Privacy

Kwil is a small, invite-only beta run by one person, not a company. This page says what it stores, who else sees your data, and how to have it deleted. There are no ads, no analytics and no tracking scripts, and your data is never sold.

Who sees what

Services your data goes to
Service	What it gets	When
Anthropic (Claude)	What you say or type (speech is turned into text on the server first), the conversation so far, and the results of what it looked up for you: calendar events, Notion assignments, web pages. Sent with your own API key, so Anthropic's terms for your account apply (a family member without a key of their own uses the owner's).	Every message, and once when a conversation ends (to title and summarize it)
Google Calendar	Reads of your events and the changes you ask for. The beta asks Google for Calendar access only, no Gmail. When you invite or remove guests, after your yes, Google emails them.	When you ask about or change your calendar
Notion	Reads of your Assignments database and the status changes you ask for, once you connect Notion. Only the pages you choose to share on Notion's own consent screen.	When you ask
Web search (run by Anthropic)	The search words or the web address, and your time zone as a rough location.	When a question needs it
Render (the hosting company)	Runs the server and its disk, where the data below is stored, and keeps the server's logs.	Always
Sentry (only if the person who runs the server turned error reports on)	Error reports: the error's type and where in the code it happened, the request's method and path, and the app and Python version. Never what you said, the error's message, cookies or your IP address.	When something fails

Speech is turned into text on the Kwil server itself, and replies are spoken by a voice on the same server. Your recordings are not sent to any other company and are not kept after they are transcribed.

What is stored

Your account: the name you were invited under, your language, time zone and invite status. The invite link itself is kept only as a one-way hash.
Your conversations: their text and titles, in a file of your own on the server, so you can find and continue them. You can delete any conversation in the History screen; that overwrites its text.
Your Anthropic API key: your key is stored encrypted on the server and used only for your requests. We also keep a monthly estimate of the tokens and cost your key has used, shown only to you.
Your Google sign-in: a token for your own Calendar, used only for you. Disconnecting asks Google to end access and deletes it; you can also check at myaccount.google.com/permissions.
Your Notion sign-in: a token for the Notion pages you shared, your workspace's name and the name of the Assignments database it found, stored encrypted and used only for you. Not your Notion email address. Disconnecting asks Notion to end access and deletes it.
Signed-in browsers: a session id and when it was last used, so you stay signed in. "Sign out everywhere" ends them.
Waitlist: the email address you gave, your optional note about what you'd use it for, and the date. It is used only to send you an invite by hand.
Logs: technical records such as times, lengths, counts and error types, and network (IP) addresses for rate limits and failed sign-ins. Not what you said, the replies, your email address or your notes.

The person who runs the server can technically read what is stored on its disk. Your data is not combined with anyone else's account, is not used for long-term memory, and is not used to train models by this service. Anthropic's handling of API data is set out in its own policies for your API account.

Google user data

Kwil's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google Calendar data is used only to answer your requests, make the changes you ask for, and keep your own conversation history (its text, and a title and short summary that Claude writes so you can find it again). It is sent to Anthropic only for these, as described above. It is not sold, not used for advertising, and not used to develop, improve or train generalized AI or machine-learning models. No person reads it unless you ask for help with something specific and agree, it is needed for security or to follow the law, or it has been made anonymous and combined.

Deleting your data

In Settings you can download your data (your conversations and profile) and delete your account yourself. Deleting it asks Google and Notion to end Kwil's access. You can also ask at support@heykwil.com to have your account or your waitlist entry deleted. Removing an account signs you out everywhere and deletes your folder on the server: conversations, Google and Notion sign-ins and API key. The hosting company makes automatic backup snapshots of the disk, so a copy can remain in those snapshots until they expire. The person who runs the server can also download a backup of it; a copy in such a backup remains until they delete that file.

To stop Google access at any time, revoke Kwil at myaccount.google.com/permissions. To stop Notion access, remove Kwil in Notion under Settings, Connections. To stop API use, choose Remove key in Settings, or delete or rotate your key in the Anthropic Console.

Cookies

One cookie keeps you signed in. While you connect Google or Notion, a second, short-lived cookie ties that sign-in to your browser. Neither is shared with other sites, and there are no advertising or analytics cookies.

Changes and contact

This notice may change during the beta; the page will show the new version. Questions: support@heykwil.com.