Privacy Policy

kyoshi ("we," "us") is operated by Gaurav Jain, an individual based in Singapore. This policy explains what information kyoshi collects, how it's used, and who it's shared with. If anything here is unclear, get in touch and ask.

Information we collect

Account information: your name, email address, and a securely hashed password (we never store your actual password).

Content you create: chat messages, situations, commitments, and anything else you type into kyoshi. This is encrypted — see "How your content is protected" below.

Payment information: if you upgrade to a paid plan, billing is handled entirely by Stripe. We never see or store your card number — Stripe shares back only what's needed to run your subscription (plan, status, billing dates).

Usage information: which Learn pages you view, quiz scores, and how many messages, situations, and Practice sessions you've used — needed to run your plan's limits and improve the product.

Technical information: IP address and standard web server logs, and information Cloudflare's bot-protection check (Turnstile) uses to confirm you're a real person signing up, not a script.

How your content is protected

Your messages and other written content are encrypted, not just "encrypted at rest" in the generic sense. How the encryption key is protected depends on how you signed up:

• If you signed up with an email and password, your content is encrypted with a key derived from that password. In practice, this means your content is protected even from us in the ordinary course of operating the service — we can't casually browse what you've written.
• If you signed up with Google, there's no password of yours for us to derive a key from, so your content is instead encrypted with a key we hold on our own servers — the same approach most apps use. It's still encrypted, and still protected from casual access, but not to the same standard as a password-derived key.

How we use your information

• To provide the service — running your conversations, generating responses, tracking your situations and commitments.
• To enforce the limits of your plan (Free, Plus, or Pro).
• To send you account-related email — verifying your address, confirming a plan change. We don't send marketing email unless you separately ask for it.
• To keep the service secure and prevent abuse (like the Turnstile bot check on signup).
• To improve kyoshi — understanding which frameworks and features are actually useful.

Who we share information with

kyoshi runs on a small number of third-party services, each processing only what they need to do their specific job:

• Anthropic — processes your chat messages to generate kyoshi's responses.
• OpenAI — processes text to power search/retrieval across kyoshi's Learn content.
• Stripe — processes payments for Plus/Pro subscriptions.
• Resend — delivers account emails (like email verification links).
• Cloudflare — provides the bot-protection check on signup.
• Google — if you choose to sign in with Google, authenticates you and shares your name and email with us.
• Amazon Web Services (AWS) — hosts the application and database, in Singapore.

We don't sell your information, and we don't share it with anyone for their own marketing purposes.

Cookies

kyoshi uses one cookie: a session cookie that keeps you logged in. There's no advertising or analytics tracking on this site.

How long we keep your information

We keep your information for as long as your account is active. If you'd like your account and data deleted, contact us and we'll take care of it — there's no self-serve delete button yet.

Your rights

You can review and update your name and email anytime in Settings. For anything else — a copy of your data, correction, or deletion — contact us.

Children's privacy

kyoshi is intended for working professionals and isn't directed at anyone under 18. We don't knowingly collect information from anyone under 18.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy: get in touch.