Privacy Policy

Kai by KAUFAST — Last updated: March 2026

Our Commitment: Kai is built on a single principle: your data belongs to you. We designed Kai so that your personal information stays on your device, under your control. No cloud accounts. No data harvesting. No ads.

1. What Data Kai Collects

Kai stores the following data locally on your device:

Conversations — Your chat history with Kai
Tasks, reminders, notes, and meetings — Your productivity data
Projects and brainstorm boards — Your workspaces and ideas
Vault entries — Personal memory and preferences
Files and documents — Any files you upload to Kai

Kai does NOT collect: your name, email, phone number, address, hardware identifiers, device fingerprints, location data, IP addresses, browsing history, analytics, telemetry, usage statistics, or clipboard contents.

2. Where Your Data Lives

All data is stored in an encrypted database on your device. There is no KAUFAST server that stores, processes, or has access to your data. You are the sole custodian.

3. What Leaves Your Device

AI Processing

Kai uses a multi-engine AI architecture for your privacy:

Sensitive queries — Health, financial, legal, identity, or credential topics are processed entirely on-device using Kai's local AI engine. These never leave your network.
General queries — Non-sensitive conversations may be processed by cloud AI providers for faster responses.
PII scrubbing — Before any query goes to the cloud, Kai strips email addresses, phone numbers, national IDs, credit card numbers, and IBANs.

Provider	Location	Data Retention	Trains on Your Data
Groq	United States	Not stored	No
Mistral AI	France (EU)	Not stored	No
Ollama (local)	Your device	Local only	N/A

You can force local-only mode (all queries stay on-device) or enable full air-gap mode (disables all external connections) in Settings.

Connected Services (Optional)

Email — OAuth2 connection to Gmail. Kai reads and displays emails but does not store content long-term.
Calendar — Reads calendar events for scheduling assistance. Data fetched on demand.

4. What KAUFAST Sees

Nothing. There is no telemetry, no analytics, no crash reporting, no remote access. We cannot read your messages, see your tasks, or access your files.

5. Third-Party Services

No data is sold, rented, or shared with advertisers, data brokers, or any other third party.

If you use Groq (US-based), your query text (with PII removed) is transferred to the US for processing. You can avoid this by selecting Mistral (EU) or local-only mode.

6. Security

AES-256 encrypted database at rest (SQLCipher)
AES-256-CBC encrypted vault backups with scrypt key derivation
Automatic PII scrubbing before cloud processing
PIN authentication with brute-force protection
HTTPS encryption, strict CORS, rate limiting, CSP headers
Sensitive data auto-routed to local AI
Local-only and air-gap privacy modes
No external scripts or third-party JavaScript

7. Data Retention & Deletion

Your data stays until you delete it. No automatic expiration. You can:

Ghost mode — Ephemeral conversations deleted when closed
Nuclear delete — Delete a message and everything after it
Full export — Download all your data as JSON
Factory reset — Completely wipe all data and start fresh

For detailed deletion instructions, see Delete Your Data.

8. Children's Privacy

Kai is not directed at children under 16. We do not knowingly collect data from minors.

9. Changes

We may update this policy as Kai evolves. Changes will be noted in the Changelog within the app.

10. Contact

For privacy questions: heykai@kaufast.com