Privacy Policy 🔒

Account basics. Your email address, username, and password (encrypted, we couldn't read it if we wanted to).

What you create. Text prompts, character definitions, chats, and images you upload or generate.

Your Kyara Intelligence connection. If you connect a Kyara Intelligence account or API key, we store what keeps it working: your Kyara Intelligence user ID, your plan and its status, when your billing period ends, whether you have purchased credits, and your API key or the token that replaces it. A linked account also shares its email address with us. We never store your Kyara Intelligence password. All of this is removed when you disconnect or delete your account. While your plan is active, its name shows as a badge on your public profile, and staff can see it.

Moderation notices. When a moderator acts on your card, comment, or account, we keep a notice addressed to you: what was affected (including the text of a removed comment), the moderator's reason, and when you read it. If you reply to a moderator or appeal a decision, we keep what you write with it, and moderators can read it. Notices, replies and appeals are deleted with your account.

Technical data. IP address (anonymized where possible), browser type, and device information, collected via Cloudflare.

How you use the chat. For every AI reply you ask for, we record usage details: when it happened, the model and route it used (including a linked Kyara Intelligence account), its size and settings, how many tokens it took, what it cost, how long it took, and whether it worked. They are linked to your account and chat, but never include the text of your messages or of the replies.

Aggregate page views. We use Cloudflare Web Analytics to see which pages are visited and how the site performs. It sets no cookies, stores nothing in your browser, does not fingerprint your device, and never follows you across sites. We only ever see anonymous totals, never who you are.

Cookies & local storage. A session token to keep you logged in, and local settings like your theme preference. That's the full list.

Running the service (contractual necessity). Creating your account, keeping your library and chats in order, generating AI responses, and applying the perks of your Kyara Intelligence plan.

Safety & moderation (legitimate interest). Detecting content policy violations and enforcing platform eligibility. Moderation filters run through the same AI provider used for chat, or on our own servers. Your messages are never sent to a separate third-party moderation service, so the same privacy controls and training restrictions that protect your chats also apply to moderation.

Legal compliance (legal obligation). Complying with applicable EU law when we genuinely have to.

Improving the service (legitimate interest). Studying those usage details to catch failures, slow models and costs, and to decide which models and features to offer. They stay on our own servers, and are never sold or used for ads.

Understanding site usage (legitimate interest). Counting page views and load times in aggregate through Cloudflare Web Analytics so we know what's working and what's broken. Nothing in it identifies you or builds a profile.

And that's it. No tracking, no ad profiles, no engagement tricks.

In CT Direct mode (the default), your chat inputs are sent to our AI routing provider, OpenRouter, which forwards them to the selected model provider. We configure OpenRouter to only use providers that do not train on your prompts or chats, based on OpenRouter's provider privacy controls and the providers' stated policies.

If you connect a Kyara Intelligence (KI) account or API key, chats with eligible models go to Kyara Intelligence instead, on your own plan and credits. Same rule there: no training on your prompts or chats.

Active account: as long as your account exists, so does your data. That's the deal.

Deleted account: erased within 30 days, except usage details and the rare bits the law requires us to keep.

Usage details: kept 2 years, then deleted automatically, even after you delete your account.

For anything privacy-related, contact our Data Protection Officer at [email protected].