Kess Privacy Policy
Effective date: September 14, 2026.
Kess is a personal assistant app made by Kessway Technologies Inc.
What Kess collects
**Your conversations with Kess.** The messages you type or say to Kess, and any photos you attach, are sent to our server and then to Anthropic (the Claude AI model) to generate Kess's replies. When you turn on spoken replies, the text of Kess's reply is sent to ElevenLabs to produce her voice. When you approve a phone call, the call script is sent to Retell, which places the call. The app shows you this notice and asks for your agreement the first time you open it; nothing is sent before you agree.
**Information from services you connect, when needed to answer you.** If you connect your calendar, email, reminders or other services, the specific details Kess needs to answer a request (for example, today's events or a draft you asked her to write) are included in what is sent to Anthropic for that request. Kess only reads what the request needs.
**Your approximate location**, only when you ask for something nearby and only after you allow location access on your iPhone.
**Account connections you choose.** If you connect Google (email, calendar), social accounts, or other services, Kess stores the access tokens needed to act on your behalf. Kess only acts when you approve an action.
**A device identifier.** Kess uses an anonymous identifier to link your device to your data. Kess does not require an account and does not collect your name.
What Kess does not do
Kess does not sell your data.
Kess does not use your data to advertise to you.
Kess does not act on your accounts without your explicit approval.
Kess does not train AI models on your data. Anthropic, ElevenLabs and Retell receive only what is needed to provide their service to Kess, and each protects that data under its own privacy policy and terms, which we have reviewed and hold to the same standard as ours.
Google user data
If you connect your Google account, Kess asks for four permissions and uses each one only for the feature it names:
**Send email (gmail.send).** Kess sends the emails you asked for and approved, from your own address. Kess does not read your inbox and does not ask for any permission that could.
**Calendar (calendar).** Kess reads your upcoming events to answer questions and prepare your daily brief, and creates, moves, or cancels events when you ask and approve.
**Contacts (contacts.readonly) and Other contacts (contacts.other.readonly).** When you mention a person by name, Kess looks up that person's email address or phone number so it can address the email, text, or call you asked for. Kess reads contacts only to find who you named. It never edits, exports, or stores your contact list.
Kess's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
### With whom Google user data is shared
Kess does not sell, rent, or trade Google user data, and does not use it for advertising, for building profiles, or for training AI models. Kess does not share, transfer, or disclose Google user data to anyone except in these cases:
**Service providers acting on our instructions, only for the request you made.** When you ask Kess to do something that needs Google data, the specific pieces needed for that request are sent to Anthropic (which runs the Claude AI model that composes Kess's replies) so it can draft the email or read the events you asked about. If you turn on spoken replies, the text of the reply is sent to ElevenLabs to produce Kess's voice. If you approve a phone call, the contact name and phone number for that call are sent to Retell, which places the call. Each provider is contractually limited to processing this data to provide its service to Kess and may not use it for any other purpose. Your Google access tokens are never sent to any of these providers.
**Google itself**, when Kess sends an email or changes a calendar event on your behalf, because that is how the action is performed.
**When required by law**, such as a valid court order, and only to the extent required.
**With your explicit direction**, for example the person you told Kess to email.
Kess does not transfer Google user data to any other third party, and no human at Kessway reads your Google data except when you ask us for support and give permission, when needed to investigate abuse or a security incident, or when required by law.
### How Google user data is protected
**In transit.** Every connection between the Kess app, our servers, Google, and our service providers uses TLS encryption.
**At rest.** Google access tokens and any cached Google data are stored on our servers in a database on a private network that is not reachable from the public internet. Access to the servers is limited to Kessway's founder.
**Minimal use.** Kess reads only the Google data a request needs, at the moment it needs it, and does not build a copy of your inbox, calendar, or contact list.
**Your control.** Every email, calendar change, and call is shown to you first and happens only after you tap Approve. You can disconnect Google or delete everything Kess holds from the app's Settings at any time, which removes your Google tokens from our servers immediately. You can also revoke Kess's access from your Google Account permissions page.
**Retention.** Google access tokens are kept only while your Google account is connected. Data from a request is kept only as long as the conversation it belongs to, which you can clear at any time.
Storage and deletion
Your data is stored on our servers over encrypted connections, in a database on a private network. You can delete all your data at any time from the app's Settings ("Delete my data"), which removes your conversations, connections, and access tokens from our servers. Disconnecting a service removes its tokens from our servers.
Contact
Kessway Technologies Inc.
Email: office@kessway.com