Privacy Policy
Last updated: 7 November 2026
Kitomi ("Kitomi", "we", "us") is a voice assistant app for macOS, developed and operated by Masoud Vatankhah. This policy explains what information Kitomi handles, why, where it goes, and the choices you have. Contact: support@kitomi.app.
1. The short version
- Kitomi runs on your Mac. Your memory, conversation history and activity log are files on your Mac, not on our servers.
- The wake phrase “Hey Kitomi” is detected on your Mac. Nothing is sent to an AI service before you say it.
- Your screen, clipboard, files, messages and email are sent to an AI service only when you ask Kitomi something about them, and are not kept afterwards.
- If you connect Gmail, Kitomi uses the permissions you grant to read, summarize, draft and (only with your approval) send email for you. We do not sell your Google data, use it for advertising, or use it to train AI models.
2. Information Kitomi handles
| Information | Why | Where it lives |
|---|---|---|
| Your voice, after you say the wake phrase | To understand your command or hold a live spoken conversation | Streamed to a speech and AI service for that conversation only. Not stored by Kitomi. |
| Your typed and spoken requests and Kitomi's replies | To answer you and keep context for follow-ups | Recent turns are kept in a local file on your Mac. Requests are processed by AI model providers (section 5). |
| Things you ask Kitomi to remember (e.g. your name, preferences, home city) | To personalize answers | A local file on your Mac. You can view and delete items in Kitomi's settings. |
| Screen captures, copied text, dropped files | Only when you ask (for example “what's this?”) | Sent to an AI provider for that one request. Not stored. |
| Messages and Mail on your Mac | To tell you about new items and to read, summarize or reply when you ask | Read locally on your Mac with the permission you grant in macOS. Text is passed to an AI provider only to answer your request, and is not stored or logged. |
| Activity log | So you can see what Kitomi did on your behalf | A local file on your Mac. It records the tool, the time and the person or account involved, never message or email text. |
| Basic technical data when Kitomi contacts our servers | To keep the service running and secure | Standard server logs (IP address, time, request path) kept for a short period for security and debugging. |
3. Google user data (Gmail)
If you choose to connect a Gmail account, you sign in with Google in your web browser and approve the following permissions (scopes). Kitomi requests no others.
| Permission | What Kitomi uses it for |
|---|---|
gmail.readonly | Find and read emails when you ask (for example “read my latest email”, “anything from my manager?”), tell you when an important email arrives, and summarize an email you opened. |
gmail.compose | Create a draft for you to review, and send or reply to an email only after Kitomi shows you the recipient and text and you approve it. Kitomi can never send an email without this approval. Kitomi does not use this permission to change, label or delete any existing email. |
openid, email, profile | Show which Google account is connected and its name. |
How Google data is handled
- Stored on your device. Your Google sign-in token is stored in the macOS Keychain on your Mac. Kitomi does not keep copies of your emails: email text is read when you ask, used to produce the answer, and then discarded. Email text is not written to Kitomi's logs, history or activity log.
- Sent to AI providers only to answer you. When you ask for a summary or a reply, the relevant email text is sent to an AI model provider (section 5) solely to produce that answer.
- No sale, no ads, no training. We do not sell Google user data or transfer it to data brokers, advertisers or information resellers. We do not use it for advertising, for credit or lending decisions, or to develop, improve or train generalized AI or machine-learning models, and our AI providers are used under terms and settings that do not allow them to train on this data.
- No human reading. Our people do not read your Google data, except where you ask us to for support and give your consent, where needed for security (for example investigating abuse), or where the law requires it.
- Limited Use. Kitomi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and deleting
You can disconnect a Gmail account at any time in Kitomi's settings (Connectors → Gmail → Remove); this deletes its token from your Keychain. You can also revoke Kitomi's access in your Google Account at myaccount.google.com/permissions. After either, Kitomi can no longer access that account.
4. Permissions on your Mac
Kitomi asks macOS for permissions only for features you use: microphone (voice), screen recording (“what's this?”), automation (opening apps, sending messages and Mail), and Full Disk Access (reading Messages and Mail). You can turn any of them off in macOS settings, and each connector can be turned off or set to “ask first” in Kitomi's settings.
5. Who else processes data
Kitomi relies on service providers to work. They process your data only to provide their service to us and to you:
- Google: the Gmail API (if you connect Gmail) and Gemini for live voice conversations.
- AI model and speech providers, reached through our gateway or directly, to understand speech and generate replies.
- Hosting: our servers are hosted in the European Union.
Requests that pass through our gateway are forwarded to the provider and are not stored or used by us for any other purpose. We do not sell personal information.
6. Security
Connections to our servers use HTTPS. Tokens are kept in the macOS Keychain. Kitomi treats text from screens, web pages, messages and email as data and not as instructions, and will not send messages or email, or delete anything, without your approval. No system is perfectly secure; if you believe your data is at risk, contact us.
7. Your choices and rights
You control Kitomi's data on your Mac: view or delete memory in settings, delete the history and activity files, disconnect connectors, or uninstall the app. For any data we hold, you may ask us to access, correct or delete it by writing to support@kitomi.app.
8. Children
Kitomi is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their information.
9. Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app or on this site. For changes affecting how Google data is used, we will ask for your consent again.
10. Contact
Masoud Vatankhah, Kitomi — support@kitomi.app — kitomi.app