Khint privacy policy

1. Who we are

Khint is operated by KAZOUINI MOHAMED-AMINE, entrepreneur individuel registered in France (SIREN 102 311 560, R.C.S. Paris), based in Paris, France. We act as the data controller for the data described below. Contact: [email protected]. See also our legal notice.

2. What Khint actually does on your machine

Khint is a desktop app: a menu-bar app on macOS and a system-tray app on Windows. It reacts to three keyboard shortcuts:

• ⌘⇧K opens the action palette. Khint reads the text you have selected in the foreground app and sends it, with the prompt of the action you pick, to our inference provider (Anthropic). The result is pasted back into the same app and logged in a local SQLite database for your action history.
• Palette OCR captures the screen region on-device, then sends the image to Anthropic's Claude Vision API for text extraction. The extracted text is pasted. The screenshot is not stored beyond that single call.

Khint does not record your screen, log your keystrokes, or monitor your apps in the background. The only network calls it makes are: (a) the Anthropic call when you trigger an action, (b) optional cloud sync when you sign in (see §7), (c) calls to work tools you have explicitly connected (see §6), and (d) auto-update checks.

3. What we collect, and why

From the desktop app, when you trigger an AI action: the selected text and (if a Memory session is active) its compact context summary, sent to our backend, which forwards them to Anthropic to generate the rewrite. We need this to run the action you asked for.

From the desktop app, in your local SQLite database: your action history (input, output, timestamp, action used), your saved Actions / Packs / Chains, and your Memory sessions. This stays on your device unless you sign in.

From the desktop app, if you sign in: your Clerk-authenticated identity (email, user id), and your action history, Actions, Packs, and Chains are mirrored to our Supabase database so they sync across machines. Memory sessions stay local: they are never synced to our servers.

From the marketing site: standard hosting logs (IP, user agent, request path) at the DigitalOcean platform layer. We do not run third-party analytics or marketing trackers on this site at the time of writing.

If you upgrade to a paid plan: Stripe collects your payment details directly. We never see your card number; we only see the resulting subscription status linked to your account.

4. What we do not collect

• We do not capture, screenshot, or record your screen continuously. OCR only runs when you trigger it from the palette.
• We do not log keystrokes, monitor clipboard contents, or introspect what app you are in.
• We do not collect anything from text you have not selected, even when an action is triggered.
• We do not sell, rent, trade, or share your data with anyone outside the sub-processors listed below.
• We do not train any models on your inputs or outputs. Our inference provider also does not (per their API terms).

5. Sub-processors

Khint relies on the following third-party services to operate. Each one only sees the data it needs.

• Anthropic(Claude API, USA): receives the selected text and active session context when you trigger an AI action; returns the rewritten text. In the app the model picker shows modes, not vendors: both Instant and Quality currently run on Anthropic Claude models, and the PowerPoint diagram feature runs on Claude too. Anthropic's commercial API terms forbid training on inputs and outputs.
• OpenAI(API, USA): only if you select an OpenAI model in the app's AI Model settings. When selected, it receives the same per-action payload Anthropic otherwise would, under OpenAI's API terms (no training on API inputs/outputs). No OpenAI model is enabled by default.
• Your own AI provider (Lifetime plan): on the Lifetime plan you bring your own API key (Anthropic, OpenAI, Mistral, Gemini, Qwen, or Z.AI). Your selected text goes to that provider under your own account and their terms. The key is attached per call, used in memory only, and never stored or logged on our servers. Those calls also produce no usage records on our side.
• Groq(speech-to-text API, USA): only when you use voice dictation (opt-in: it does nothing until you bind a dictation shortcut). While you hold the key, the microphone records; on release the audio clip and a short vocabulary hint (names of your agents and workflows, used to spell technical terms correctly) are sent through Khint's backend to Groq, which returns the transcript. Zero Data Retention is enabled on our Groq account: audio and transcripts are not stored and not used for training. The microphone is never open outside the key hold, and Khint keeps no server-side copy of the audio.
• Clerk (authentication, USA): handles sign-up, sign-in, and session tokens for accounts that opt in to cloud sync. Clerk receives your email and authentication metadata.
• Supabase (Postgres database, EU region): stores the cloud-synced copy of your Actions, Packs, and Chains, plus action-history metadata (action name, timestamp, duration, never the text in or out, which stays on your device). Memory sessions are never synced. Encrypted at rest and accessed only by our backend service key.
• Stripe (billing, USA / Ireland): processes paid subscriptions. Stores card and billing data; we do not.
• DigitalOcean (hosting, USA): serves this marketing site and the Khint backend API. Standard request logs.

6. Work integrations & Google user data (Gmail)

Khint can connect to work tools you already use: Jira, Confluence, Linear, Notion, Slack, and Gmail. Every integration is opt-in— you connect it yourself from the MCP page in the app — and its credentials (API tokens or OAuth tokens) are stored in your operating system's keychain, on your device, never on our servers. Content you pull from a connected tool lands in your local Memory session (local SQLite, never synced to our cloud). Writes (creating an issue, posting a message, drafting an email) go directly from your device to the tool's API.

Gmail specifically.Connecting Gmail runs Google's OAuth consent flow on your device. Khint requests two scopes: gmail.readonly, used only to pull an email thread or search results into a Memory session when you explicitly ask for it, and gmail.compose, used to create drafts and to send email — every send shows you the recipient, subject, and body and requires your explicit confirmation first. Your Google tokens live in your device keychain; our servers never see or store your tokens or your mailbox content.

Gmail content you pull is stored only in the local database on your device. It is never synced to our cloud, never used for advertising, never sold, and never used to train AI models. If a Memory session is active, pulled content can be reflected in the session's compact summary, which is computed transiently through our backend and Anthropic (see §5) and is not stored server-side. No human at Khint can read your Gmail data.

Khint's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Gmail at any time with "Forget credentials" on the Gmail card in the app (deletes the tokens from your keychain), or revoke Khint's access from your Google account permissions page. Uninstalling Khint removes the locally stored content.

7. Cloud sync is opt-in

Cloud sync only runs once you sign in inside the desktop app. If you never sign in, none of the data described in §3 leaves your device (with the exception of the per-action call to Anthropic, which is required for the AI action itself). When you sign out, local data stays; only the sync stops.

8. Data retention

Local SQLite data lives on your device until you uninstall Khint or delete the app's storage directory. Cloud-synced data lives in Supabase until you ask us to delete it. Anthropic retains API request data per their commercial policy (typically 30 days of operational logs, no training); the same applies to OpenAI if you selected an OpenAI model.

9. Your rights

If you are in the EU/UK, you have rights under GDPR/UK GDPR: access, rectification, erasure, restriction, portability, and objection. To exercise any of them, email [email protected]. We aim to reply within 30 days. We will not require a special process or fee. You can also lodge a complaint with your local supervisory authority.

You can also: uninstall Khint to wipe the local database; delete cloud-synced data by emailing us (we will automate this once we have more users).

10. International transfers

Anthropic, OpenAI (if selected), Clerk, Stripe, and DigitalOcean are USA-based. Supabase hosts our database in the EU. Where data is transferred outside the EU/UK, we rely on the providers' Standard Contractual Clauses (SCCs) and equivalent safeguards.

11. Children

Khint is not directed at people under 16. We do not knowingly collect personal data from minors.

12. Changes to this policy

We will update the "Last updated" date below when this policy materially changes. For significant changes (new sub-processor categories, data uses), we will also post a notice on our changelog page before the change takes effect, and surface an in-app notice the next time you open Khint.

13. Contact

Questions, concerns, or rights requests: [email protected].