Privacy Policy

Your files

Every tool marked “Runs in your browser” reads your file locally using standard browser APIs. The file is never transmitted to us, never written to a server, and never stored. Closing the tab discards it.

If a tool ever requires server-side processing, its page will say so explicitly, and the file will be deleted automatically within one hour of processing. No tool on KIVO does this today.

Accounts

There are none. You do not create an account to use KIVO, and we do not collect email addresses, names or passwords.

The optional local profile (My KIVO)

• History — which tool you used and when, with the details the tool reports about the job (a format, a number of pages). Never a file, a file name or anything you typed into a tool. You can switch it off, delete single entries or all of it.
• Favourites — the tools you pin.
• Drafts and presets — what you were typing into a tool (an invoice, a bibliography, a calculator's numbers), so it is there next time. Clear them from the profile page whenever you like.
• A name, if you give one, used only to greet you on that page.
• My details — the name, tax code, address, contacts, VAT number and IBAN you type on the profile page, one set per space (Personal, Work…). Tools read them only when you press “Use my details”.
• The document drawer — the only files the profile ever holds, put there one by one by you. Each is encrypted with AES-256 under a PIN you choose before it is stored; the label, type and expiry date you give it stay readable so the page can warn you before it expires. A forgotten PIN cannot be recovered by anyone, us included.
• Deadlines, saved paths, and totals — the deadlines you add, the sequences of tools you carried a result through (tool pages only), the totals of the invoices and expense reports you downloaded, and how many files were made and how many bytes the privacy meter saw leave the page.

If you choose to, you can create a profile on the My KIVO page. It is not an account: it is a small database inside your browser (IndexedDB), and it is never sent to us or to anybody else. Nothing is kept until you create it and accept these terms.

Deleting the profile deletes the database. Clearing your browser's data deletes it too, and some browsers clear a site's data on their own after a period without visits (Safari after seven days, unless the site is installed on the home screen) — which is why the page offers a backup file. The backup is a file you keep; it can be encrypted with a passphrase, and a forgotten passphrase cannot be recovered by anyone, us included.

What is stored on your device

• Theme preference — light or dark, in your browser's local storage.
• Language preference — a cookie named kivo-locale. This is the one item here that travels with each request, because the server has to know which language to serve before it builds the page.
• Saved recipes — the workflows you build on the Recipes page, in local storage.

Apart from the language cookie, none of this leaves your device. All of it is functional: it exists because you chose something and expect the choice to stick. Clearing your browser data removes it.

KIVO Gamers: services you choose to connect

• Twitch — the stream kit and Chat Royale read your channel's public chat, anonymously and read-only. Nothing is posted and no login is used.
• Audius — “Find a song” in Beat Run sends the words you search for to Audius, loads the covers from its servers, and downloads the song you pick so the level can be built on your device. The song is not kept after the run.
• Discord — only if you paste a webhook address, the messages you choose to send go to that channel.
• Beat Run Live — the sound of the browser tab you choose to share is analysed on your device while it plays. It is never recorded, stored or sent anywhere.

Game progress — records, the Aim Odyssey campaign, missions, unlocked ships — stays in your browser's local storage. If you have a My KIVO profile it also goes into the profile's backup and transfer file; the Discord webhook address you may save for the stream kit is left out of both.

A few features talk to an outside service, only when you use them. That service then sees your IP address, as with any website, and its own privacy policy applies:

KIVO Cloud: only the features you turn on

• Sync — your profile, encrypted on your device with a key that only your devices hold (it travels in the QR code, never to us). We store a copy we cannot read, deleted 6 months after it was last used or when you turn sync off everywhere.
• Live boards — what you draw is encrypted with the room's key and passed to the others in the room as it happens. Nothing is written to disk.
• Leaderboards — the nickname you choose, your score and a random player id; daily and weekly boards are deleted after 60 days.
• Reminders — the push address your browser gives us, the dates of your deadlines and a generic text (the deadline's name only if you ask for it). Each reminder is deleted once sent; an unused subscription after 120 days.
• Twitch moments — the channel name; while the watch runs our server reads the public chat anonymously and stores only the moments (time, kind, intensity, the most repeated short message). Kept 14 days.
• GPU AI — the audio you send goes to Replicate (USA) for processing and is deleted there within a day; summaries are written by Anthropic's Claude from the transcript. We keep the job record for 2 days.
• E-invoices to the SdI — the invoice XML goes to A-Cube, an accredited intermediary, and on to the Agenzia delle Entrate's SdI, which keep it as Italian law requires. We keep its status for a year.
• For limits, your device's random id and your IP address are kept only as salted hashes, for a few days.

KIVO Cloud is the one part of KIVO that uses our server, and only for the features you turn on there, one at a time, after reading what leaves. Our server runs in the EU. Nothing below happens unless you choose it.

The data on our server is handled by KIVO's owner, named in the site's legal details. Each feature keeps the least it needs, with an expiry:

Analytics

Usage is measured with Umami, self-hosted on our own subdomain. It is not Google Analytics, and no third party receives a copy.

It sets no cookies and writes nothing to your device. Visitors are counted with an anonymous identifier our server derives from the IP address and the browser, mixed with a secret that changes over time; the IP address itself is never stored.

What it records is a visit to a page: the page's address (never the part after the #, where shared links carry their contents), the site you came from, browser, operating system, device type, screen size, language and country. That is all. It does not record what you do inside a tool, and never file contents, file names or anything you type. There is no advertising network, no third-party tracker and no profile that follows you between sites.

What you do inside a tool stays on your device. If you turn on the optional KIVO profile, its history is kept there, in your browser — not with us.

You can switch it off below, on this page.

Why there is no cookie banner

Because there is nothing to ask you about. KIVO sets no advertising or tracking cookies, and everything listed above is functional — the kind of storage that is exempt from consent precisely because you asked for it.

The analytics script reads a single key from your browser, umami.disabled, and only to check whether you have opted out. It writes nothing.

If that ever changes — advertising is the obvious case — you will get a real choice before anything loads, rather than a banner that assumes the answer is yes.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. In practice we hold no personal data about you to act on — but if you believe otherwise, get in touch and we will investigate.

Changes

If this policy changes materially — in particular if any tool starts processing files on a server — the change will be reflected on the affected tool pages, not buried here.