with third parties except in these cases:
- Infrastructure providers. The services run on a virtual private server provided by HostHatch, LLC (Los Angeles, California, United States), which stores the data on disk but does not use it for its own purposes. Domain name resolution is handled by a DNS provider.
- Google, only if you connected a Google account, and only to the extent needed to call the Google APIs you authorised.
- Legal obligations. Data may be disclosed if required by law, valid legal process, or to protect the rights and safety of the operator or others.
Freed does not sell personal data and does not transfer it to third parties for advertising, marketing, or resale.
7. Storage, location, and retention
- All application data is stored on the server described in section 6. If you are outside the United States, your data is transferred to and stored there.
- Account data is kept while your account exists, plus up to 30 days in encrypted backups after deletion.
- Server logs are kept for up to 90 days.
- Data you create in an application is kept until you delete it or your account is deleted.
8. Security
Traffic is encrypted with TLS, passwords are hashed, access to the server is restricted to the operator, and the services are reachable only behind the Freed single sign-on. No system is perfectly secure, so the services are offered without a guarantee of absolute security.
9. Your rights and choices
Email oretareljod@gmail.com to:
- ask what personal data is held about you and get a copy;
- correct data that is wrong;
- delete your account and the data in it;
- deny or withdraw consent, including disabling a Google connection.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you also have the right to object to processing and to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph). Requests are answered within 30 days.
10. Changes to this policy
This policy may be updated when the services change. The date at the top of the page is always the current version, and material changes will be announced on the sites.
11. Contact
Reljod T. Oreta, Taguig, Metro Manila, Philippines.
Email: oretareljod@gmail.com