Privacy Policy

1. Information We Collect

We collect the following types of information:

a. Information You Provide

• Account Information: When you register for the Service, we collect your name, email address, and other account details.
• Content: Any files, messages, or data you input or upload while using the Service.

b. Automatically Collected Information

• Usage Data: Information about how you interact with the Service, including access times, features used, and device information.
• Device Information: Details such as your IP address, browser type, and operating system.
• Cookies: We use cookies and similar technologies to track user preferences and improve our Service.

c. Third-Party Information

We may receive information about you from third-party integrations or services you connect to our platform, such as email or calendar services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Improve the Service: Ensuring the functionality and performance of our app.
• To Personalize User Experience: Customizing the features and recommendations offered to you.
• To Communicate With You: Sending updates, support messages, and promotional content (with your consent).
• To Maintain Security: Detecting and preventing unauthorized access, fraud, or abuse.
• To Comply With Legal Obligations: Ensuring compliance with applicable laws and regulations.

3. How We Share Your Information

We do not sell your personal data. However, we may share your information in the following situations:

• With Service Providers: Trusted third-party vendors who assist in operating our Service.
• For Legal Reasons: When required by law or to protect our legal rights.
• With Your Consent: When you explicitly agree to share your data with other parties.

4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. After this period, we securely delete or anonymize your data.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access and Portability: Request access to and a copy of your data.
• Correction: Request that we correct inaccuracies in your data.
• Deletion: Request that we delete your personal data.
• Objection: Object to the processing of your data for certain purposes.
• Withdrawal of Consent: Withdraw consent where processing is based on consent.

To exercise these rights, contact us at support@kreativekoala.llc.

6. Security Measures

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. However, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

7. Children's Privacy

Our Service is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will promptly delete it.

8. International Data Transfers

If you access our Service from outside the United States, your data may be transferred to and processed in a country with different data protection laws. By using our Service, you consent to such transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

10. App-Specific Disclosures: InboxIQ

InboxIQ is an SMS/MMS messaging app that also automatically sorts your incoming messages (personal, work, promotional, one-time passcode, spam, suspected scam) to help you triage your inbox. Because InboxIQ requests SMS, MMS, and Contacts permissions, this section describes exactly how that data is handled, in addition to the general terms above. It covers the 0.4.x versions and later versions, which differ only in the optional "Connect to Claude" feature described below.

• Message content, phone numbers, and contact names are read and stored in a local database on your device. KreativeKoalaSolutions LLC does not receive them, sell them, or use them for advertising, profiling, or training AI models.
• Sorting runs entirely on your device using a machine-learning model bundled with the app. Message text is not sent to a cloud AI service or any external server to sort it. An optional larger on-device model can be downloaded through Google Play; that download contains no data from your phone.
• Contacts access is used to show a saved contact's name instead of a raw phone number, and is read locally only.
• Microphone is used only while you hold the voice-memo button, and audio is transcribed on your device.
• InboxIQ has no accounts, no advertising SDK, and no analytics.
• Optional "Connect to Claude" (earlier 0.4.x versions and any build that includes it; off by default). Google Play versions of InboxIQ released after 0.4.x do not include this feature and have no internet permission, so they cannot send your messages anywhere. In versions that include it, nothing leaves your phone unless you turn it on and accept an on-screen disclosure. While InboxIQ is open on your screen, it then lets Claude, signed in to your own Claude account, read the message text, sender numbers, contact names, and timestamps that Claude asks for, and send replies you approve. This is relayed through a service run by KreativeKoalaSolutions LLC, which holds only your verified phone number and access tokens and does not store or log message content. Linking requires a verification code delivered by a voice call to your number. Turning the feature off or tapping Disconnect revokes access, and you can also remove the connector in your Claude settings.
• Uninstalling InboxIQ deletes its locally stored data along with the app. To delete the relay link (phone number and tokens) for earlier versions, use Disconnect in the app or email support@kreativekoala.llc.

11. App-Specific Disclosures: VoxKey

VoxKey is a voice-dictation app. You tap a text box in another app, tap the VoxKey bubble, and speak, and VoxKey types what you said. It can also be used as a keyboard. Because VoxKey requests Microphone, Internet and Accessibility access, this section describes exactly how that data is handled, in addition to the general terms above.

• Microphone audio is used only to transcribe your speech into text as you dictate. On devices that support Android's on-device speech recognizer, audio is transcribed entirely on your device and never leaves it. On other devices, Android may use your device manufacturer's or Google's speech-recognition service, which is governed by that provider's privacy policy. VoxKey never receives your audio.
• Accessibility service: VoxKey's floating bubble uses Android's Accessibility service for two things only: to notice when you tap a text box, so the bubble can appear, and to type your dictated text into that box. To place the text at your cursor, VoxKey briefly reads the text already in that box. It does not store or transmit that text or other screen content, and it never appears in password fields. You turn this permission on yourself and can turn it off at any time in Android's Accessibility settings.
• Local AI cleanup (punctuation and capitalization) is optional and runs entirely on-device using a small language model downloaded to your device. Your dictated text is not sent anywhere for this processing.
• One-time model download: to enable local AI cleanup, VoxKey downloads a single AI model file (approximately 584 MB) from our infrastructure to your device. This is a one-directional file download only; no dictated text, audio, or personal data is uploaded as part of this download.
• Optional: Help improve VoxKey. During setup you choose whether to share your dictated text. This is off unless you choose it, and you can change it at any time in Settings. If you opt in, VoxKey sends us (a) the text the speech recognizer heard and the text after VoxKey's cleanup step, (b) corrections you make to a dictation inside VoxKey's own editor screen, (c) a random install identifier that is not linked to your name, account or device identifiers, and (d) the app version and your selected language. We use this to develop, evaluate and improve VoxKey's speech and text-cleanup models. It can include anything you say. We never receive audio, and nothing is collected from password fields or fields that ask keyboards not to learn. Text produced by your personal snippets, and your dictionary and snippet lists, are never sent.
• Storage and retention: shared text is stored with our infrastructure provider, Cloudflare, Inc., which processes it on our behalf, and is encrypted in transit. It is deleted automatically after 180 days.
• Deleting what you shared: tap "Delete my shared data" in VoxKey's Settings to delete everything linked to your install identifier and stop sharing. Because shared data is linked only to that random identifier, if you uninstall VoxKey or clear its data before deleting, we cannot locate your data; it is still removed automatically after 180 days.
• VoxKey does not include an advertising SDK, does not sell your data, and does not use your dictated content for advertising or profiling. Other than the optional sharing described above, VoxKey does not transmit dictated text to us or to any analytics service.
• Uninstalling VoxKey deletes the locally downloaded model and all locally stored data (dictation history, dictionary, snippets, settings) along with the app. It does not delete text you previously shared; use "Delete my shared data" first.

12. App-Specific Disclosures: NotifyPal

NotifyPal (Android) watches web pages you choose and tells you when they change. It has two parts that handle data differently.

Page watchers

• What we collect: for each page you watch, the page address (URL), the instruction you type (for example "Track the price"), the check interval, the values we read from the page, and a random identifier the app generates on your device when you first open it. There is no account, and we do not collect your name, email address, phone number, or advertising ID.
• Why: to check the page on a schedule from our server and to show you what changed. Your device asks our server for new changes about every 15 minutes and shows them as notifications on your device.
• Service providers: our server runs on Fly.io and stores watcher data with Supabase (hosted on Amazon Web Services in the United States). When you add a watcher, and again if the page layout later changes, the text and structure of that public web page and your instruction are sent to Anthropic, whose AI model works out which part of the page to read. We do not send your random identifier to Anthropic.
• Public pages only: NotifyPal cannot sign in to websites, and our server loads each page without your login. Do not watch addresses that contain personal tokens or pages that show personal information.
• Retention and deletion: data is kept for as long as the watcher exists. Deleting a watcher in the app stops its checks and deletes its saved readings from our server. Because the random identifier is not linked to you, we cannot look up your data by name or email; delete your watchers in the app before uninstalling if you want them removed.

Notification history (optional)

• If you turn on Notification Access in Android settings, NotifyPal reads the notifications other apps show on your device (app name, title, and text) so you can search them. It is off until you enable it.
• These notifications are stored only in a local database on your device. They are never uploaded, shared, or used for advertising. You can clear them in NotifyPal Settings, turn off Notification Access in Android settings, or uninstall the app to delete them.

NotifyPal does not include advertising or analytics SDKs and does not sell your data.

13. App-Specific Disclosures: SurfSense

SurfSense (Android app and Chrome extension) shows how much time you spend on websites and apps, grouped into categories such as Social Media or News, and lets you see the totals of your own paired devices together. SurfSense has no accounts or sign-in: it does not ask for or collect your name or email address, and it does not use AI. Where this policy refers to registration or account information, that does not apply to SurfSense.

• What we collect: a random device ID and a random device key that SurfSense creates on your device the first time you use it; the name your device reports (for example "Pixel 9 Pro" or "mac-arm64"), so you can recognize it on your other paired devices; the number of seconds spent in each category on each day; and which of your devices are paired. Some device names contain a person's name; you can rename your device in your device settings.
• Chrome extension: for the tab you are actively looking at in a focused browser window, the extension reads only the website's hostname (for example "youtube.com"), never the full address, page content, search terms or page titles. It ignores browser-internal pages and does not run in incognito windows. It keeps per-day totals by hostname on your device for the last 3 days. Hostnames are sent to our server only to be sorted into categories and are not saved in our database; only the per-category daily totals are stored.
• Android app: if you grant Usage Access, the app reads how long each app was in the foreground today and sends the package names of those apps to our server so they can be sorted into categories. To find an app's category, our server may look up the app's public Google Play page, which reveals the package name to Google, as any visit to that public page would. App package names and their categories are kept in a shared lookup table that is not linked to you or your device. Only the per-category daily totals are stored under your random device ID.
• Why: only to sort sites and apps into categories, store your daily totals, and show each of your paired devices the other's totals. SurfSense does not include advertising or analytics SDKs, does not sell your data, and does not use it for profiling.
• Pairing: you pair devices with a 6-digit code that expires after 15 minutes. Anyone who has that code can pair with your device and then see its category totals, so share it only with people you trust. You can unlink a device at any time in the app or extension, and pairings that have not been used for 30 days are removed automatically.
• Service providers: our server runs on Fly.io and stores data with Supabase (hosted on Amazon Web Services in the United States). Data is sent over HTTPS.
• Retention and deletion: daily totals and device records are kept until you ask us to delete them. Uninstalling the app or extension deletes the data stored on your device. To have the data on our server deleted, email us at the address in Section 15 with your device name and the approximate dates you used SurfSense. Because the random device ID is not linked to your identity, we may not always be able to find your records, but we will make reasonable efforts.

14. App-Specific Disclosures: TaskMasterBrowser

TaskMasterBrowser is an Android web browser with an AI agent built in. You describe a task, and the agent opens websites, reads them, clicks, types, and fills in forms while you watch. Because it can send what it sees to an AI service, handle saved personal details, and talk to websites on your behalf, this section describes exactly how data is handled, in addition to the general terms above.

• We run no server for this app and collect nothing. There are no accounts, no advertising, and no analytics of our own. KreativeKoalaSolutions LLC does not receive your tasks, pages, saved details, or API key.
• Cloud mode (optional, uses your own Anthropic API key). You paste your own key, which is stored on your phone using Android Keystore encryption. When you run a task in Cloud mode, the app sends your task text and screenshots of the web pages the agent is working on directly from your phone to Anthropic (api.anthropic.com) under Anthropic's terms. Those screenshots can contain anything shown on the page. You pay Anthropic directly. The key is never sent anywhere else. Saved details (below) are never used in Cloud mode.
• On-device mode (optional). The agent uses Google's Gemma model, a roughly 2.6 GB file you download once from Hugging Face (huggingface.co) when you tap Download; the download contains no data from your phone, though Hugging Face sees the request, like any download. After that, the model runs on your phone, so the pages it reads are not sent to an AI service. It needs a 64-bit ARM phone with 8 GB of RAM or more.
• Websites see what a browser sends. Pages load from the sites you visit, and anything the agent types into a page, including saved details you choose to fill, goes to that site as if you had typed it. If a task does not name a website, the app opens a Google search containing your task text.
• Saved info for autofill (optional, on-device mode only). Names, addresses, and card details you save are encrypted on your phone with Android Keystore, are excluded from Android backups and device transfers, and are never uploaded. The on-device model does not see the saved values: they are masked before the model reads a page, and the app types the real value itself. Card scanning uses your camera app, reads the photo on your phone with Google's ML Kit, and deletes the photo straight away. Only text you confirm is saved. The app never types passwords.
• You keep the last tap. Before the agent presses a button that looks like a purchase, a send, or a delete, it stops and asks you. This check works from the button's label and can miss an unusual one, so watch what the agent does.
• Third-party library. Card scanning uses Google ML Kit, which may send anonymous usage and performance diagnostics to Google. We add no other analytics.
• Retention and deletion. Task history, saved tasks, saved details, the downloaded model, and your API key stay on your phone until you delete them. Settings, under Privacy and data, has buttons to delete this data, and uninstalling the app removes everything it stored. Because we hold no copy, there is nothing on our side to delete.

15. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

support@kreativekoala.llc