Security & privacy
Encrypted local storage, optional account, no third-party trackers. Your data stays yours.
Local-first by default
kttouk stores everything in a local database on your device. No account is needed to use it, and capture, search and organize work fully offline.
Encryption
Your local database is encrypted with SQLCipher. The encryption key is kept in your operating system's keychain, with a protected file-based fallback on systems that have no keychain.
Accounts and sync are optional
You can sign in (with email and password, Google, GitHub or Telegram) to unlock plan features such as cloud sync. Sync is always your choice: turn it on or off in Settings → Sync. Without it, nothing leaves your device. You can also run the backend on your own infrastructure.
AI and your data
- With Ollama, AI runs on your machine — nothing leaves your device.
- Cloud providers (OpenAI, Gemini, Claude) are opt-in. When you use one, the text needed to answer is sent to that provider, under its own terms.
AI tools connecting to kttouk
- The built-in MCP server only listens on your own computer (
127.0.0.1) and refuses any request without your private access key. You can turn it off in Settings → Integrations. - Cloud MCP credentials are secrets shown once. Anyone holding one can reach the workspace it was made for, so keep them private and revoke them when you no longer need them.
No background snooping
kttouk has no third-party analytics or trackers. The app sends one small, anonymous install and launch notice to kttouk's own server (platform, app version, language) so we can count installs. It never includes your content.
kttouk does not monitor your clipboard. The clipboard hotkeys are off by default and read it only at the moment you press them.
Transparency
kttouk is closed-source commercial software, but what leaves your machine is always your choice — nothing is sent or collected silently. See the Privacy and Security pages for the full policies.