How your data and your decisions are protected.

Local first

Matching, checks and the assistant work on your device first.

Consent before cloud AI

Nothing is sent to a cloud AI service without your explicit consent.

Membership is not access

A family or organization role manages membership; it never opens another member's messages, devices, location or saved places.

AI informs, people decide

Answers cite their evidence, and model output grants no authority.

Only what is needed

KAIA-OR checks only the text or link you choose to paste, and your exact location stays on your device.

Each space kept apart

Each family and organization is kept apart from every other, and the separation is enforced at the application layer.

Places and position

Saved places, and your position for Around me, stay on your device. The position is cleared when you stop.

Checks and questions

Messages and links you check stay in memory on your device and are cleared when you close the check. Topic preferences are kept encrypted on your device.

Discreet notifications

Device notifications never name the place or the event.

You opt in, feature by feature

Your personal data reaches a third-party AI service only when you opt in yourself, feature by feature, and only you can give that consent.

Government starts with it off

Government organizations start with cloud AI off.

Membership never grants access

Membership never grants access to another member's messages, devices, location or saved places.

Sites, not whereabouts

The organization sees its sites, not its people's whereabouts.

Sharing is a choice

A member can choose to share their device security status with a family Owner or an organization administrator, and stop at any time.

Access you can account for

One-time, account-bound invitations, dated access reviews that download as a file, and permission activity that shows Owners and Administrators who changed what, and when.

Strong sign-in

Every member signs in with an authenticator app as a second sign-in step, and organizations can use their own identity provider.

Checked before you see it

Answers cite their evidence and are checked against it before you see them.

No authority from model output

Model output grants no authority, and agents act only within the limits you set and with your authorization.

Built to resist manipulation

The assistant is designed to resist manipulation, including instructions hidden in the content it reads.

Secure development

Secure development practices, pinned dependencies, supply-chain checks and security tests before every release.

Payments

Payment details are entered in embedded secure fields and go directly to our payment processor, so KAIA-OR never sees full card numbers.

Report a vulnerability

Our security disclosure policy explains how to report a vulnerability and how we ask you to test.

Read the disclosure policy↗