Privacy
This page is the plain-English version of how Keva treats your data. The short version: it stays on your phone.
On your device
Your files, conversations, history and model keys are stored locally on your device. Keva does not upload them to its own servers.
What leaves your phone
1. Your conversation + files you explicitly attach → sent directly to your chosen model provider under their terms, with your key.
2. An anonymous version check to Keva's update endpoint — no ID, no content, minimal fields. The request path carries a coarse install-age range (0, 1–2, 3–6 or 7+ days since install) so we can count anonymous totals of active installs; it cannot identify you or your device. Some releases ship mandatory updates for security and stability, so this check always runs and can't be turned off.
3. If you sign in, purchase a license or manage devices, the information needed for those actions — such as your email address, license status, transaction reference and a random installation identifier — is sent to Keva's license service. Payment card details are handled by Paddle, not Keva.
License and payment data
We use verified email, payment references and a cryptographic device-key fingerprint to activate a license and enforce the two-device limit. We do not use IMEI, Android ID, precise location, contacts or model API keys for this purpose. Paddle processes checkout, billing and refund records under its own policies.
On this website
The website uses Cloudflare Web Analytics, which counts page views without cookies or cross-site tracking. When you arrive through a link that names its source (for example ?utm_source=chatgpt.com) or from an AI assistant, the page sends one anonymous request that records only that source name and the page you landed on, so we can see which channels people use to find Keva. It carries no identifier, and Keva does not store IP addresses for it.
What we don't do
No analytics SDKs, no ad IDs, no Google Analytics, and no server-side copies of your local files, conversations or model keys.
Service providers and retention
Keva uses hosting, email delivery and payment providers only as needed to operate the website, support accounts and process purchases. We retain account, transaction and support records for as long as needed to provide the service, prevent fraud, resolve disputes and meet legal obligations, then delete or de-identify them when practical.
Your choices
You can ask about the account data associated with your email, request correction, or contact us about deletion where the law allows. Some transaction records must be retained by Paddle or by law. Contact us before sending any sensitive file or credential.