Privacy Policy

KSHMR LLC ("KSHMR," "we," "our," or "us") operates the Kairos application and the website at kshmr.io (collectively, the "Services"). This Privacy Policy describes how we collect, use, and protect your information.

1. Information We Collect

Account information. When you create an account, we collect an identifier (such as a username or email) and an authentication credential (password).

User-entered data. Morning ratings (energy, mood, focus on a 1–5 scale), notes, and contact records (people you track, interactions you log, close-friends selections) that you create within Kairos.

Health and fitness data.If you connect Apple Health (via the iOS app's HealthKit integration), we receive the daily rollups you authorize — typically sleep, heart-rate variability, recovery, steps, workouts, and respiratory data. WHOOP, Oura, Garmin, Fitbit, and Apple Watch users all route through the same Apple HealthKit pipeline. If you connect Strava, we receive your activity history (runs, rides, walks, swims). We do not sell, share, or use any of this data for advertising.

Calendar data. If you connect Google Calendar, we receive event metadata (titles, times, durations, locations, and conference links) for the calendars you authorize.

Financial data. If you connect a bank account via Plaid, we receive transactions, balances, account metadata, and recurring-subscription detections for the accounts you authorize. We do not sell or share this data, and we do not use it for credit decisions or advertising.

Device-sync data. If you use the optional Mac-only iPhone Sync feature, we receive metadata extracted from your local iPhone backup (such as messages, call history, photo metadata, and contacts) and store it in your account. This feature runs only on your own computer over a USB connection; the backup is not uploaded anywhere except to your own Kairos instance.

Device information. Basic technical information such as device type and operating system, used for diagnostics.

2. How We Use Information

• To provide and improve the Services
• To authenticate you and secure your account
• To compute your personal analytics (mode characterization, change-point detection, pattern coupling) on your data alone, per-user
• To respond to your support requests
• To comply with legal obligations

3. Third-Party Integrations

Kairos integrates with third-party services that you explicitly authorize: Apple HealthKit, Strava, Google Calendar, and Plaid (financial accounts). Each integration is governed by the terms and privacy policy of the respective provider. You may revoke access at any time, both from within Kairos and from the provider's own settings.

4. Data Storage and Security

Your data is stored in a managed Postgres database operated on our behalf by a cloud infrastructure provider. We protect it with the following measures:

• All data is transmitted over TLS.
• Passwords are hashed using a memory-hard algorithm; session tokens are hashed before storage.
• Third-party integration tokens (bank connections, wearable and calendar OAuth refresh tokens, etc.) are encrypted at rest using authenticated encryption.
• Optional two-factor authentication is available for every account.
• Each user's data is isolated by a per-row tenant identifier; every query is scoped to the session user.

We use industry-standard practices to protect data, but no method of transmission or storage is 100% secure.

5. Data Sharing

We do not sell your personal information. We do not share your personal data with third parties except: (a) with service providers who help us operate the Services, (b) to comply with legal obligations, or (c) with your explicit consent.

6. Your Rights

You may access, export, correct, or delete your data at any time through the application or by contacting us. Depending on your jurisdiction, you may have additional rights under GDPR, CCPA, or other applicable laws.

7. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date.

9. Contact

Questions about this Privacy Policy: support@kshmr.io

KSHMR LLC, 28 Cinnamon Dr, Upper Saddle River, NJ 07458