Privacy Policy

The short version

• Dictation, your pages and your settings stay on your Mac. A page goes to Koi only when you ask it to work on one, and is never kept.
• Recorded calls stay on your Mac. Their sound and video are never sent. Their words go to the AI only if you turn on call notes, and our server keeps none of them.
• Usage is measured only with a yes, asked when you sign in. It is anonymous, and one switch in Settings turns it off.
• Koi needs an account, and the account is an email address. Talking with Koi, and call notes if you turn them on, are the only features that go online.
• Our server keeps your email, a sign-in key, your plan and what each use of Koi's AI cost. It never keeps what was said, shown, written or drawn.
• We don't sell your data.

Who we are

Koi is made by Spacerr LLC, a Wyoming limited liability company in the United States. We are responsible for the personal data described here. Write to us at support@spacerrs.com.

What stays on your Mac

All of this is handled by the app itself and is not sent to us or to anyone else, except a page you ask Koi to work on and, with call notes on, a recorded call's transcript:

• Dictation. The speech models run on your Mac, so your voice and the text it becomes stay there. So does telling a voice from noise.
• Pages, history and pictures. They are local files. There is no sync and no cloud copy.
• Recorded calls. The sound, the video and the transcript are made and kept on your Mac. The sound and the video are never sent. The transcript leaves only if you turn on call notes, as described below.
• Your choices. Preferences, the speech model in use, the hotkeys and what Koi may see and do live in the app's own settings on that Mac. Our server is never told.
• Reading the screen. Finding words on the screen and finding room to draw are done on the Mac.

If you choose a speech model that is not built in, the app downloads the model file from Hugging Face, which sees an ordinary file request. Nothing about you is attached to it.

Anonymous usage, if you share it

Right after you sign in, the app asks whether to share anonymous usage. Sharing is picked to begin with, and you can pick Don't share. Nothing is sent before you answer, and a switch in Settings turns it off at any time.

• What goes: which features ran, how long they took, what failed, and the top of a crash, with the app's version and the macOS version.
• How: under a random ID that is never tied to your account or your email, with no IP address and no location kept. It goes to PostHog, our analytics provider, by way of this website's address.
• What never goes: what you said, wrote or had on your screen. The code that sends an event cannot carry it.

What leaves your Mac during a call with Koi

Koi runs on AI models that don't fit on a laptop, so a call needs the internet. While a call lasts:

• Your voice goes to the AI provider, live, while Koi listens: while you hold the keys and a moment after, for your last word, or all through a call you started from Koi's window.
• When the voice hands a question on to the model that thinks it through, the call so far goes to it as text, through our server, with anything below that you allowed. After an answer the voice gives by itself, the call's last few lines go the same way to a model that checks whether you're done, so the call can hang up. Our server passes it on and keeps none of it.
• A picture of your screen, the text you selected or the front window's words go along only while that switch is on in Settings, and only with the question that needs them. A picture of your screen goes with each question you ask Koi, unless you set it to "When I ask" or "Never". Each switch can be turned off.
• What Koi remembers about you (your name, what you work on, how you like answers) goes along with each question, so it can answer in a way that fits you. It lives on your Mac: Settings, under Memory, shows every line to change or delete, and turns it off. Our server keeps none of it.
• When you ask Koi to work on one of your pages, that page's text goes along with the question, through our server, which keeps none of it.
• With "Let Koi read my apps" on, and only when you ask, the app reads that one thing and hands it to the AI to answer from: a day of your calendar, the reminders due today, your unread mail's senders and subjects, a note, a contact's phone numbers and email addresses, the names of files that match, the clipboard, what's playing, which apps are open, your open tabs or the page in front. A few items at most, kept nowhere.
• With "Let Koi use my Mac for me" on, when you ask Koi to open an app or a file and more than one fits what you said, the names of the closest few go to the AI so it can ask you which one. Never what's in them or where they are.
• When an answer needs current information, the question is sent to a web search.
• A call that goes quiet hangs itself up, so silence is never streamed.

Notes on a recorded call. One thing goes to the AI provider outside a call with Koi, and only if you turn it on. The first time a recorded call ends, the app asks whether to summarize it, and "Summarize my recorded calls" in Settings, under Talking with Koi, changes your answer. With it on, when a recorded call ends, its transcript, the words only, goes through our server to the AI provider, which writes the call's title, a short summary and your to-dos. Our server passes it on and keeps none of it, and the notes are kept only on the call's page on your Mac. The call's sound and video are never sent. With it off, nothing from a recorded call leaves your Mac.

Koi is built never to type a password or a card number, and the app enforces that itself rather than trusting the model.

What our server keeps

• Your email address. To sign you in and to email you about your account and payments. It is the whole account: no password, no name. If you sign in with Google, we keep only your address from it. Your first name goes on to the app on your Mac, and our server holds it only for the minutes until the app collects it. Three emails sell rather than inform: a checkout you left open, a note about Koi if you haven't tried it a day after signing up, and uninstalling. They are on by default. Switch Marketing emails off in Settings, under Account, or use the unsubscribe link in any of them.
• A sign-in key. So you stay signed in. It is saved without your IP address or device details. Sign-in codes are stored hashed and expire after ten minutes.
• Your plan. Which plan you are on, the credit you bought and what is left, and when each call you record on your Mac started, so the month's recorded calls can be counted. Never the call itself: its sound and video stay on your Mac, and its words are kept only there.
• What each call used. How long it lasted, which AI model answered, token and search counts, and what that cost. It is the usage you see in Settings, and what your plan's AI time is counted from. Calls in the welcome tour are marked as such and aren't counted, up to ten minutes. Call notes are counted the same way: which model wrote them, the token counts and what that cost.
• The newsletter, if you join it. Your email address, when you signed up and confirmed, and a random key for the confirm and unsubscribe links. We write only once you confirm, and every newsletter has a one-click unsubscribe. Unsubscribing stops them at once.
• Rate limits. A count of sign-in requests by IP address, and of codes sent to each address under a hash of it, so nobody can flood an inbox with codes. Kept briefly, then cleared.

Never kept: what you said, what was on your screen, what Koi answered, wrote or drew.

Who else handles your data

We use a small number of companies to run Koi, each only for its one job:

• AI models. Calls are answered, and call notes written, by OpenAI models, reached through Vercel's AI Gateway. Web search runs through the same gateway, on Perplexity.
• Email. Resend delivers the sign-in code, the codes to change your email address, and the few emails about your account: welcome, billing, a checkout you left open, a note about Koi, uninstalling, account deletion scheduled, and goodbye. A bug you report from the app goes the same way to our support inbox: what you wrote, your app and macOS version and your Mac's model, so we can reply. So does a message you send from our contact page, and the newsletter, if you join it.
• Sign in with Google. Only if you choose it. Google confirms your email address to us, sends your name and picture along, and learns that you signed in to Koi. Your first name goes on to the app on your Mac. We keep nothing else from your Google account.
• Payments. Stripe takes every payment on its own page and keeps your card and invoices. We give Stripe your email address, so receipts and invoices reach you. We keep a customer id, which plan is active, what you bought once, and how much Koi credit is left.
• Analytics. PostHog, on its US cloud, receives the anonymous usage described above, and only if you agreed, and this website's visits, described below.
• Hosting and database. Our server runs on Render, in Virginia, and its Postgres database on Neon. They hold the account and usage records described above. This website is hosted on Vercel.

Your data is processed in the United States.

These companies handle what they receive under their own terms and privacy policies. We send them the least that will do the job, and we never sell or rent your data to anyone.

This website

This site counts its visits with PostHog: which pages are opened, which links and buttons are clicked, how far a page is scrolled and how fast it loads, with the site you came from, your browser, your screen size and your IP address, from which PostHog works out your country. The first time you visit, a small card asks about cookies. Until you answer, nothing is stored in your browser, so a visit is only tied to the pages you open in that tab. If you accept, PostHog keeps a random ID in a cookie and in your browser's storage for a year, so a later visit counts as the same visitor; it is never tied to your name or email. If you decline, nothing more is sent. Your answer itself is kept in your browser, and Cookie settings at the bottom of every page lets you change it. It never records your screen or what you type into a form. There is no advertising. Like any website, our host, Vercel, keeps ordinary server logs for a short time to keep the site running and secure.

When you write to us from the contact page, Resend delivers your message and your email address to our support inbox, so we can reply.

Your choices

• Koi's powers start on, with your screen shown with every question. Switch any of them off in Settings, under Talking with Koi.
• Call notes are off until you say yes. Switch "Summarize my recorded calls" on or off in Settings, under Talking with Koi.
• Turn anonymous usage off in Settings. Nothing more is sent from then on.
• Delete any page or your whole history in the app. A deleted page waits in Recently Deleted for 30 days in case it was a mistake, then it is gone from your Mac for good. Delete it from there, or clear your history, and it is gone at once.
• Delete your account in Settings, under Account. Your customer record at Stripe is deleted, and your email, your sign-in, your plan, your purchases, your credit and your usage records are removed from our server. If a subscription still has paid days left, it stops renewing and your account keeps working until they are used, then all of it is removed the same way. Only a one-way fingerprint of your address stays, so Free's Koi can't be claimed twice. Nothing else is kept with it, and it can't be turned back into your address.
• Uninstall from the same place. It removes the app and everything it keeps on your Mac, and tells our server, which sends you one email. Your account stays.
• Ask us for a copy of what we hold about you by writing to support@spacerrs.com.

Depending on where you live, you may have further rights over your personal data, such as access, correction, deletion and objection. Write to us and we will honour them.

Children

Koi is not meant for children under 13, and we do not knowingly collect their data.

Changes

If what the app or the server does with data changes, this page changes first, and the date at the top with it. A change that lets more leave your Mac will be said plainly in the app before it happens.

Contact

Spacerr LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Questions about any of this: support@spacerrs.com.