Privacy Policy

Keiro never keeps your chat with Kai. Conversations are processed in the moment and are gone when your session ends — we cannot read them back, retrieve them, or share them with anyone.

If you use Keiro as a guest, we store nothing about you at all. If you sign in (phone, Google, or email), we store only your sign-in details, your language preferences, and the medical reports Kai prepares for you — so you can find them again. You can download or delete everything, any time, in Settings.

Everything you type or say to Kai stays in your browser while you use the app. Messages are sent to our AI provider to generate Kai's reply and are not written to our database — not for guests, not for signed-in users. We have no way to look up what you told Kai.

• Account details — the phone number, email address, or Google account ID you signed in with, and the name you gave us (if any).
• Preferences — your chosen language, voice, and display settings.
• Your reports — the structured medical summary Kai prepares (symptoms, medications, and similar details you chose to include). This is health information, and we treat it that way: it is stored encrypted, visible only to your account, never shared, and deleted the moment you ask.
• Usage counters — how many requests your account made recently, used only to prevent abuse.

We process this health information only with your explicit consent, which you give when you start a conversation. You can withdraw it at any time by deleting your data in Settings — deletion is immediate and permanent.

When you use Keiro without signing in, we create a random token (like a temporary ID number) so the app works correctly during your visit. It has no name, no birthday, no phone number attached, and it cannot be used to identify you. Your report exists only in your browser tab and disappears when you close it — if you download the PDF, that file stays on your own device.

Keiro uses one essential session cookie that makes sign-in work. It cannot be turned off because the app would not function without it.

If — and only if — you tap "Allow analytics" in the cookie banner, we also collect anonymous usage events through PostHog: which pages were visited, which language was chosen, and how many messages were sent. Never the content of anything you typed or said. Session recording is disabled. If you decline, analytics stays completely off, and you can change your mind any time in Settings.

We do not use advertising cookies. We do not sell your data. We do not follow you around the internet.

Kai is an AI assistant that helps you describe your symptoms in your own language. Kai is not a doctor. Keiro does not diagnose conditions, recommend treatments, or replace professional medical care. Always talk to a real healthcare provider about your health.

Kai is powered by an AI system. AI can misunderstand things or make errors. The report it creates is a starting point for your doctor — not a final medical opinion. Your doctor will ask you their own questions and make their own decisions.

Because Keiro does not store health information on its servers, it does not fall under HIPAA (the US health privacy law). If your clinic uses Keiro, the clinic is responsible for its own HIPAA obligations.

• Chat messages — never stored.
• Guest sessions — expire automatically after 2 hours.
• Reports and account details — kept until you delete them or your account.
• Anti-abuse usage counters — deleted on a rolling basis after a few days.
• Error logs (Sentry) — kept 90 days, never contain message content.

Health information is "special category" data under GDPR Article 9. We process it only on the basis of your explicit consent, given before your first conversation, and you can withdraw that consent at any moment. Your rights:

• Right to access — see everything we hold (Settings → Download my data).
• Right to portability — the download is machine-readable JSON plus your PDF reports.
• Right to deletion — Settings → Delete all my data removes everything immediately.
• Right to correction — you may ask us to correct inaccurate data.
• Right to object / withdraw consent — stop using the app, decline analytics, or delete your data.
• Right to complain — you may lodge a complaint with your local supervisory authority.

For anything you cannot do in Settings, contact us and we will respond within 30 days.

If you are a California resident, you have rights under CCPA. We do not sell your personal information. We do not share it for cross-context advertising. Because we collect almost no personal data, there is very little we hold about you. You may contact us to ask what we have and request deletion at any time.

Keiro is not designed for children under 13. We do not knowingly collect information from children under 13. If a child needs help at a medical appointment, a parent, guardian, or clinic staff member should use the app on their behalf.

If you believe a child under 13 has provided us information, please contact us at privacy@keiro.app and we will delete it immediately.

• Google (Gemini)— processes your messages during your session to create Kai's responses and your report. Keiro uses Google's free API tier; under Google's Gemini API terms, content submitted on that tier is used to improve Google's products, human reviewers may read API input and output, and Google directs that sensitive, confidential or personal information should not be submitted to it.
• Groq (Whisper) — if you use voice input, your audio clip is transcribed and immediately discarded.
• DeepL / Google Translate — translate interface text and, where needed, parts of your report so your doctor can read it.
• Supabase — runs our database and sign-in. Stores account details and reports for signed-in users (encrypted, row-level security).
• Sentry — records technical errors (like app crashes) so we can fix bugs. Error reports never include anything you typed or said to Kai.
• PostHog — anonymous usage analytics, only if you opted in via the cookie banner.
• Resend — delivers contact-form emails if you write to us.

None of these providers may use your information for their own advertising or commercial purposes.

All connections to Keiro use encryption (HTTPS / TLS). Data at rest is also encrypted. Our database uses row-level security so each session can only access its own data.

If you have any question about this policy, or want to exercise any of your rights, email us at: privacy@keiro.app. We will reply within 10 business days.