Privacy Policy

Last updated: 3 November 2026

This privacy policy explains how NX Solutions UG (haftungsbeschränkt) ("NX Solutions", "we", "us") processes personal data on its website nx-solutions.de and in the applications it develops and operates:

  • Chronova — developer time and activity tracking, chronova.dev
  • Weekmind — AI-assisted weekly planner that plans tasks around your calendar, weekmind.app

NX Solutions is the developer of both applications and the controller for the data described here. Both use the same Google sign-in configuration, which Google's consent screen shows to you as "NX Solutions UG". This policy is the privacy policy for that Google OAuth application. It explains in particular which Google user data the applications access when you sign in with Google or connect a Google service, how that data is used, with whom it is shared, how it is protected, how long it is kept and how you can have it deleted.

1. Controller and contact

NX Solutions UG (haftungsbeschränkt)
Schadowstr. 49
40212 Düsseldorf
Germany

Managing director: Niklas Schäffer
E-mail: niklas@nx-solutions.de

For all privacy questions and requests (including deletion requests), write to niklas@nx-solutions.de. We have not appointed a data protection officer because we are not legally required to.

2. Google user data at a glance

Our applications only request the Google permissions (OAuth scopes) listed below, and only for the purpose stated. Optional permissions are requested separately, when you choose to connect the corresponding feature.

Application Google permission Data we access Why
Chronova openid, email, profile Name, e-mail address, whether the e-mail address is verified, profile picture, Google account ID Create your account and sign you in
Weekmind openid, email, profile Name, e-mail address, profile picture, Google account ID Create your account and sign you in
Weekmind (optional) calendar.calendarlist.readonly The list of your calendars (names, IDs, colours, time zone) Let you choose which calendars Weekmind plans around
Weekmind (optional) calendar.events Events in the calendars you select: title, start and end, description, location, attendees, status and availability (busy/free) Read your fixed appointments to plan around them; create, update and delete the planning blocks Weekmind itself places in your calendar
Weekmind (optional) tasks.readonly Your open Google Tasks from all lists: title, notes, link and due date Import your tasks so Weekmind can schedule them (read-only)

We do not request access to Gmail, Google Drive, Google Contacts or any other Google service.

3. Limited Use of Google user data

The use and transfer of information received from Google APIs by the applications of NX Solutions UG (Chronova and Weekmind) to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We use Google user data only to provide and improve the user-facing features of the application you are using, as described in this policy.
  • We do not use or transfer Google user data for serving advertisements, including personalised or interest-based advertising.
  • We never sell Google user data, and we do not transfer it to data brokers or other information resellers.
  • We do not use Google user data to determine credit-worthiness or for lending purposes.
  • We do not use Google user data, and do not transfer it to anyone, to develop, improve or train generalised or non-personalised artificial intelligence (AI) or machine learning (ML) models.
  • We transfer Google user data to third parties only where this is necessary to provide a feature you use, to comply with applicable law, or as part of a merger or acquisition with your prior notice, and only as described in section 7.
  • No person at NX Solutions reads your Google user data unless you have given explicit consent for specific data (for example, to answer a support request), it is necessary for security purposes (for example, investigating abuse), it is required by law, or the data has been aggregated and anonymised for internal operations.

4. Chronova

Sign-in with Google

You can create a Chronova account and sign in with your Google account. Chronova requests only the openid, email and profile scopes. Google then provides us with your name, e-mail address, whether that address is verified, your profile picture and your Google account ID. We use this data solely to create your account, recognise you when you sign in, show your name and picture in the app and contact you about your account (for example, security notices). We do not access any other Google data.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). Sign-in is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google's privacy policy also applies: policies.google.com/privacy.

Other data in Chronova

Chronova processes the coding activity (heartbeats) that your editor plugins, the CLI or the API send to it, technical and API usage logs, and, if you connect them, data from GitHub. Payments are handled by Stripe. If you consent to analytics cookies in Chronova's cookie banner, Chronova uses Google Analytics for anonymised usage statistics; without that consent, no analytics cookies are set. Google Analytics never receives the Google account data from sign-in. The details for these categories are described in Chronova's own privacy policy at chronova.dev/privacy.

5. Weekmind

Sign-in with Google

You sign in to Weekmind with your Google account (openid, email, profile). Google provides your name, e-mail address, profile picture and Google account ID. For each session we also store the IP address, user agent and creation and expiry time so you can keep your sessions secure. Legal basis: Art. 6(1)(b) GDPR.

Google Calendar (optional)

When you connect a Google Calendar, Weekmind asks for two permissions:

  • Reading your calendar list, so you can choose which calendars Weekmind takes into account.
  • Reading and writing events. From the calendars you select, we store events with title, start and end, description, location, attendees, status and availability. We need them to know when you are busy and to plan your tasks around those appointments. Weekmind creates, updates and deletes the planning blocks it places for your tasks, routines and focus time. If you turn this on for a calendar, Weekmind also adds neutral "busy" events without any details to your other connected calendars. Weekmind never moves or deletes events that you created yourself.

When you disconnect a calendar or delete your account, we remove the events Weekmind created, revoke access at Google and delete the stored calendar data.

Google Tasks (optional)

If you connect Google Tasks, Weekmind requests a separate, read-only permission (tasks.readonly) and reads your open tasks from all lists with title, notes, link and due date, so they can be scheduled. Weekmind never changes anything in Google Tasks.

AI planning assistant (optional)

Weekmind's plan itself is computed by an optimisation solver on our own servers. When you use the optional AI assistant, or let it suggest the duration and deadline of a task, we send the data needed to answer your request to a large language model: your message and the conversation so far, your name and time zone, and, depending on the question, your tasks, routines, plan and calendar events (such as titles, times, descriptions, locations and attendees) and imported Google Tasks. The assistant only fetches this data when your question needs it, and only your own.

  • Default provider: unless you configure your own provider, Weekmind uses Ollama Cloud, operated by Ollama, Inc. (USA). The data is sent only to generate the answer to your request.
  • Your own provider (bring your own key): if you add your own provider (for example Anthropic, Google Gemini or an OpenAI-compatible endpoint) and API key in the settings, the data goes to the provider you chose, under the terms you agreed with them. We store your key encrypted and use it only for your requests.

Google user data sent to a language model is used only to provide the assistant feature you requested. We do not use it, and do not permit it to be used, to develop, improve or train generalised AI or ML models. We store your conversations so you can continue them and undo changes. The AI features are optional; Weekmind plans without them. Legal basis: Art. 6(1)(b) GDPR.

Other Weekmind data and integrations

Weekmind stores the tasks, routines and settings you create, the computed plans and a change log so changes can be traced and undone. You can optionally connect Jira (Atlassian), GitHub, Todoist and Slack; Weekmind then reads the items assigned to you there (for Slack, only messages you explicitly save to Weekmind) and stores the access tokens encrypted. Weekmind shows a profile picture from Gravatar if you have one: our server, not your browser, requests it using a SHA-256 hash of your e-mail address. If you use the REST API or MCP server, API keys are stored only as a hash.

6. This website (nx-solutions.de)

Hosting and connection data

The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. To deliver the pages, the server necessarily processes your IP address, the requested address, date and time, and your browser's user agent. We use this only to deliver the website securely and keep it only as long as needed for that purpose (legitimate interest, Art. 6(1)(f) GDPR).

Contact form

If you use the contact form, we receive your name, e-mail address, subject and message by e-mail. We use them only to answer your inquiry (Art. 6(1)(b) or (f) GDPR) and delete them once your inquiry is resolved, unless statutory retention periods apply.

Fonts

The website loads the "Inter" font from Google Fonts (Google Ireland Limited). Your browser connects to Google's servers to do so, which transmits your IP address to Google. We use this to display the website consistently (Art. 6(1)(f) GDPR).

Browser storage

The website sets no cookies and uses no analytics or tracking. It only stores your chosen colour theme and language in your browser's local storage, so the page appears the way you set it next time. This is strictly necessary for a function you requested (§ 25(2) no. 2 TDDDG).

7. Who we share data with

We do not sell personal data and never share it for advertising. Personal data, including Google user data, is only received by:

  • Hetzner Online GmbH (Germany), which hosts our servers and databases as our processor under a data processing agreement (Art. 28 GDPR);
  • the language model provider (Ollama Cloud by default, or the provider you configured yourself), only when you use Weekmind's AI features, as described in section 5;
  • Google, when you sign in with Google or Weekmind writes planning blocks to your Google Calendar on your behalf;
  • Stripe, Inc., for payments in Chronova, and Google Analytics, for Chronova usage statistics, only with your consent (neither receives Google account data);
  • Atlassian, GitHub, Doist (Todoist), Slack and Automattic (Gravatar), only to the extent you connect them yourself or use the feature concerned;
  • our e-mail service provider, to send account and service e-mails;
  • authorities, only where we are legally obliged to disclose data.

8. Transfers outside the EU

We store your data on our own servers in Germany. Data only leaves the EU and EEA when you use services based elsewhere, such as Google, the language model provider, Stripe, GitHub, Atlassian, Doist, Slack or Gravatar. Such transfers rely on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework, where the recipient is certified) or on standard contractual clauses under Art. 46 GDPR.

9. How we protect your data

  • All connections to our websites, apps and APIs are encrypted with TLS (HTTPS).
  • OAuth access and refresh tokens for Google and other connected services, as well as your own AI provider keys, are stored encrypted. API keys are stored only as a hash.
  • Chronova's databases are encrypted at rest.
  • Access to servers and production data is restricted to a small number of authorised people, following the least-privilege principle.

10. Retention and deletion

We keep your data for as long as you have an account and delete it when you delete your account or ask us to. In detail:

  • Google sign-in data (name, e-mail, picture, Google ID) is kept while your account exists and deleted together with your account.
  • Weekmind calendar and Google Tasks data is deleted as soon as you disconnect the connection. When you delete your Weekmind account in the settings, we immediately end all sessions and block API and agent access, then remove the calendar events Weekmind created, revoke access at Google and delete all your data, usually within a few minutes and at the latest after three days.
  • Chronova account data is kept while your account exists. When you delete your account, it enters a 30-day recovery period and is then permanently deleted; backups are purged within 30 days. Accounts inactive for more than 24 months may be deleted after warning e-mails 30 and 7 days in advance.
  • Data we must keep for statutory reasons (for example, invoices) is blocked from any other use until the retention period ends.

How to delete your data or revoke access

  • Delete your account in the settings of Chronova or Weekmind, or
  • send an e-mail to niklas@nx-solutions.de from the address of your account. We delete your data within 30 days of your request and confirm it to you.
  • You can revoke the access of "NX Solutions UG" (Chronova, Weekmind) to your Google account at any time at myaccount.google.com/permissions. Revoking access stops all further access; data already stored is deleted when you disconnect or delete your account, or on request.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future. Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. An e-mail to niklas@nx-solutions.de is enough.

You can also lodge a complaint with a data protection authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

12. Changes to this policy

We update this policy when we add features, when our use of Google user data changes or when the law changes. The current version is always available at this address. We will inform you in the affected application before a material change to how we use your Google user data takes effect.