Privacy Policy

We collect the minimum data needed to run kehdo. Your email if you join the waitlist. Your screenshots if you use the app — auto-deleted after 30 days. We don’t train AI on your data, we don’t sell your data, and we don’t share it with advertisers. You can ask for deletion at any time and we’ll comply within 30 days.

• Waitlist email — stored in a Google Sheet that only the founders can access. We email you from this list when the app is ready to install.
• Screenshots (post-launch) — uploaded so we can extract text and generate replies. Stored on AWS S3, encrypted at rest, auto-deleted 30 days after upload.
• Account data (post-launch) — email, password hash (BCrypt cost 12), and your subscription tier. Required to bill and to enforce free-tier daily limits.
• Usage analytics — anonymous page views via Vercel Web Analytics (no cookies, no fingerprinting, IP addresses are hashed and never logged). Used to understand which features matter.

• We don’t train any AI model on your screenshots, your conversations, or your generated replies. Our LLM provider (Google Vertex AI) is contractually opted out of training on our data.
• We don’t sell your data to advertisers, data brokers, or anyone else.
• We don’t use cookies for tracking. The site is fully functional with cookies disabled.
• We don’t fingerprint your device or log your IP address.

• Google Workspace — waitlist emails are stored in a Google Sheet accessible only to the founders. Subject to Google’s privacy and security policies.
• Vercel Web Analytics — anonymous page-level analytics. No cookies, no third-party tracking, IP addresses are hashed.
• Vercel — hosting for kehdo.app and staging.kehdo.app.
• AWS (post-launch) — backend infrastructure and S3 for screenshots.
• Google Vertex AI (post-launch) — LLM provider for reply generation. Contractually opted out of training on our data.
• Google Cloud Vision (post-launch) — OCR for cloud-mode screenshot text extraction. Not used in on-device mode.

• Access — request a copy of all data we hold about you.
• Deletion — request that we delete your account and all associated data.
• Correction — request that we correct inaccurate data.
• Portability — request your data in a structured, machine-readable format.
• Withdrawal of consent — unsubscribe from the waitlist or delete your account at any time.

To exercise any of these, email privacy@kehdo.app. We’ll respond within 30 days.

kehdo is not directed to children under 13 (or under 16 in the EU). We don’t knowingly collect data from children. If you believe a child has signed up, email us at privacy@kehdo.app and we’ll delete the account.

If we change this policy materially, we’ll notify users via email at least 30 days before the change takes effect. Older versions are available on request.

kehdo is operated by an Indian sole proprietorship pre-incorporation; company entity TBD before public launch. For privacy questions: privacy@kehdo.app.