Privacy Policy

What we collect

• Account: email, name and photo from your Kwirl sign-in.
• Content: your messages, attachments, generated images and videos, and the settings you choose.
• Billing: credit balance and ledger. Card details are held by Stripe, never by us.
• Usage analytics: which model answered, how long it took, token counts and cost, and interface actions such as regenerate or stop. Analytics never include message text and use a hashed identifier, not your user id or email.
• Security: sign-in time, approximate location and browser for your active-sessions list.

Where your content goes

To answer a message we send the conversation to the provider of the model you chose (or that Auto chose, which is always shown). Providers process it under their API terms; the major providers do not train on API traffic. We never send your content to a provider you did not pick for that message. Prompt caching keeps a short-lived copy of the prompt prefix at the provider for a few minutes to lower your cost; caches are keyed to your account and are not shared with other users.

Memory and personalisation

Memory is off by default. If you turn it on, we keep short factual notes you can read, edit and delete. Memory is never written from temporary chats or from conversations flagged as sensitive, and project memory never leaves its project. Every reply that used memory tells you which notes it used.

Sharing

Share links are unlisted, carry a noindex header, are excluded in robots.txt and strip your name, custom instructions and memory. Attachments are only included if you tick the box. You can see every link you created and revoke it instantly; revoked links return "not found".

Retention and deletion

Chats are kept until you delete them. Deleted chats are hidden immediately and hard-deleted, including attachments and generated media, within 30 days. Temporary chats are deleted after 24 hours. Deleting your account removes everything within 30 days except ledger records we must keep for tax purposes. You can export all of your data as JSON from Settings at any time.

Cookies and storage

We use local storage and cookies only for sign-in, your preferences and the analytics identifier described above. There is no advertising tracking.

Your rights

You can access, export, correct and delete your data from Settings. For anything else, including GDPR or CCPA requests, contact privacy@kwirl.ai.

Children

Kwirl AI is for people 18 and older. We delete accounts we learn belong to minors.