Privacy Policy

Version: 1.1 Effective date: 2026-09-29 Applies to: kttouk (កត់ទុក) "Personal Capture Platform" version 0.1.0

1. Introduction

This Data Privacy Policy explains what data kttouk collects, where it is stored, how it is used, and what controls you have over it.

The short version: kttouk is a local-first capture platform. Your tasks, notes, captures, bookmarks, reminders, and settings live in an encrypted database on your computer, and kttouk never collects their contents. The app does send a small, anonymous set of install and usage statistics — the kind that tell us how many people use kttouk and which versions work — so that we are not shipping blind. That is described in full in section 2.3. Your actual content only leaves your device in flows you explicitly configure: optional synchronization to a backend you choose to run, and optional AI processing by a cloud provider you select.

Please read this policy together with our Terms of Service and Security Policy.

2. What information we collect

2.1 Information you create in the app ("Your Content")

The content you capture and organize with kttouk, including:

• Tasks (title, description, checklist items, priority, status, dates, project, tags, repeat schedule, pinned state)
• Notes (title, rich-text/markdown content, tags, version history)
• Captures (text, voice, screenshot, clipboard, bookmark, or file captures, with their source)
• Bookmarks (URL, title, description, image, tags, favorites, pin state)
• Projects, tags, reminders, calendar providers, conversations (AI chat history)
• Settings and preferences stored in the app's key-value store

This is the data you give kttouk. It is yours.

2.2 Information that helps the app function

• Local configuration: theme, language, working hours, hotkey preferences, window positions, widget state. Stored locally only.
• AI configuration: your chosen provider, model, and — if you configure a cloud AI provider — the API key you provide. Stored in your local encrypted key-value store.

2.3 Anonymous install and usage statistics

kttouk's desktop app reports a small amount of anonymous statistics about the installation. This is not Your Content, it cannot identify you on its own, and it is sent automatically on first launch without any action from you.

Reported once, on first launch of a new installation:

• A random install ID generated on your device (a desktop- prefixed UUID) and stored in the app's local settings. It is not derived from your hardware, your files, or your name.
• Your operating system and its version
• The kttouk version you are running
• Your CPU architecture (e.g. x86_64, aarch64)
• The installer type, which is a fixed label derived from your operating system (nsis on Windows, dmg on macOS, deb on Linux)
• Your app's language/locale
• The resolution of your primary display
• Your device or hardware model, only where your operating system makes that information available to apps

Reported while you use the app, at most once every six hours: a "heartbeat" containing your install ID, operating system and its version, and the kttouk version. This is what lets us count how many installations are actually in use (for example, active within the last 1, 7, or 30 days).

Your IP address is never stored. A one-way hash of your network's address block (the first 24 bits of an IPv4 address, or the first 48 bits of an IPv6 address) is used to derive a coarse country/region bucket. Private and loopback addresses are discarded rather than hashed.

If you sign in to a kttouk account, your install record is linked to that account, so we can tell registered from unregistered installations. Linking adds only that association — never any of your content, tasks, notes, or anything you have written.

These statistics are used solely for aggregate product and reliability reporting: how many installations exist, which app versions and operating systems they run, whether the app is being used, and roughly which parts of the world are using it.

What is never collected by this mechanism: the text, titles, or contents of any task, note, capture, bookmark, tag, project, reminder, or conversation; any AI prompt or AI output; clipboard contents; keystrokes or screenshots; file paths or document names; crash reports; and no advertising IDs, cross-app tracking IDs, or third-party trackers. There is no passive clipboard monitoring. The statistics are sent to the kttouk backend you have configured — if you point the app at your own self-hosted backend, the statistics go there and never reach us.

3. Where your data is stored

We do not operate, and do not rent, any cloud service that stores your kttouk content on our behalf. The only data held server-side by default is the anonymous statistics in section 2.3, which contain none of your content.

4. How we use your information

• To provide the service: store, organize, search, and display the content you capture, entirely on your device.
• To synchronize (only if you enable it): copy your content to your configured sync backend so it can be kept in sync across your devices.
• To provide AI features (only if you enable them): send content you explicitly use with AI features to your selected provider (Ollama local, or OpenAI/Gemini/Claude cloud) for categorization, chat, summarization, or embedding.
• To provide calendar sync (only if you enable it): exchange events with your configured CalDAV server.
• To understand reliability and adoption (aggregate only): count installations, see which app versions and operating systems people run, tell whether an installation is still in use, and approximate the geographic mix. This uses the anonymous statistics in section 2.3 and is never joined to the content you create.
• We do not use your content for advertising, profiling, or any purpose other than providing and maintaining the features you use.

5. Cookies and similar technologies

The desktop application does not use cookies. The optional self-hosted backend uses authentication tokens (JWTs and refresh tokens) stored locally by the desktop app — these are session/account tokens, not tracking technologies. There is no third-party tracking on any kttouk surface.

6. Who we share your data with

kttouk shares data only with the third parties you choose to connect:

We do not sell, rent, or trade personal data. We do not share any data with advertising or data-broker services, and we do not send anything to third-party analytics or advertising networks. The anonymous install/usage statistics in section 2.3 are received and aggregated by kttouk's own backend — they are not forwarded to any external analytics provider.

7. Security

We protect your data with encryption at rest (SQLCipher/AES-256 on your device) and encryption in transit (HTTPS/TLS to configured services), key management via your OS keychain, and secure engineering practices documented in our Security Policy.

8. AI processing — important disclosure

AI features are optional and opt-in. When you select a cloud AI provider (OpenAI, Gemini, or Claude), content you use with AI features — for example a task you ask to be categorized, a chat message, or a note you ask to summarize — is transmitted to that provider's cloud and processed by them. It is then subject to that provider's terms of service and privacy policy, not ours. To keep AI fully on-device, select Ollama as your provider. The app shows a visible warning whenever a cloud AI provider is active.

9. Retention

• Local data: retained on your device until you delete it. Deleting an entity (task, note, capture, bookmark, tag, project) removes it from your local database.
• Version history: note version history is retained to support restore/undo until you delete the note.
• Sync data: retained on your configured backend while your backend account exists; you may export or delete it at any time.
• AI conversations: stored locally with your chat history; delete a conversation to remove it.
• Anonymous install/usage statistics (§2.3): each install record is one row keyed by your install ID, holding the fields listed in section 2.3. The first-launch timestamp is kept fixed and the last-seen timestamp is updated on each heartbeat, so a single row represents one installation for as long as it exists. These records contain none of your content and are not deleted on a timer, because install and retention counts must stay stable over time.
• Website download/activation events: the public website records coarse, non-identifying download and activation events (which release, which platform, and whether a later app launch matched an earlier download) so we can attribute installs to the page they came from. These are purged automatically after 90 days.

10. Your choices and rights

10.1 Your choices in the app

• Turn features off: AI features, sync, and calendar sync are all optional and can be disabled at any time in Settings.
• Back up: export your data (tasks, notes, captures, and more) from Import/Export settings.
• Delete: delete individual items in-app, or wipe local data from Import/Export settings.
• Anonymous statistics: the install/usage statistics in section 2.3 are independent of your content, so deleting your tasks, notes, or whole local database has no effect on them. If you self-host your kttouk backend, these statistics are stored only on your own server and you can remove them yourself at any time. If you use our backend and would like your install record removed, contact us (section 12) from your account's email address and we will delete it. Clearing the app's local data also discards your install ID, so a later launch is counted as a new installation.

10.2 Your rights (GDPR and similar laws)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — request deletion of your data.
• Restriction and objection — restrict or object to processing.
• Portability — receive your data in a structured, machine-readable format and transmit it elsewhere.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a complaint — with your local supervisory authority.

To exercise any of these rights for backend-account data, contact us (section 12) with your account details. Local-only data is fully under your control — you can export, back up, or delete it at any time from the app itself.

11. Children's privacy

kttouk is not directed at children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. The anonymous install/usage statistics in section 2.3 are sent automatically by any device that runs the app, including a child's, but they contain no content, cannot identify a person, and are attached to an account only if someone signs in.

12. Contact and changes

• Email: [email protected]

We will update this policy as the product evolves. Material changes will be noted with a new version number and effective date at the top of this document.

Version history

Version 1.1 — effective 2026-09-29.