How Kit works with your data
Clear answers on what Kit can do with your data, and what it can’t.
Last updated October 12, 2026
Does Kit sell my data or show ads?NoNever. Your subscription is the only way Kit makes money, and that’s on purpose.
We chose subscription only so Kit never has a reason to sell your data or show you ads. Kit is self-funded, with no investors. More on how Kit makes money.
Do people at Kit read my mail?Only ifOnly if you report a problem we need to fix, there’s an attack on Kit or abuse of our Terms, or the law requires it.
Kit is run by two people, Miso & Spence. Their console shows counts across households, never conversations, and every view is logged. There is no way for them to sign in as you. As the people who run the server, they can open household data, and do so only for the reasons above.
Is my data used to train AI?NoNot by Kit. Kit uses AI from Fireworks, which handles your request and doesn’t store it or train on it.
Fireworks’ terms say it doesn’t train on what we send, doesn’t use it to improve its service, and doesn’t log it for human review. Its data handling policy covers how long a request stays in memory.
Can Kit send an email or pay a bill without me?NoKit never sends an email without your OK: it goes out only after you tap Send, and you can undo it for 30 seconds. It can’t move money.
Calendar changes wait for your OK. Inbox tidying moves labels only after you approve, and undo puts every message back exactly. Bank access through Plaid is read-only, and Kit never sees your bank password. Answers show the email they came from.
Can my partner see my mail and calendar?NoNot unless you share them. Your Apple Health data stays yours alone.
Each account belongs to whoever connected it and stays private to them until they share it.
Can my partner see my bank accounts?Only ifOnly the accounts you share, at the level you choose: nothing, the balance, or the transactions.
Health charges and money you send to people stay yours alone, even on a shared account. Only the adult who connected a bank can disconnect it.
Can we delete everything?YesThe household admin can delete the household: Kit revokes Google access, ends the Plaid link and deletes your data.
You can export your household’s data first. Disconnecting Apple Health deletes it at once. Inbox details are dropped 30 days after a message leaves your inbox, and deleted files 30 days after they go to the trash.
Who can see what
For the three kinds of data people ask about most.
| Who | Email and calendar | Bank | Health |
|---|---|---|---|
| You | Yes, the accounts you connect | Yes | Yes, the types you choose |
| Your partner | Only if you share it | Only if you share it | No |
| Miso & Spence, who run Kit | Only if you report a problem we need to fix, there’s an attack on Kit or abuse of our Terms, or the law requires it. | ||
| Fireworks AI | The conversation and what Kit looked up for your question, for that request only. Not written to disk, not trained on. | ||
| Hetzner, which rents Kit its server | Stores it on an encrypted disk. The key is held off the server by Miso & Spence. | ||
You
- Email and calendar
- Yes, the accounts you connect
- Bank
- Yes
- Health
- Yes, the types you choose
Your partner
- Email and calendar
- Only if you share it
- Bank
- Only if you share it
- Health
- No
Miso & Spence, who run Kit
Only if you report a problem we need to fix, there’s an attack on Kit or abuse of our Terms, or the law requires it.
Fireworks AI
The conversation and what Kit looked up for your question, for that request only. Not written to disk, not trained on.
Hetzner, which rents Kit its server
Stores it on an encrypted disk. The key is held off the server by Miso & Spence.
What happens when you ask Kit something
One request, from your phone to the answer.
- 1 Your question, encrypted on the way, from You to Kit’s server
- 2 Kit looks up what’s relevant: your household’s data, or a web search, on Kit’s server
- 3 The conversation and what Kit found, like one email, from Kit’s server to Fireworks AI
- 4 The answer, from Fireworks AI to Kit’s server
- 5 The answer, with the email it came from, from Kit’s server to You
- You: Kit never sends an email without your OK. Calendar changes wait for your OK too.
- Kit’s server: An encrypted disk. Each household is walled off from every other.
- Fireworks AI: Not written to disk, not trained on. Parts can stay in memory for minutes to hours.
If Kit sends you a notification, it shows the message text, and Apple can read that text on its way to your iPhone. Web notifications are end-to-end encrypted.
What we can’t promise
The limits, stated plainly.
- No system is perfectly secure.
- Miso & Spence run Kit’s server. We open household data only if you report a problem we need to fix, there’s an attack on Kit or abuse of our Terms, or the law requires it.
- A bank connected before Kit recorded who connected it stays visible to every adult until we record who did.
- Fireworks handles your request on its own computers. We rely on its contract not to store or train on it.
- Fireworks is a US company, but we can’t promise every step of a request happens in the US.
- You can’t limit Kit to certain Gmail labels or senders. It works per account: connect it or don’t, and you can turn Kit’s AI off for any account.
- Apple can read notification text on its way to your iPhone.
- Kit isn’t for anyone under 13.
The companies involved
Each one, what it gets, and its own policy.
Fireworks AI
Runs the AI behind Kit’s answers. Gets your question and what Kit looked up for it.
Data handlingTermsSecurity and certificationsAlso: Brave Search and Browserbase get search terms, never your name. TypeSafe gets the sender and a short subject line to sort your inbox, never the body.
Coming
Not true yet. Each one has a ticket.
- Server admin access only over a private network. KT-60266
- Nightly encrypted backups kept off the server. KT-51728
Kit is made by Kitsune Technologies, LLC, a California company run by Miso & Spence. Write to us with questions or a security problem. More about us
Email hello@usekit.io