To provide a feature you use, we pass the information it needs to the providers below. Each one happens only when you use that feature and is used only for it. This list is part of the Privacy Policy; what we collect ourselves is in Personal Information Collected.
We do not sell your personal information, and we use no third-party analytics, advertising or crash-reporting tools.
Sign-in and account
SMS: Alibaba Cloud, Tencent Cloud or Volcengine (one of them sends each message)
What it's for
Sending the code when you sign up, sign in, link or change a phone number
Information involved
Phone number and verification code
How
Our server calls the SMS service
Offline IP database (DB-IP)
What it's for
Telling whether you are in mainland China or elsewhere
Information involved
None: the database is kept on our own servers and looked up locally; nothing is sent to DB-IP
How
Offline database (IP Geolocation by DB-IP, CC BY 4.0)
Google
What it's for
Signing in with or linking a Google account; looking up places outside China
Information involved
Sign-in: after you sign in on Google's page, Google gives us your user id and verified email; places: coordinates and search terms
How
Your browser goes to Google to sign in; our server calls Google Maps
Sign in with Apple (iOS / iPadOS)
What it's for
Signing in with or linking an Apple account
Information involved
Apple gives us your user identifier for this app and an authorization token (no name or email); when you delete your account or unlink Apple, we send the token back to Apple to revoke the authorization
How
Built-in Sign in with Apple on iOS / iPadOS; our server calls Apple
Maps and location
AMap (Gaode)
What it's for
Looking up places, addresses, routes and weather inside China; getting your location on Android
Information involved
Coordinates and search terms; on Android, after you allow location, the AMap location component gets your position (using the device and network information location needs; see AMap's privacy policy)
How
Our server calls AMap; the Android app includes the AMap location component
Map provider outside China
What it's for
Looking up places and addresses outside China
Information involved
Coordinates and search terms
How
Our server calls the map service
Files, review, calls and voice
Mail providers (such as Outlook / Hotmail, Gmail, iCloud, QQ and NetEase)
What it's for
Connecting to mailboxes you add, receiving and sending messages, and browser authorization, renewal and revocation where supported
Information involved
Mailbox address, authentication credentials, recipients and senders, subject, body and attachments; authorization codes, access/refresh tokens and mailbox identity during browser authorization
How
Devices access the mail provider directly; the relay exchanges and decrypts OAuth tokens. Removing KelvinAI mail configuration does not automatically revoke provider authorization; Outlook / Hotmail revocation must be completed on Microsoft's official page
Alibaba Cloud Object Storage (OSS)
What it's for
Storing chat files, cloud-drive files and avatars
Information involved
The files you upload
How
Stored at the node you use (mainland China or Hong Kong, China)
Alibaba Cloud Content Moderation
What it's for
Checking public information others can see and that stays up, before it is shown
Information involved
Nicknames, avatars, bios, regions, Moments covers, group names and notices, the names / titles / avatars of bots and AI colleagues, and mini-app names / descriptions / icons / share details
How
Our server calls the service
Alibaba Cloud Intelligent Contact Center
What it's for
Letting the AI place phone calls for you
Information involved
The number called, the opening line and the call content (the other side's speech is turned into text for the AI to answer)
How
Our server calls the service
Volcengine (Doubao Speech)
What it's for
Voice input, voice calls with AI colleagues and read-aloud
Information involved
Audio and text (processed in real time; we keep no recordings)
How
Relayed in real time through our server
AI and generation
AI model providers (currently: Zhipu AI, Alibaba Cloud, Volcano Engine, Baidu AI Cloud, DeepSeek, Moonshot AI (Kimi), StepFun, Anthropic, OpenAI, xAI, MiniMax, Xiaomi, ElevenLabs, Brave)
What it's for
Official models, image reading, unread-message summaries, voice-input tidying, picture generation and other AI features
Information involved
The messages, images, files and tool results you send to the AI
How
Passed to the maker of the model you choose; some requests go through a relay gateway we run ourselves first; we ask for your agreement before your content first goes to AI
Search, image and video providers
What it's for
Web search, pictures and videos
Information involved
Search terms; descriptions and reference images for pictures and videos
How
Our server calls the service; picture requests go through a relay gateway we run ourselves
Payments and notifications
Stripe
What it's for
Top-ups other than In-App Purchase on iPhone / iPad (cards, Alipay, WeChat Pay)
Information involved
Your account number and the top-up tier you pick; card and payment details go straight to Stripe and we never see them
Purchases: Apple handles payment and we receive only Apple-signed transaction records; notifications: the sender's name and the first few words (up to 60 characters)
How
iPhone / iPad In-App Purchase and Apple's push service