Privacy Policy

Last Updated: August 19, 2026

1. Introduction

This Privacy Policy explains how Kiwyi ("we", "our", or "us") collects, uses, stores, and protects your information when you use Apex, our AI-powered chatbot mobile application ("the App").

By using Apex, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Information You Provide

When you create an account, we collect:

Name
Email address
Whether you want news and articles by email (optional, and off unless you ask)

You may also voluntarily provide:

Messages sent to the AI
Uploaded images
Feedback
Support requests

Guest Mode

You may use Apex without creating an account.

In Guest Mode we may store:

Conversations
Session information
Temporary identifiers required to provide the service

Guest conversations are automatically deleted after 90 days of inactivity.

Location Information

If you grant location permission, the App may collect your current approximate or precise location (depending on your device settings).

Your location is sent to the AI model to improve the relevance and quality of responses.

Location access is completely optional and can be disabled at any time in your device settings.

Camera and Photo Library

If you grant permission, Apex may access:

Your camera
Your photo library

These permissions are used solely to allow you to send images to the AI. Images are processed only when you choose to upload them.

Conversation Data

When using Apex, we process:

Your prompts
AI responses
Images you submit
Optional location context
Conversation metadata necessary to operate the service

Conversation history may be stored so that you can access previous chats and continue conversations. You may delete individual conversations at any time from within the App.

Automatically Collected Information

We may automatically collect technical information including:

Device model
Operating system version
App version
Language
Time zone
Crash reports
Diagnostic information
Anonymous usage statistics

This information helps us improve the reliability and performance of Apex.

3. Analytics

We use analytics services to understand how Apex is used and to improve the App. These services include:

Firebase Analytics
Google Analytics

Analytics information may include:

App launches
Feature usage
Session duration
Device information
General geographic region
Crash diagnostics

Analytics data is generally aggregated or pseudonymized where possible.

4. How We Use Your Information

We use your information to:

Create and manage your account
Provide AI chatbot functionality
Generate AI responses
Improve response quality using optional location context
Synchronize your conversations
Respond to support requests
Improve the App
Monitor reliability and performance
Detect abuse and fraud
Comply with legal obligations
Send you news and articles, if you asked for them

Email Communications

Some emails are part of running your account and are always sent: confirming your email address, resetting your password, and replies to support requests. These are not marketing, and they cannot be switched off while your account is open.

News and articles about Kiwyi are separate, and only sent if you ask for them. You can ask when you create your account, or at any time under Emails in your Kiwyi account. You can stop them just as easily — from the same place, or from the unsubscribe link at the foot of every one of those emails. We record when you turned them on or off, as the record of your choice.

We do not sell your email address, and we do not send you marketing on behalf of anyone else.

5. Artificial Intelligence Processing

Apex does not run AI models itself. To answer you, it sends what you write to a third-party AI service, and you are asked to agree to that inside the App before your first message is sent. The disclosure you agree to stays available at any time under Settings → Data & Privacy → How Apex uses AI, and this section says the same thing in full.

What is sent

The text of your messages.
Images you attach to a message.
Voice notes you record, so they can be transcribed into text.
Your approximate location, but only if you have turned location on. It is off until you do.
The words of a web search, when answering your question requires one.

Who it is sent to

Cloudflare, Inc. (Workers AI) runs every AI model Apex uses: the models that write replies, the model that generates images, and the model that transcribes voice notes. Cloudflare's published Workers AI data policy states that it does not use what is sent to train AI models, does not make it available to its other customers, and does not store it unless the developer uses a separate Cloudflare storage product for that purpose.
Brave Software, Inc. (Brave Search) receives the search terms when a reply requires a web search. Nothing that identifies you is sent with them.

What is not sent

Your name, email address and password are never sent to the AI service. Your data is not sold, and it is not shared with advertisers or data brokers.

Your choice

Agreeing to this sharing is what lets Apex answer you, because generating a reply is not possible without sending your message to the model. If you would rather not share it, do not agree — and you can stop at any time by deleting the App or your account.

Only the information necessary to provide the requested AI functionality is shared. We recommend that you do not submit confidential, sensitive, or highly personal information — yours or anyone else's — in a conversation.

6. Third-Party Services

Apex relies on third-party providers to operate. These are the ones that may process your information, and what each is for:

Cloudflare, Inc. — cloud hosting, the database behind your account and conversations, and all AI processing (see section 5).
Brave Software, Inc. — web search results, when a reply needs them (see section 5).
Apple Inc. — Sign in with Apple, subscription purchases, and push notifications, for the users who use those features.
Google LLC (Firebase) — analytics and crash reporting, as described in sections 3 and 4.

Each of these processes data under its own privacy policy and applicable legal obligations. We only engage providers that are bound, by contract or by their published terms, to protections equivalent to those described in this policy, and to process your information solely to provide the service to us rather than for their own purposes.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under one or more of the following legal bases:

Performance of a contract (providing the App)
Your consent (the AI data-sharing disclosure described in section 5, location or camera permissions, and news and articles by email)
Compliance with legal obligations
Our legitimate interests in improving, securing, and operating the App

8. Data Retention

We retain information only for as long as necessary. Typical retention periods include:

Account information: while your account remains active.
Conversations: until you delete them or delete your account.
Guest conversations: deleted after 90 days of inactivity.
Analytics information: retained according to the policies of our analytics providers.
Support requests: retained as reasonably necessary to resolve your inquiry.

Certain information may be retained longer where required by law or to protect our legal rights.

9. Deleting Your Data

Within the App you may:

Delete individual conversations.
Delete your account.

Deleting your account permanently removes your personal information and associated conversations, except where retention is required by law or necessary for fraud prevention, security, or dispute resolution.

10. Your Privacy Rights

Depending on your location, you may have the right to:

Access your personal information.
Correct inaccurate information.
Delete your information.
Restrict certain processing.
Object to processing.
Withdraw consent.
Request a copy of your personal data where applicable.

To exercise these rights, contact us using the information below.

11. International Data Transfers

Some of our service providers may process data outside your country of residence. Where required by applicable law, we use appropriate safeguards to protect your personal information during international transfers.

12. Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

Apex is not intended for children under the minimum age required by applicable law. We do not knowingly collect personal information from children in violation of applicable law.

If we become aware that such information has been collected, we will take reasonable steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last Updated" date at the top of this document.

Material changes may also be communicated through the App where appropriate.

15. Contact Us

If you have any questions regarding this Privacy Policy or your personal information, you may contact us: