Kairo · Legal
Privacy Policy
Last updated: July 11, 2026
This Policy describes how Kairo (“app”, “we”) handles your personal data. By using Kairo, you agree to the practices described here.
Data controller: Pedro Luiz Chagas 11221073664 (“Kairo”), CNPJ 24.811.306/0001-96, Divinópolis/MG, Brazil.
Contact (data protection officer / DPO): contact@thekairo.app.
This English version is a translation provided for convenience. In case of any discrepancy, the Portuguese version of this Policy prevails.
1. Data we collect
We collect only what's needed for the app to work:
You provide:
- Account: email and password (authentication), name and preferred language.
- Profile: profile photo (avatar), if you upload one, and your onboarding answers (the identity you want to build, what throws you off balance, focus area, rhythm).
- Content you create: Garden reflections, practice logs, text and voice messages exchanged with the Mentor and the weekly letters generated from them.
Generated through use:
- AI usage data: records of how many AI interactions you've had (to apply usage limits).
- Notifications: reminder preferences (processed on your device).
- Technical data: error and diagnostic logs, device identifiers needed to deliver notifications.
We do not collect credit-card data: payments are processed by Apple, Google or Stripe (on the web) — we only receive your subscription status, never your card details.
2. How we use your data
- Provide and personalize the app (Mentor, Dojo, Garden, weekly letters);
- Process your messages with the AI to generate responses and reflections;
- Manage your account and subscription (including the trial period);
- Send the reminders and notifications you set up;
- Ensure security, prevent abuse and apply usage limits;
- Comply with legal obligations.
3. Legal basis (LGPD / GDPR)
We process your data based on: performance of the contract (providing the service you subscribe to), consent (e.g. AI features, notifications, photo upload), legitimate interest (security, fraud prevention) and compliance with a legal obligation.
4. Sharing with third parties (subprocessors)
We don't sell your data. We share it with strictly necessary providers:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Hosting, database, authentication and storage | Account, profile, content |
| Anthropic (Claude) | Process the Mentor's messages and generate the letters | Text of your messages/reflections, practice statistics (for the weekly letter) and your profile data (name, identity, what throws you off balance, focus, rhythm) |
| Groq (Whisper) | Transcribe the Mentor's voice messages | Audio of your voice messages |
| Apple / Google | App distribution and payment processing | Purchase/subscription status |
| Stripe | Subscription payment on the web | Payment status (card stays with Stripe) |
Each provider handles the data under data-processing agreements (DPAs) and offers protection equivalent to that of this Policy.
5. Artificial Intelligence
The Mentor and the weekly letters use models from Anthropic (Claude): the text of your messages, your Garden reflections and practice statistics (used in the weekly letter) and your profile data (name, identity, what throws you off balance, focus and rhythm) are processed to generate the responses. Voice messages are transcribed by models from Groq (Whisper): the audio is sent solely for transcription. Your personal content is not used to train AI models — neither by us nor by Anthropic or Groq (commercial APIs, under data-processing agreements that prohibit such use).
The app asks for your consent before the first use of these features; until you accept, none of your data is sent to the AI providers. AI responses are generated automatically and are reflective in nature — see the disclaimer in the Terms of Use.
6. International transfer
Some providers (Supabase, Anthropic, Groq, Apple, Google, Stripe) process data outside Brazil, including in the United States. By using Kairo, you agree to this transfer, carried out with adequate contractual safeguards.
7. Retention and deletion
We keep your data for as long as your account exists. You can delete your account at any time inside the app (Profile → Delete account) — deletion is immediate and permanent, removing your profile, conversations with the Mentor (text and audio), reflections, practices and progress, weekly letters and uploaded files. We also accept requests at contact@thekairo.app. We retain only what the law requires. Deleting your account does not cancel an active App Store/Google Play subscription — cancel it in the store settings.
8. Your rights
Under the LGPD (and the GDPR, where applicable), you may: confirm processing, access, correct, anonymize, port or delete your data, withdraw consent and object to processing. To exercise these, write to contact@thekairo.app.
9. Security
We apply technical and organizational measures: encryption in transit, row-level access control (RLS) in the database, and credential segregation. No system is 100% secure, but we work to protect your data.
10. Children
Kairo is not intended for anyone under 18. We don't knowingly collect data from minors; if we identify any, we remove it.
11. Changes
We may update this Policy. Material changes will be announced in the app or by email. The date at the top indicates the latest revision.
12. Contact
Questions or privacy requests: contact@thekairo.app.