Privacy Policy

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device's Internet Protocol (IP) address
• The pages and features of the Application you visit, and the time and date of your visit
• The operating system you use on your mobile device

The Application does not gather precise information about the location of your mobile device.

Account Information

If you choose to create an account, the Application collects:

• Email address and username (when registering with email and password)
• Profile information provided by Google or Apple when you sign in using those authentication services
• Profile avatar images you upload or generate within the Application

Account data is stored securely in the Service Provider's database, managed by Supabase (supabase.com). You may use the Application without creating an account; anonymous usage is tracked by a one-way hashed (HMAC-SHA256) representation of your IP address solely for the purpose of enforcing daily usage limits. Your raw IP address is never stored.

Chat Messages and AI Processing

The Application is an AI assistant. Messages you send are processed by third-party large language model (LLM) providers in order to generate responses. Specifically:

• Your chat messages are transmitted to OpenRouter (openrouter.ai), which routes them to the appropriate AI model (e.g. Mistral, DeepSeek, Qwen). Please refer to OpenRouter's privacy policy for details on how they handle data.
• Chat history is stored locally on your device in encrypted form (AES-256-CTR) and is not uploaded to the Service Provider's servers.

Image Generation

If you use image or avatar generation features, the text prompts you provide are transmitted to Replicate (replicate.com) to generate images. Please refer to Replicate's privacy policy for details on how they handle prompt data.

Memories

If you use the Memories feature, the memory entries you create are stored in the Service Provider's database (Supabase) and associated with your account. You may view, edit, or delete your memories at any time within the Application.

Usage Data

The Application tracks the number of tokens (a measure of AI usage) consumed per request, per day. This data is stored in the Service Provider's database and is used solely to enforce daily usage limits (Kiwi Credits). It is not used for advertising or sold to third parties.

Third Party Access

The Application uses the following third-party services, each of which may have access to certain data as described:

• Supabase — database, authentication, and file storage provider. Stores account details, memories, usage data, and avatar images.
• OpenRouter — AI inference provider. Receives your chat messages to generate AI responses.
• Replicate — image generation provider. Receives text prompts when you use image or avatar generation features.
• Google / Apple — optional sign-in providers. Used only if you choose to sign in with Google or Apple.

The Service Provider may also disclose information:

• As required by law, such as to comply with a subpoena or similar legal process
• When necessary in good faith to protect the rights, safety, or security of the Service Provider, users, or the public, or to investigate fraud
• With trusted service providers who work on the Service Provider's behalf, have no independent use of the disclosed information, and have agreed to adhere to this privacy policy

Opt-Out Rights

You can stop all collection of information by the Application by uninstalling it. You may use the standard uninstall processes available as part of your mobile device or via the mobile application marketplace. If you have an account, you may also contact the Service Provider to request deletion of your account and associated data.

Data Retention Policy

The Service Provider will retain user account data, memories, and usage records for as long as you use the Application and for a reasonable time thereafter. Chat history is stored only on your device and is cleared when you uninstall the Application or clear app data. If you would like your account or server-side data deleted, please contact the Service Provider at kld.dev@protonmail.com and they will respond in a reasonable time.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Service Provider does not knowingly collect personally identifiable information from children and encourages all children to never submit any personally identifiable information through the Application. Parents and legal guardians are encouraged to monitor their children's internet usage and to instruct their children never to provide personally identifiable information without their permission.

If you have reason to believe that a child has provided personally identifiable information to the Service Provider, please contact them at kld.dev@protonmail.com so they can take the necessary actions.

You must be at least 16 years of age to consent to the processing of your personally identifiable information (in some countries a parent or guardian may do so on your behalf).

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. Measures in place include: AES-256-CTR encryption for local chat history, HMAC-SHA256 hashing of IP addresses (so the raw IP is never persisted), HTTPS for all network communication, row-level security policies in the database ensuring users can only access their own data, and platform-native secure storage (iOS Keychain / Android EncryptedSharedPreferences) for encryption keys.

Changes

This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by updating this page. You are advised to review this Privacy Policy regularly, as continued use of the Application constitutes acceptance of any changes.

Your Consent

By using the Application, you consent to the processing of your information as set forth in this Privacy Policy, now and as amended by the Service Provider.