Privacy

The short version

Kai (TheHand.app) doesn't have accounts, doesn't sell or share your data, and doesn't track you across other apps or websites. What it does send off your Mac is limited to what's needed to answer you: your chat/voice messages, and — only if you explicitly connect an integration — the specific Gmail or Calendar content a request touches.

What Kai sends, and where

• A random device ID. Generated on first launch, stored in the macOS Keychain, never tied to your name or email. Sent with every request so our server can apply per-device rate limits.
• What you type or say to Kai. Chat messages, push-to-talk transcripts (transcribed on-device), and meeting-recording summaries are sent to Kai's backend, which forwards them to Groq (our AI provider) to generate a reply. Meeting audio itself is transcribed and diarized entirely on-device — the raw audio never leaves your Mac.
• Gmail or Calendar content — only if you connect it. If you link Gmail or Google Calendar, the specific emails or events a request touches pass through Kai's backend and into the same model call, so Kai can act on them (e.g. summarizing an email, checking your schedule). Nothing is fetched unless a request needs it, and nothing is stored server-side afterward.

What stays on your Mac

Notes, tasks, activity history, meeting recordings/transcripts, and your OAuth tokens are all stored locally (Keychain for secrets, the app's sandboxed container for everything else). Kai's backend is a stateless relay — it doesn't run a database and doesn't retain your content after a request completes.

Third parties

Groq processes chat/voice text and (when connected) Gmail/Calendar content to generate replies, under their own privacy policy. Google APIs are called directly for whichever integrations you explicitly connect and authorize via OAuth. Kai does not use advertising or analytics SDKs, and does not sell or share data with data brokers.

Permissions Kai asks for

Microphone (push-to-talk and meeting recording, both explicitly user-started), Calendar (upcoming-event reminders), and Screen Recording (meeting audio capture, only while you're actively recording a meeting) are all macOS permission prompts you can grant or revoke at any time in System Settings → Privacy & Security.

Deleting your data

Since everything is local, uninstalling Kai and removing ~/Library/Application Support/TheHand and its Keychain entries removes it all. Disconnecting an integration (Settings within the app) revokes that OAuth token immediately.

Contact

Questions about this policy: afrid@bluemooninnovations.com.