Privacy policy
Effective
Kivali is AI agent software that you run on your own computer or infrastructure. This policy explains the small amount of data that reaches us (“Kivali,” “we,” “us”) and what we do with it.
What we never receive. Your Kivali instance keeps everything on your own machine or infrastructure: your agents’ conversations, files, prompts, outputs, settings, and AI credentials. None of it is sent to us. Kivali sends us no telemetry, analytics, or crash reports.
Google sign-in. Kivali can let you sign in with Google through a sign-in service we operate. When you sign in through it, Google sends it your name, email address, and profile picture, which it passes on to your Kivali instance to sign you in; it does not keep your name or profile picture. For each sign-in it logs your email address, whether Google has verified that address, your Google Workspace domain if you have one, the address of the Kivali instance you signed in to, your IP address, and whether the sign-in succeeded. We use these logs to run the service and keep it secure, including seeing who signs in through it and investigating abuse. They are deleted after 3 days.
Kivali’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to sign you in and to run and secure the sign-in service as described above, and is never sold or used for advertising or AI training. You can revoke access at any time from your Google Account permissions.
Update checks. The Kivali desktop app checks for new versions once a day by fetching a public file from GitHub Pages. This request goes to GitHub, not to us. GitHub handles it under the GitHub Privacy Statement.
Website. Our website is hosted on Cloudflare and uses no analytics or tracking cookies. Cloudflare processes requests to the site and the sign-in service under the Cloudflare Privacy Policy.
Email. If you contact us, we use your message and email address only to reply to you.
Sharing. We do not sell or share personal data, except with Cloudflare as described above or when required by law.
Your rights and children. You can ask us to access or delete any data we hold about you by emailing us. For data in a Kivali instance, contact whoever runs that instance; we cannot access it. Kivali is not directed to children under 13.
Changes. If we update this policy, we will post the new version here with a new effective date.