Your data.

What lives on your device#

Your logs, your chats, the coach's memory of you, the Kata log, your concerns, trackers, letters and seasons, your photos and your connection tokens: all of it is stored on your device, per account. Settings and structured logs live in local storage; larger content such as photos lives in IndexedDB. Our servers never receive any of it in readable form.

What we hold#

• Your account basics: email, sign-in method and timestamps, and which platform you use, once a day at most, with the country derived from the connection.
• App-open counts and when you were last active.
• Aggregate AI usage numbers for fair use: how many coach messages and voice interactions, never what was said.
• An abstract persona sketch computed on your device: an archetype word plus coarse traits. It helps us make Kata better and cannot be traced back to your content.
• Your invite state, your plan and its status, and your consent records.
• If notifications are on: your push token and the schedule they follow (categories, quiet hours, timezone, language), never their content.
• On Android and the web: one sealed restore snapshot of your account, encrypted on your device under a key we never receive. We hold ciphertext we cannot open, and your photos are never in it. See Backup and restore.
• Only if you switch them on: one yes-or-no value a day for Duo and Groups, deleted after 21 days, and the ciphertext of an active secure share.

Never readable on our servers: your chats, your logs, your photos, the coach's memory, your decisions. And there is no analytics profile, no ad pixel, no selling, ever.

Paying for a plan#

When you take a paid plan we keep only what running a subscription needs: your plan and its status, the billing period, the currency and country used for tax, a customer and subscription identifier, and a record of payments and refunds. We never receive or store your full card number. The payment itself is handled by the provider where you bought: Stripe on the web, Apple for App Store purchases, Google for Google Play. See What the servers do.

When you talk to the coach#

Your message, plus the minimum context needed to answer it, travels encrypted to our AI provider, currently Anthropic, to generate the reply and is processed transiently: it is not stored on our side. Voice is transcribed on your device and photos are analyzed the same way, only when you send them. See How it reads your data.

What Kata knows about me#

Settings, Data opens the viewer of everything the coach knows: profile facts, tone, this week's intention, memory, concerns, the newest locked in entries, medications, cycle and lab values, each readable and deletable by you, followed by Shared in the moment, the exact list of what rides along with a message.

Export, wipe and delete#

Settings, Data, Export my data gives you one file with everything: treat it as your backup, or use the built-in Backup and restore. Clear my data on this device, under Settings, General, Account, wipes this device and signs you out, leaving backups and other devices alone. Delete account, at the bottom of your Profile, removes your account and its operational rows from our systems, the sealed snapshot included, and wipes the device: after that, nothing about you remains anywhere.