Privacy policy

Kit (usekit.io) is operated by Kitsune Technologies, LLC, a California limited liability company (“Kit”, “we”, “us”). Questions about this policy or your data: hello@usekit.io. Using Kit is also governed by our Terms of Service.

Kit is currently available only to households we invite. A household’s administrator decides which members join and which accounts are connected.

We collect only what you or your household give Kit, or what a service you connect sends us:

• Account details: each member’s name, email address, role in the household, and sign-in identity from Google.
• What you create in Kit: conversations with Kit, tasks, projects, contacts, notes, recurring chores, and files you upload.
• Google, if you connect it: Gmail messages, which Kit reads when you ask about them or import an attachment, and whose sender, subject and labels it keeps to organize your inbox; Google Calendar events, which Kit can also add or change when you ask; and Google Drive files, which Kit reads when you ask about them in your private chat, lists when you browse them, and copies only the ones you choose to import. For calendar events Kit keeps only its own notes about an event, not the event’s title, location or guests.
• Bank and investment data, if you connect a bank through Plaid or upload a statement file: account names and types, balances, transactions, investment holdings, and loan and credit card details such as rates and due dates. See Bank data and Plaid.
• Apple Health data, if you connect it in the Kit iPhone app: the types you choose among steps, distance, active energy, exercise and stand time, resting and walking heart rate, heart rate variability, respiratory rate, sleep, weight, body fat, waist, mindful minutes, workouts, and the calories and protein a food app records. If you set a weight goal in My Health, Kit keeps the goal, your pace and where you started. See Apple Health data.
• Messages and contacts from a Mac, if your household installs Kit’s Mac bridge: iMessage and SMS history (message text, sender, conversation name) and the Mac’s address book.
• Devices: push-notification tokens and the type of device, so Kit can send you reminders.
• Kit Early Access requests, if you request an invite on this website: your email address, the plan and billing period you chose, and any answers you gave the time calculator. We don’t keep your IP address with it.
• Reports you send to the Kit team: what you ask Kit to send us. A bug report also includes app diagnostics: which steps failed or were slow, their error codes and times, and the app’s version. Never your messages. We may review reports with the help of AI assistants (see below).
• Usage and security records: sign-ins, how much each feature is used, and security events. Kit also notes which days each person in your household opens it, and whether on the web, in an app or through a connector such as Claude, so we can count how many people use Kit; never what they did there. Kit records which screens each member opens and for how long, to improve Kit; never what’s on them. When an assistant such as Claude acts for someone through Kit’s connector, Kit counts which of its tools were used, never what was asked or returned. These records stay on Kit’s server and do not contain your messages.

We do not collect your location, and the Kit apps do not request location access.

• To run Kit for your household: answer your questions, keep your plans and tasks, organize your inbox, and show your household’s finances.
• To keep Kit secure, prevent abuse, and fix problems.
• To understand which features get used, from usage counts that leave out what you wrote.

We do not sell your data, share it for advertising, or use it to build profiles for anyone else. We do not train AI models on it, and the company that runs Kit’s language models (Fireworks AI) is under zero data retention terms.

We share data only with the service providers that help us run Kit, only for that purpose:

• AI processing: Fireworks AI, a US company, runs the language models behind Kit. When you ask Kit something, the relevant conversation and the information it looks up for you (for example an email or a transaction) are sent to it to produce the answer. It operates under zero data retention terms. TypeSafe, a US company that does not train on what it receives, helps sort your inbox from sender details and short subject excerpts, never message bodies or attachments. It also reads each message you send Kit, with names, numbers, addresses and links masked, to decide where Kit should look for the answer. The Kit team also uses AI assistants, Claude from Anthropic and Codex from OpenAI (both US companies), to sort and follow up on the reports and emails you send us. They see what you sent us, not the rest of your household’s data.
• Plaid: connects your bank accounts. See below.
• Google: the source of Google data you connect, and the provider of map previews for places.
• Hosting: Hetzner runs the server in the United States that holds your household’s data. Vercel hosts this public website and Kit’s settings pages, which store no household data.
• Web search, browsing and shopping: when you ask Kit to look something up or compare prices, the search terms go to Brave Search or to the stores and price trackers being checked (such as Best Buy or Amazon), and pages may be opened through Browserbase. These requests don’t carry your name or account.
• Product analytics: PostHog (United States) receives usage events. They exclude your messages and emails. PostHog also counts visits to this website’s public pages.
• Email: Resend (United States) delivers the email we send you when you request an invite, and the notice we send ourselves about it. The email to you is the same for everyone; the notice carries what you entered on the form.
• Notifications: Apple and web push services deliver reminders and messages. A notification shows the message text, as you’d see it in Kit. Apple can read that text on its way to your iPhone or Mac; web notifications are end-to-end encrypted.

Legal requests and reporting. We don’t monitor your household’s content. We may access and disclose information when the law requires it (such as a valid subpoena or court order), to report illegal activity, to protect someone’s safety, or to enforce our Terms of Service. Where the law requires it, we report child sexual abuse material to the National Center for Missing & Exploited Children. Where we’re allowed to, we’ll tell you about a legal request for your data before we respond.

If Kit is transferred to a new owner, this policy continues to apply to your data.

Kit uses Plaid Inc. to connect your financial accounts. When you connect a bank, you sign in on Plaid’s own page; Kit never sees your bank username or password. Plaid gives Kit a token, which we store encrypted, and Kit uses it to fetch your accounts, balances, transactions, investments and liabilities.

By connecting an account you agree to Plaid collecting your data under the Plaid End User Privacy Policy. You can see and manage your connections with Plaid at my.plaid.com.

Only adults in your household can connect banks or see financial data; children never can.

An account you connect is private to you. For each account you choose whether the other adults in your household see nothing, its balance, or its transactions, and you can change that at any time. Kit doesn’t tell them when you change it, and its answers, alerts and summaries for them use only what you shared. Even on a shared account, health charges and money you send to people stay visible only to you, and when the other adults see your transactions they don’t see the store’s address or the time of a purchase. Only the adult who connected a bank can disconnect it, and disconnecting it deletes its history from Kit. A bank or statement file Kit has no record of who connected stays visible to every adult, and your household’s administrator can disconnect it, until we record who connected it.

If you connect Apple Health in the Kit iPhone app, Kit reads the types you choose, with their times and values, and stores them on Kit’s server so My Health can show them on your phone and the web. Kit never writes to Apple Health, and it doesn’t keep device names or anything you typed in the Health app.

Your health data is private to you. No one else in your household can see it, including the administrator, and it never appears in shared conversations. Only adults can connect Apple Health.

Kit uses it to show My Health and, in your private conversations with Kit (your Kit chat and the conversation with Kit on My Health), to answer your questions about it and post a weekly summary, the evening check-in and the occasional note.

Health notes. You can keep notes for Kit about your health, such as an injury or a goal, on My Health or by asking Kit to remember something. They are stored on Kit’s server, private to you like the rest of your health data, and you can change or delete them at any time.

When Kit answers, your health data and notes go to Fireworks AI under zero data retention terms, and to no other AI provider. Messages you type in your Kit chat also pass through TypeSafe with names, numbers, addresses and links masked (see above); messages in the conversation on My Health do not. Kit never uses health data for advertising, marketing or data mining, never sells it, and doesn’t store it in iCloud.

Disconnect and delete in the Kit app removes your health data and health notes from Kit’s server at once. You can also turn off Kit’s access in the Health app at any time.

Kit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements. Kit reads Gmail, Calendar and Drive only to provide the features you use, and it can draft emails and sends one only after you tap Send. You can disconnect Google in Kit’s settings or at your Google account.

• Household data lives on an encrypted disk on our own server, which cannot unlock itself after a restart.
• Account tokens (Google, Plaid), files and photos are also encrypted with a key unique to your household.
• Every household’s data is kept apart in the database, so one household’s requests can never return another’s.
• All connections to Kit use TLS encryption.
• The people who run Kit can access the server to operate, secure and support it. They do not read household data except to fix a problem you report, keep Kit secure, or meet a legal obligation.

No system is perfectly secure. If a breach ever affects your data, we will tell you as the law requires. To report a security problem, email hello@usekit.io.

• While your household uses Kit, we keep its data so Kit can help you, with these exceptions: inbox details are removed 30 days after a message leaves your inbox, and deleted files stay in the trash for 30 days.
• Deleting your household (the administrator can do this) revokes Kit’s access to Google, ends your bank connections at Plaid, and deletes all of the household’s data. You can also see and manage your connections with Plaid at my.plaid.com.
• Removing a member revokes their access and connections and deletes their Apple Health data. What they shared with the household stays with it; ask us if you want it deleted.
• Kit Early Access signups are kept until we invite you. If we haven’t written to you within a year of your last signup, we delete it. Ask us to take you off the list at any time.
• Earlier chat system: we keep an archive of conversations from Kit’s earlier chat system, retired in 2026. Ask us to delete your household’s part of it.

Kit is not for anyone under 13, and we don’t knowingly collect information from children under 13. If we learn we have, we delete it. A parent or guardian who administers a household can add a teen aged 13 to 17; we collect a teen’s information only as that adult directs, to provide Kit to the household. Teens cannot connect accounts or Apple Health, cannot see financial data, and are kept out of adults-only conversations. A parent can review, change or delete their teen’s information at any time by contacting hello@usekit.io.

Kit uses only the cookies it needs to work: one that keeps you signed in, and short-lived ones (about 10 minutes) that protect sign-in and account connections. We do not use advertising or tracking cookies. This website counts visits to its public pages with PostHog without cookies or browser storage: it records which page you opened, the site that sent you there, how long each part of the page was on your screen and which questions you opened, not who you are or anything you type.

• See and export: Kit’s privacy settings let you export your household’s data. Ask us for anything the export doesn’t include.
• Turn AI off for a connected account in Kit’s settings, which keeps that account’s data out of Kit’s AI features.
• Disconnect Google, a bank you connected or Apple Health at any time. Disconnecting Apple Health deletes your health data.
• Correct or delete your data, or your whole household, by asking us.

Depending on where you live, including California, you may have the right to know, access, correct and delete your personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as California law defines it. To make a request, email hello@usekit.io. We will verify that the request comes from you or your household’s administrator and respond within 45 days.

If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell your household’s administrator before it takes effect.