Privacy Policy

Last Updated: August 21, 2026

1. Introduction

This Privacy Policy explains how Kiwyi ("we", "our", or "us") collects, uses, stores, and protects your information when you use Apex, our AI-powered chatbot mobile application ("the App").

By using Apex, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Information You Provide

When you create an account, we collect:

Name
Email address
A profile picture, if you choose to set one
Whether you want news and articles by email (optional, and off unless you ask)

You may also voluntarily provide:

Messages sent to the AI
Uploaded images
Voice notes you record
Facts Apex remembers about you, if you have Memory switched on
Feedback
Support requests

Guest Mode

You may use Apex without creating an account.

In Guest Mode we may store:

Conversations
Session information
Temporary identifiers required to provide the service

Guest conversations are automatically deleted after 90 days of inactivity.

Location Information

If you grant location permission, the App may collect your current approximate or precise location (depending on your device settings).

Your location is sent to the AI model to improve the relevance and quality of responses.

Location access is completely optional and can be disabled at any time in your device settings.

Camera and Photo Library

If you grant permission, Apex may access:

Your camera
Your photo library

These permissions are used solely to allow you to send images to the AI. Images are processed only when you choose to upload them.

Microphone and Voice Notes

If you grant microphone permission, Apex can record a voice note to send in a chat instead of typing.

The recording is sent to the AI service described in section 5, which transcribes it into text so it can be answered. The transcript is kept with the message in your conversation history. Microphone access is optional and can be revoked at any time in your device settings; without it you can still use Apex by typing.

Conversation Data

When using Apex, we process:

Your prompts
AI responses
Images you submit
Images the AI generates for you
Voice notes you record, and their transcripts
Facts Apex remembers about you, if Memory is switched on
Optional location context
Conversation metadata necessary to operate the service

Conversation history may be stored so that you can access previous chats and continue conversations. You may delete individual conversations at any time from within the App.

Automatically Collected Information

We may automatically collect technical information including:

Device model
Operating system version
App version
Language
Time zone
Crash reports
Diagnostic information

If you allow notifications, we also store the notification token your device issues, so we can tell you when a long-running answer or image is ready. Guest devices receive a token on the same basis. Turning notifications off in your device settings stops them.

This information helps us operate Apex and improve its reliability and performance.

3. Crash Reporting

Apex includes Firebase Crashlytics, which reports crashes so we can fix them. A crash report may include:

The type of crash and where in the app it happened
Device model and operating system version
App version
An installation identifier generated by Crashlytics

Apex does not include an analytics SDK. We do not measure feature usage, session duration or screen views, we do not use advertising identifiers, and we do not track you across other apps or websites. Nothing in Apex is used for advertising or sold to anyone.

4. How We Use Your Information

We use your information to:

Create and manage your account
Provide AI chatbot functionality
Generate AI responses
Improve response quality using optional location context
Synchronize your conversations
Respond to support requests
Send you a notification when an answer or image you asked for is ready, if you allow notifications
Diagnose and fix crashes
Monitor reliability and performance
Detect abuse and fraud
Comply with legal obligations
Send you news and articles, if you asked for them

Email Communications

Some emails are part of running your account and are always sent: confirming your email address, resetting your password, and replies to support requests. These are not marketing, and they cannot be switched off while your account is open.

News and articles about Kiwyi are separate, and only sent if you ask for them. You can ask when you create your account, or at any time under Emails in your Kiwyi account. You can stop them just as easily — from the same place, or from the unsubscribe link at the foot of every one of those emails. We record when you turned them on or off, as the record of your choice.

We do not sell your email address, and we do not send you marketing on behalf of anyone else.

5. Artificial Intelligence Processing

Apex does not run AI models itself. To answer you, it sends what you write to a third-party AI service, and you are asked to agree to that inside the App before your first message is sent. The disclosure you agree to stays available at any time under Settings → Data & Privacy → How Apex uses AI, and this section says the same thing in full.

What is sent

The text of your messages, together with the earlier messages in the same conversation, so a reply makes sense in context.
Your name, if you have an account. It is included in the instructions given to the model so it can address you by name. Your email address and password are not.
Images you attach to a message, whether picked from your photo library or taken with the camera.
Voice notes you record, as audio, so they can be transcribed into text and answered.
Your approximate location, but only while you have location switched on. It is off until you turn it on.
What Apex remembers about you, if you have Memory switched on: facts you have told Apex about yourself in earlier conversations, which may include things like where you live, your job, your family situation, and your preferences. You can read, delete, or switch off Memory in Settings.
The words of a web search, when answering your question requires one.

Who it is sent to

Cloudflare, Inc. (Workers AI) runs every AI model Apex uses: the models that write replies, the model that generates images, and the model that transcribes voice notes. Cloudflare's published Workers AI data policy states that it does not use what is sent to train AI models, does not make it available to its other customers, and does not store it unless the developer uses a separate Cloudflare storage product for that purpose. Cloudflare acts as our processor, on our instructions, under a data-processing agreement.
Brave Software, Inc. (Brave Search) receives the search terms when a reply requires a web search. Nothing that identifies you is sent with them.

Your conversations are not sent to OpenAI, Anthropic, Google, or any other AI company for that company's own purposes. Each provider above is engaged under terms that oblige it to protect your information to a standard equivalent to this policy, and to process it only to provide the service to us.

What is not sent

Your email address, your password and your payment details are never sent to the AI service. Your data is not sold, and it is not shared with advertisers or data brokers.

Your choice

Agreeing to this sharing is what lets Apex answer you, because generating a reply is not possible without sending your message to the model. If you would rather not share it, do not agree — nothing is sent, and you can still use the rest of the App or delete your account.

Only the information necessary to provide the requested AI functionality is shared. We recommend that you do not submit confidential, sensitive, or highly personal information — yours or anyone else's — in a conversation.

6. Third-Party Services

Apex relies on third-party providers to operate. These are the ones that may process your information, and what each is for:

Cloudflare, Inc. — cloud hosting, the database behind your account and conversations, and all AI processing (see section 5).
Brave Software, Inc. — web search results, when a reply needs them (see section 5).
Apple Inc. — Sign in with Apple, subscription purchases, and push notifications, for the users who use those features.
Google LLC (Firebase Crashlytics) — crash reporting only, as described in section 3. No analytics or advertising product is used.

Each of these processes data under its own privacy policy and applicable legal obligations. We only engage providers that are bound, by contract or by their published terms, to protections equivalent to those described in this policy, and to process your information solely to provide the service to us rather than for their own purposes.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under one or more of the following legal bases:

Performance of a contract (providing the App)
Your consent (the AI data-sharing disclosure described in section 5; the camera, photo library, microphone, location and notification permissions; and news and articles by email)
Compliance with legal obligations
Our legitimate interests in improving, securing, and operating the App

8. Data Retention

We retain information only for as long as necessary. Typical retention periods include:

Account information: while your account remains active.
Conversations: until you delete them or delete your account.
Guest conversations: deleted after 90 days of inactivity.
Crash reports: retained according to Firebase Crashlytics' own retention periods.
Notification tokens: until you turn notifications off, the token is replaced by your device, or your account is deleted.
Support requests: retained as reasonably necessary to resolve your inquiry.

Certain information may be retained longer where required by law or to protect our legal rights.

9. Deleting Your Data

Within the App you may:

Delete individual conversations.
Delete your account.

Deleting your account permanently removes your personal information and associated conversations, except where retention is required by law or necessary for fraud prevention, security, or dispute resolution.

10. Your Privacy Rights

Depending on your location, you may have the right to:

Access your personal information.
Correct inaccurate information.
Delete your information.
Restrict certain processing.
Object to processing.
Withdraw consent.
Request a copy of your personal data where applicable.

To exercise these rights, contact us using the information below.

11. International Data Transfers

Some of our service providers may process data outside your country of residence. Where required by applicable law, we use appropriate safeguards to protect your personal information during international transfers.

12. Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

Apex is not intended for children under the minimum age required by applicable law. We do not knowingly collect personal information from children in violation of applicable law.

If we become aware that such information has been collected, we will take reasonable steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last Updated" date at the top of this document.

Material changes may also be communicated through the App where appropriate.

15. Contact Us

If you have any questions regarding this Privacy Policy or your personal information, you may contact us: