Privacy Policy

Kaiyros is operated by Kaiyros Ai Inc (“Kaiyros”, “we”, “us”), a Delaware corporation at 3353 Reservoir St, North Port, FL 34288-2441, United States. This policy covers the Kaiyros web application at app.kaiyros.ai, the Kaiyros iPhone app, the website at www.kaiyros.ai and the services reachable from them. It is the one privacy policy for all of them. It is governed by the laws of the State of Delaware.

What Kaiyros does

Kaiyros helps creators understand their TikTok Shop performance and earnings, find products and content, write scripts, edit and plan videos, and manage their work with the Kaiyros assistant.

Kaiyros is a workspace for creators who earn through brand partnerships. It tracks the deals a creator has agreed to, the deliverables they owe, the payments they are due, and their own performance figures. With the creator’s explicit permission, it can also read their email inbox to find brand partnership offers that would otherwise be missed, and surface them for review.

Google user data

Connecting a Gmail account is optional. Kaiyros works without it. If a creator chooses to connect one, the sections below apply.

What we request

Kaiyros requests a single Google OAuth scope: https://www.googleapis.com/auth/gmail.readonly. This is read-only. Kaiyros cannot send, modify, archive or delete any message, and never attempts to.

Why we need it

Brand partnership offers arrive by email. Reading the creator’s inbox is the only way to find those offers and turn them into a tracked agreement. This directly powers the Opportunities feature, which is a prominent, user-facing part of the product: it lists the offers found in the creator’s email in Deals, compares them with the creator’s own rates and, only when the creator asks, writes a reply draft that the creator copies or opens in Gmail and sends themselves.

What we actually read

Kaiyros does not read the whole inbox. To find offers, it runs a narrow keyword search aimed at partnership and sponsorship language, and examines only messages matching that search. Specifically:

• The first scan covers the previous 30 days. Later scans overlap the previous window by one day.
• Each scan processes a bounded number of candidate messages. Scans run on a schedule, and sooner when Gmail notifies Kaiyros that new mail has arrived in the inbox. That notification carries only the mailbox address and a change number, never message content.
• For each matching message, Kaiyros downloads its sender, subject, date and text from Gmail and processes them in memory. Attachments are never downloaded.
• Messages in Spam or Chats, newsletters and other bulk mail, and messages that mention no amount, date or brand are set aside by code before any AI review. Messages the creator sent are left out of this search and never reach AI review.
• Apart from the Sent mail check described below, messages that do not match the search are never retrieved, read or stored.

To show whether you’ve replied to an offer, Kaiyros also looks at your Sent mail. It sees which conversations your sent emails belong to. For a conversation that holds an offer, it reads only when your reply was sent, never its recipients, subject or text, and keeps only that time.

What we store

For a message identified as a possible partnership offer, Kaiyros stores only what is needed to show it to the creator and to avoid processing it twice:

• The Gmail message and thread identifiers, and the address of the connected Gmail account
• Sender name and address, the subject line and the date received
• An excerpt of up to 280 characters, plus any fee, deadline, brand name, number of videos or product link detected in it
• Our assessment of whether it looks like a genuine offer or a scam, and whether the creator has reviewed it
• Reply drafts the creator asks Kaiyros to write
• The time the creator replied to the offer, if they have

For messages judged not to be partnership offers, we keep only the message identifier, the date received and that verdict, so the same message is not fetched and evaluated again.

OAuth access and refresh tokens are stored encrypted. Full message bodies are never stored, and attachments are never downloaded.

If a creator asks the Kaiyros assistant about these offers, its answer is saved with that conversation, like any other conversation, until the creator deletes the conversation or their account.

Who we share it with

Kaiyros does not sell Google user data and does not transfer it to third parties for advertising, marketing or any purpose unrelated to the feature the creator enabled. There are three processing relationships a creator should be aware of:

• TypeSafe (typesafe.ai) — our email review model provider. To decide whether a message is a real partnership offer and to pick out its terms, the sender, subject, date and text of the message (at most its first 6,000 characters, with quoted earlier replies removed) are sent to TypeSafe as a service provider acting on our behalf, solely to return that assessment. TypeSafe’s model answers fixed questions with scores and choices; it does not write text. TypeSafe states that it does not train or fine-tune AI models on the data it receives.
• OpenRouter (openrouter.ai) — routes requests from the Kaiyros assistant to AI model providers. When a creator asks Kaiyros about the offers found in their email, the details of those offers (sender name, subject line, excerpt, brand, fee and deadline) are sent through OpenRouter to the model that answers. When they ask Kaiyros to draft a reply, the sender’s name, the subject line, the excerpt and the offer’s terms are sent the same way. These requests go only to model providers that OpenRouter lists as not collecting request data: not storing it beyond the request and not training on it.
• Google Cloud (cloud.google.com) — our infrastructure provider. Databases, background workers, private file storage and secrets are hosted on Google Cloud in the United States (us-west1) under contract.

AI and Google user data

Kaiyros does not use Google user data, or anything derived from it, to create, train or improve any AI or machine-learning model, whether its own or anyone else’s. Email content reaches the AI providers above only to produce the results shown to the creator who connected the account.

Email is treated as untrusted input. The review model can only answer fixed questions and choose among amounts, dates and names that code has already found in the message, so an email cannot make it invent terms. An offer found in email never becomes a deal until the creator reviews it, Kaiyros never sends email, and the Kaiyros assistant treats quoted email as information, never as instructions: an action suggested by email content needs the creator’s approval.

Limited Use disclosure

Kaiyros’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

Specifically, Google user data obtained through these scopes is used only to provide or improve user-facing features that are prominent in the Kaiyros interface. It is never used for advertising, never sold, never transferred to others except as necessary to provide those features with the creator’s consent, for security purposes, to comply with applicable law, or as part of a merger or acquisition with the creator’s prior consent, never used to determine creditworthiness or for lending purposes, and never used to create, train or improve AI or machine-learning models. No humans read this data except with the creator’s explicit consent to view specific messages (for example, to resolve a support issue they raised), where necessary for security purposes such as investigating a bug or abuse, where required by law, or as aggregated and anonymised data for internal operations.

Retention and deletion

A creator is in control of this data at all times. An offer found in email that the creator never accepts or dismisses is deleted automatically, with its excerpt and any reply drafts, 180 days after the email was received; Kaiyros then keeps only the message identifier, so the same email is not processed again. Offers the creator has accepted or dismissed, their excerpts and reply drafts are kept until the creator removes them or deletes their account:

• Disconnect removes our stored credentials, revokes Kaiyros’s access with Google, cancels any pending authorization and stops all future scanning immediately. Offers already found stay until the creator removes them or, if never acted on, until 180 days after the email was received.
• Remove saved email history deletes the stored suggestions, excerpts and reply drafts. Kaiyros keeps only the message identifiers, so the same emails are not processed again. Agreements the creator already created from them are kept, because those are their own business records.
• Deleting the Kaiyros account in Settings erases all of the above, including those identifiers, and revokes the Gmail access with Google. Deleted data can remain in encrypted database backups for up to 14 days before it is gone.
• Access can also be revoked at any time from your Google Account permissions page, independently of Kaiyros.

Other information we handle

• Account information — the details used to create and sign in to a Kaiyros account: sign-in identity, email address, name (including the name Apple shares if you use Sign in with Apple), onboarding answers and account preferences.
• Connected TikTok accounts — account identifiers, profile information, connection status and the permissions you grant. Granted permissions can provide video information, product and Showcase listings, orders, commissions, sales and performance metrics, which Kaiyros uses to show your own numbers back to you.
• Content you create in Kaiyros — deals, deliverables, payment records, calendar entries, posts, captions, tasks, notes, saved ideas, briefs and goals.
• Videos and footage — videos you record, upload or send to Kaiyros to edit or analyse, and the transcripts, on-screen text and descriptions made from them.
• Kaiyros conversations — your messages to the Kaiyros assistant, in the app or by text, its answers, research results, suggestions and your feedback.
• Plans and purchases — your plan, its status and renewal dates, credit packs you bought, your credit balance and usage.
• How you use Kaiyros — actions in the app, such as the products and videos you open, feedback like “Not for me” and reports that a video won’t play, used to run and improve features.
• Service operation — request and error information, connection and job status, and technical logs used to operate, troubleshoot and protect the service. The browser and the iPhone app also store your sign-in state and local preferences.

Your TikTok connection

When you connect TikTok or TikTok Shop, you sign in on TikTok and choose the permissions Kaiyros receives. The access tokens TikTok issues are kept only on our servers, encrypted, and are never stored in the iPhone app or your browser. Kaiyros uses them to sync your own data on a schedule. Disconnecting an account in Settings deletes its tokens from Kaiyros and stops syncing. Deleting your Kaiyros account erases them along with everything Kaiyros received through the connection.

TikTok videos

Connecting TikTok videos is optional. If you connect TikTok videos, TikTok shares with Kaiyros, with your permission: your TikTok user ID, display name, profile photo and username; and, for each public video you have posted, its ID, post time, cover image, link, title and caption, length, and its view, like, comment and share counts. Kaiyros does not receive your password, private or draft videos, messages, or followers’ identities, and cannot post, comment or change anything on TikTok.

We use this to show your videos and their numbers in Home, Analytics and Score, to show how each video’s views change over time, to send the alerts you choose, and to answer your questions in the Kaiyros assistant. We use your username to check that the videos belong to the TikTok account that runs your TikTok Shop.

While connected, Kaiyros checks for new videos about every hour and re-reads each video’s counts on a schedule: every 5 to 15 minutes in its first day, more often while it is gaining views, and at least once a day after that.

Counts and captions of your videos received through your TikTok connection are also stored with the public copy of those videos in Kaiyros’s library.

When you disconnect TikTok videos, Kaiyros deletes its access tokens and the cover image links TikTok provided, and stops reading your videos. Your TikTok profile details and the video list and counts already saved stay in your account, so your history is kept, until you delete your account or ask us to remove them at diego@kaiyros.ai.

You can also remove Kaiyros’s access in the TikTok app under Settings and privacy → Security & permissions → Apps and services.

TikTok Shop and the shared product library

When you connect TikTok Shop, Kaiyros may use that connection to read public TikTok Shop product listings (price, commission, units sold, stock) that keep the shared product library current for all Kaiyros creators. This never reads or shares your orders, earnings, samples, Showcase or messages, and you can turn it off in Settings.

Public TikTok information

Kaiyros also collects information anyone can see on TikTok without signing in: public videos, captions, public view, like and comment counts, creator handles and public profile details, and public product listings. It collects this from TikTok’s public pages, directly or through a data provider, including public videos of creators who use Kaiyros, and keeps it in a shared library used to research products and content. From the public videos we download, we make transcripts, on-screen text and other descriptions of the content. Questions about this information can go to diego@kaiyros.ai.

The iPhone app

The iPhone app asks for each device permission only when a feature needs it. Every permission is optional: if you decline, the rest of the app keeps working, and you can change your choice at any time in the iPhone Settings app.

• Camera — used only when you record in Create video. Your videos stay on your phone unless you save, share or send them to Kaiyros to edit.
• Microphone — used only while you hold the mic to talk to Kaiyros, and to record sound with the videos you make in Create video.
• Speech recognition — Apple’s speech recognition turns your voice into text so you can talk to Kaiyros instead of typing, and transcribes the videos you remix so Kaiyros can keep their script. It runs on your phone where your device supports it; otherwise Apple processes the audio under its own privacy policy.
• Photos — Kaiyros reads only the photos and videos you pick, and saves the videos you edit to your photo library when you ask it to.
• Calendar — Kaiyros adds the events you approve, like posting times and brand deadlines. If you give it full access, it also reads your calendar to plan filming and posting around your day; those events stay on your phone unless you ask Kaiyros about them.
• Notifications — if you allow them, Kaiyros can send alerts and reminders. For notifications sent from our servers, we store your device’s push token and deliver them through Apple’s push notification service.

The iPhone app contains no advertising or third-party analytics software and does not track you across other companies’ apps or websites.

Payments

Kaiyros plans and credit packs are paid through Stripe (stripe.com) on the web and through Apple (apple.com) in the iPhone app. Stripe and Apple collect your payment details and process them under their own privacy policies; Kaiyros never receives your full card number. We receive and keep what we need to run your plan: the plan, its status and renewal dates, your purchases and their amounts, and the identifiers that link a purchase to your Kaiyros account. Subscription terms are in our Terms of Service.

Text messaging

Texting Kaiyros over iMessage is optional. If you link your phone number, Photon, our messaging provider, carries the messages between you and Kaiyros: your phone number, the messages you exchange with Kaiyros and their delivery status pass through Photon to provide the service. Your texts are answered by the Kaiyros assistant like any other conversation. You can disconnect texting in Settings to stop messaging.

Service providers

Beyond the processing described above for Google user data, Kaiyros relies on these providers to run the service:

• Google Cloud (cloud.google.com) — hosts our databases, background workers, private file storage and secrets in the United States (us-west1), and handles sign-in through Google Cloud Identity Platform.
• Cloudflare (cloudflare.com) — stores and serves the images and videos shown in the app, through Cloudflare R2.
• Stripe (stripe.com) and Apple (apple.com) — process payments, as described under Payments.
• Photon — delivers iMessage texts, as described under Text messaging.

AI providers

Kaiyros’s AI features send the information a request needs, such as your question, relevant account and workspace details, your sales and product figures, your TikTok videos’ captions and counts, and frames, audio or transcripts of your videos, to these companies. They process it as our service providers to return a result to Kaiyros:

• OpenRouter (openrouter.ai) — routes Kaiyros’s AI requests, with the account and workspace context needed to answer them, to the model companies listed here, including TypeSafe’s Jev models.
• OpenAI — writes chat answers and plans, reads video frames, and powers search over your data.
• Anthropic (anthropic.com) — writes higher-tier chat answers and video scripts. Its Claude models may also write the summaries Kaiyros keeps of videos, including a creator’s own videos, and of products in the shared product library.
• Google — its models check written scripts, and Google Cloud runs the assistant’s analysis of your data.
• Z.ai — answers when the main model is unavailable.
• TypeSafe (typesafe.ai) — checks answers for accuracy and finds brand deals in your connected Gmail, as described above.
• Microsoft — transcribes speech in your videos and editor footage.
• Groq — transcribes speech in videos you upload to match products.
• Alibaba (Qwen) — checks video search results against what you searched for.

Sharing and locations

• Kaiyros does not sell your personal information and does not share it for advertising. The website, the web app and the iPhone app use no advertising trackers.
• TikTok, Google and other services you connect process information under their own terms and privacy notices. Information is exchanged with them as needed for the connections and actions you authorize.
• If you publish a Kaiyros creator profile, the identity and sections you choose to publish can be read by anyone with its link. This can include your TikTok name and profile photo and your videos’ view and like counts. You can change those sections or unpublish the profile in Settings.
• Our core service and database are hosted in the United States. Sign-in, AI and other providers may process information in other locations.

How AI uses your data

The AI providers listed above process your information only to produce what Kaiyros asked for, such as an answer, a script, a check or a transcript, and return it to Kaiyros. They do not use it to train their AI models.

• Through OpenRouter: every request Kaiyros sends through OpenRouter to the models of OpenAI, Anthropic, Google, Z.ai, TypeSafe, Microsoft and Alibaba (Qwen) carries a setting that lets OpenRouter route it only to model providers that do not collect the data they receive. If no such provider is available, the request is not sent.
• Directly: Kaiyros sends some requests straight to the company that runs the model. These are Anthropic, for the summaries of videos and products in the shared library; TypeSafe, to find brand deals in a connected Gmail; and Groq or OpenAI, to transcribe a video you upload to match products. Each of these companies’ terms says it does not train its models on what we send.
• Google Cloud runs the assistant’s analysis of your data as code in an isolated sandbox. No AI model learns from it.
• Some providers keep a request for a limited time, typically up to 30 days, only to detect and prevent abuse, and then delete it.

Kaiyros memory

Kaiyros keeps a memory for your account so you do not have to repeat yourself. It holds two kinds of items: things you tell Kaiyros, such as your niche, your audience, your goals or how you like your hooks written; and, while learning is on, patterns Kaiyros picks up from how you use the app, such as a correction you made or a style you keep choosing. Kaiyros shows you what it learns when it learns it.

When you ask Kaiyros for something, it adds the memories that matter to that request, so its answers, hooks and ideas fit you. Memory is information stored in your account and sent with your requests, under the same limits as the rest of your data. It is not model training: memory does not change any AI model, and Kaiyros does not use your data or your memory to train an AI model, its own or anyone else’s.

• See your memory: on the web, open the Chat options menu in a chat and choose What Kaiyros remembers. In the iPhone app, tap your profile picture on Home, then Open memory.
• Change an item: choose Edit in chat and tell Kaiyros what to change.
• Undo: when Kaiyros saves, changes or learns something, the note that tells you has an Undo button, and so does the notice after you forget an item.
• Delete an item: choose Forget. Kaiyros stops using it at once and deletes it for good after 24 hours, the time you have to undo it. To delete all of your memory at once, delete your account.
• Stop learning: turn off Learn from how I use Kaiyros, on the web in Settings → Privacy & your data and in the iPhone app in your Profile, or tell Kaiyros to stop learning in a chat. Kaiyros then stops learning; what it already learned stays until you forget it.
• Deleting your Kaiyros account deletes your memory, both what you told Kaiyros and what it learned, with the rest of your account.

Your controls

• On the web, Settings → Privacy & your data lets you request a copy of your data, ask for a correction, or permanently delete all Kaiyros accounts under your login. Deletion asks for an explicit confirmation.
• In the iPhone app, you can delete your account from your Profile. Deletion asks for an explicit confirmation.
• You can also email diego@kaiyros.ai to request a copy of your data, a correction or deletion, including when you can no longer sign in. We aim to answer within 30 days. We may ask for enough information to confirm a request relates to your account; never send a password, sign-in code or authorization token.
• Settings lets you disconnect TikTok accounts, Gmail and texting, and turn off the shared product library. Disconnecting stops future syncing or messaging through that connection; it does not by itself delete what is already saved in Kaiyros.
• Deleting your Kaiyros account does not cancel a subscription billed by Apple. Cancel it in the iPhone Settings app: tap your name, then Subscriptions.
• A request to Kaiyros does not delete information held by TikTok, Google, Apple or another independent service. Use that service’s own controls as well.

Retention and deletion

Information is kept while it is needed for your account and the features you use. Deleting your account erases all active creator records under your login, including history from previously removed accounts, authorization credentials, private conversations, Kaiyros memory, calendar, deals, earnings records, your public profile, your plan and credit records, and everything Kaiyros received through your TikTok connection, such as orders, commissions, sales and private analytics.

Public TikTok information is not part of your account and stays in Kaiyros’s shared library after you delete it. That includes your public TikTok videos, their public captions and counts, what we made from those videos, the public products they show and your public profile details, but only what Kaiyros collected from TikTok’s public pages. It is no longer linked to your Kaiyros account. It is not anonymous: it keeps your public TikTok handle, as it appears on TikTok. A video Kaiyros knew only through your TikTok connection is erased, and so is anything about a kept video that only your connection supplied.

After deletion, your information may remain in encrypted database backups for up to 14 days, then it is gone. Backups are never used to bring back a deleted account. Operational logs contain technical service information and expire after 90 days. Minimal deletion records are kept for 90 days so that old sessions or backups cannot recreate an erased login. If a specific legal obligation requires us to keep a record, such as a payment record, we keep it only for that purpose and remove it when the obligation ends.

Security

• OAuth access and refresh tokens are encrypted at rest with AES-256-GCM, using a dedicated key held separately from the application database.
• All traffic to Kaiyros and between Kaiyros and Google is over TLS 1.2 or later.
• Production credentials are held in a managed secrets store, not in source control or configuration files.
• Access to production data is limited to personnel who need it to operate the service, and every Gmail read is scoped to the creator who authorised it.
• Message bodies are processed in memory and never stored, attachments are never downloaded, and only the fields listed above are retained. Our logs never contain email content or tokens.

Children

Kaiyros is for adults: you must be at least 18 years old to hold an account. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has an account, email diego@kaiyros.ai and we will delete it.

Changes to this policy

If we change how we handle data we will update this page and revise the date above. Material changes affecting Google user data will be communicated before they take effect.

Contact

Questions about this policy, or a request concerning your data, can be sent to diego@kaiyros.ai.