Account information: your username and a salted hash of your password (we never store plaintext passwords). If you sign in with Google, we store only the Google-assigned user id (sub) for login matching.
Usage data: model-call metering (tokens, credit spend, which model) for billing and quota enforcement.
Payment information: purchases are processed by Stripe; we never see or store your card number.
Your conversations, code and files: KelvinAI is local-first — those stay on your device. The relay forwards session commands and returns only billing metadata (model, token counts); it never reads or stores content.
Your API keys: self-configured model keys never leave your device.
Usage data serves billing, abuse prevention and product improvement only, and is never sold.
Model requests are forwarded to the upstream provider you selected, limited to what the inference requires.
Export or stop using the service at any time from your account page. To delete your account, contact us — usage records are purged after the minimum retention period required by law.