Draft — not yet in force. The company details on this page are placeholders and it has not been reviewed by a lawyer. Do not publish.
Privacy
Most privacy policies are written to protect the company. This one is written to tell you exactly where your data is, because for KimtOS the honest answer is short.
The short version. Everything you create in KimtOS — your notes, tasks, PDFs, clipboard, recordings, whiteboards and AI chats — is stored in your own browser and is never sent to us. We could not read it if we wanted to. If you create an account, we hold your name, email and which plan you are on. That is the whole relationship.
What stays on your device
All of your app content lives in your browser's own storage (IndexedDB), on the machine you are sitting at. It is never uploaded to us. That covers:
- Notes, tasks, and PDF Library documents and annotations
- Clipboard history, saved files, whiteboards and screen or camera recordings
- Everything you type into the AI apps — chats, transcriptions, OCR'd images, denoised audio and grammar checks
- Your wallpapers, settings and which apps you have installed
The AI models run inside your browser tab using WebAssembly and WebGPU. Your audio, images and text are processed on your own hardware. There is no server to send them to, so there is nothing for us to leak, sell, or be compelled to hand over.
You can inspect, export or delete all of it yourself at any time, from the AnubisDB app or Settings, without asking us.
What we hold, if you create an account
An account is optional and only needed to unlock the Pro apps. If you make one, our database holds exactly this and nothing more:
| What | Why |
|---|---|
| Your name and email address | To identify your account and email you about it |
| A hash of your password, or your Google/GitHub account id if you signed in that way | To let you sign back in. We never store your actual password. |
| Your plan and subscription status, plus your Stripe customer id | To know whether the Pro apps are unlocked |
| Sign-in session tokens (hashed), and the browser they were issued to | To keep you signed in and let you sign out everywhere |
| Support messages, if you contact us | To answer you |
We run no product analytics. We do not track which apps you open, what you do in them, or how long you spend. There is no tracking pixel, no session recording, and no advertising network anywhere in KimtOS.
When KimtOS talks to the network
A local-first app is not an offline app, and we would rather list every exception than imply there are none. KimtOS makes a network request in these cases, and only these:
- Your account and billing — when you sign in, or manage your subscription. This sees your account and plan, never your content.
- Downloading an AI model — the first time you use an on-device AI app, its model file is downloaded once and then cached; after that the app works offline. Most come from Hugging Face; Denoise's come from our own cdn.kimtos.com. The download sees only which file you asked for.
- An OCR language other than English — SnapText has English built in and needs no download. If you set any other language, that language's data file is fetched once from the Tesseract project's CDN (jsDelivr) and then cached. Your image is never sent anywhere — only the name of the language pack.
- The weather and trending-article cards — if you have them enabled on your home screen, they fetch from Open-Meteo and from public developer feeds (DEV, Hacker News, Lobsters).
- The search bar — typing a search on the new-tab page sends that query to whichever search engine you have chosen, exactly as a normal search box would.
- Importing a PDF by URL — fetches the file from the address you gave it.
Who else sees anything
We use as few third parties as we can. These are all of them:
| Who | What for | What they see |
|---|---|---|
| Stripe | Payments and subscriptions | Your email and payment details. We never see or store your card number. |
| Resend | Transactional email | Your email address, to send you verification and password-reset messages. |
| Hugging Face | Hosting most of the on-device AI model files | Your IP address when a model is downloaded, like any file download. |
| jsDelivr (Tesseract language packs) | Hosting OCR language data for SnapText, for languages other than English | Your IP address, and which language pack you asked for, on the one download. Never your image. |
Our own database runs on servers we control. We do not sell your data, and we do not share it with advertisers or data brokers — there is no version of KimtOS where that makes sense, because we do not have your data in the first place.
Your rights over your data
Your app content is already yours — it is on your machine, and you can export or erase it yourself without involving us. For the account data we hold, you can ask us to show it to you, correct it, or delete it entirely. Deleting your account removes your record from our database; your app content is untouched, because we never had it.
Email support@kimtos.com and we will action it. If you are in the EU or UK, these are your rights under the GDPR, and you may also complain to your national data-protection authority.
How long we keep things
Account records are kept while your account exists, and removed when you delete it. Sign-in tokens expire on their own. Payment records are retained by Stripe for as long as tax and accounting law requires, which is out of our hands.
Support conversations. If you have an account, your conversation is kept with it, so we can pick up where we left off — and it goes when your account goes. If you wrote to us without an account, the link that lets you reopen that conversation expires after 30 days. We delete the conversation, and the email address you gave us with it, on the same 30-day clock: once you can no longer read it, we have no business keeping it.
Children
KimtOS is not directed at children under 13, and we do not knowingly create accounts for them.
Changes
If we change this policy we will update the date at the top of this page. If a change ever meant your content started leaving your device, we would tell you plainly and ask first — that promise is the product.