Privacy Policy

1. What we collect

Account data

• Your email address and, if you use a password, a password hash managed by our authentication provider. We never see your password.
• If you sign in with Google or Microsoft: the name, email address and account identifier those services share with us.
• Your plan and its status.

Content you choose to sync

• When you are signed in, your snippets, templates, notes, settings and similar data are synced between your devices through our servers and backed up there.
• Notes and unprotected passwords are encrypted before they leave your device, with an encryption key specific to your account.
• Your password vault is encrypted on your device with a key derived from your vault password (and, if you set one up, your security key). We cannot read it. Syncing the vault to the cloud is optional.

Device information

• A device identifier, the device name shown in the app, your operating system and the app version. We use these to sync, to let you manage your signed-in devices, and to connect your own devices to each other.

Content sent to AI features

• When you use an AI feature, the text or screen region you selected is sent to our servers and to our AI service provider to produce the result.
• We do not store that content after the result is returned. We keep only usage records: which feature ran, when, how long it took and how much of your allowance it used.

Content you send between your devices

• Text and files you send with Tether travel directly over your local network when possible. When they go through our relay, they are end-to-end encrypted to the receiving device and are not stored.

Snippets you share

• If you share snippets with another user, we store the shared snippets and the recipient’s email address until the recipient accepts or declines, or for 7 days at most.

Payments

• Payments are processed by Paddle, our Merchant of Record. Paddle collects your payment and billing details under its own privacy policy. We receive your subscription status, order identifiers, amounts and country, never your card details.

Website

• The website uses cookies only to keep you signed in and to remember your language. We do not use advertising or analytics cookies.

Support

• If you email us, we keep the conversation to answer you.

2. What we do not collect

• We do not record your keystrokes, clipboard or screen on our servers. Text expansion, autocomplete and the other local features work entirely on your device.
• The app’s diagnostic logs are stored on your computer only and are never sent to us automatically.
• We do not sell your data or use it for advertising.

3. Why we use your data

• To provide the Service you asked for: your account, sync, backups, AI features and support (performance of our contract with you).
• To keep the Service secure and prevent abuse, for example enforcing usage limits (our legitimate interest).
• To meet legal and tax obligations, such as keeping payment records.

4. Who processes your data

We use these service providers, each only for the purpose listed:

• Supabase: hosting, authentication, database and file storage.
• Google: AI processing for AI features; Google sign-in, if you use it; and our business email.
• Microsoft: Microsoft sign-in, if you use it.
• Paddle: payments, invoicing and sales tax, as Merchant of Record.
• Cloudflare: domain name services and website delivery.

Some of these providers process data outside Chile, including in the United States. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.

5. How long we keep it

• Account data and synced content: while your account exists.
• When you delete your cloud data or ask us to delete your account, we delete it within 30 days, including backups.
• Content sent to AI features: not kept after the result is returned.
• Payment records: as long as tax law requires.

6. Security

Data is encrypted in transit (HTTPS/TLS). Notes, unprotected passwords and the password vault are additionally encrypted as described above. Access to our systems is restricted. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

7. Your rights

You can ask us to access, correct, delete or export your personal data, or object to or restrict how we process it. Many of these you can do yourself in the app: you can edit and export your data and delete your cloud data. For anything else, email contacto@kcorp.cl from the address linked to your account. We answer within 30 days.

You can also complain to your data protection authority.

8. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

9. Changes to this policy

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect. The date at the top shows the latest version.

10. Contact

KCorp SpA, RUT 78.512.424-3, Chile. Email: contacto@kcorp.cl.