How Kith handles your data.

1. Scope

This policy applies to the Kith website, account surface, backend API, and extension requests.

It covers information processed when you sign in, use text or visual analysis, save explanations to the Archive, or use billing-related features.

The extension surfaces Kith only when you ask for it—for example by highlighting text or marking a visual region. Kith does not edit, replace, or persistently change the underlying webpage as published by the site owner; clarification appears in Kith’s own overlay card while the original page content stays as delivered.

2. Information we collect

We collect account, session, usage, and saved-context data.

• Email address used for sign-in and account ownership.
• One-time sign-in code records and authenticated session records.
• Account settings such as private mode, sync state, weekly summary, and hotkey preferences when supported.
• Saved concepts and explanations you choose to store in the Archive.
• Limited landing-page analytics and usage events tied to product actions.
• Billing metadata such as Stripe customer and subscription identifiers when billing is configured.

3. Analysis data

Text and visual explanations require the relevant slice of page context.

• Text requests may include selected text, page title, URL, headings, and surrounding text.
• Vision requests may include the marked image region, page title, URL, optional hint text, and surrounding text.
• Usage telemetry records limited metadata such as plan tier, private-mode flag, image size, or a redacted excerpt of selected text.

4. How we use information

We use data to authenticate accounts, operate analysis, enforce quotas, and support billing.

Kith uses the information above to sign users in, route model requests, return explanations, store saved concepts, measure daily quota usage, prevent abuse, and manage subscriptions where applicable.

5. Third-party processors

Kith relies on external providers for model and billing infrastructure.

• Google Gemini processes model requests that Kith sends through its backend.
• Stripe processes paid checkout and billing portal actions when billing is configured.

6. Storage and retention

Session and account data are retained to run the service until they expire or are removed.

• Sign-in codes expire after a short time window and are not stored in plain text.
• Authenticated sessions currently expire after 30 days in the service backend.
• The web account surface stores the active session token in local browser storage.
• The backend supports account deletion, which removes user records, sessions, usage events, and saved concepts from the application database.

7. Security and changes

We review this policy as the product surface changes.

Kith uses authenticated API routes for protected features and keeps billing outside the extension workflow. We may update this policy as the product evolves, and the date at the top of the page will reflect the latest revision.

Kith’s use of information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide or improve Kith’s disclosed single purpose, is not used for personalized advertising or creditworthiness, and is not sold. Humans do not read captured page content except with the user’s explicit consent for support, when required for security or law, or in aggregated and anonymized form for internal operations.