Privacy policy

Effective date: 15 November 2026 · Contact: support@kaveret.ai

What Kaveret is

Kaveret is an open-source desktop application for Windows (a Mac version is coming), with an experimental Android app that connects to it. It runs on your computer. AI assistants ("Bots") can act for you, such as searching your mail or creating a calendar event, and they show you an approval card before consequential actions, such as sending mail or creating, changing or deleting a calendar event.

You can also run the same hub on a server you operate yourself. That server is yours. It is not a server of the Kaveret project.

Data that stays on your device

• Your chats, files, settings and the secrets vault are stored on your computer (or on the hub you run). Secrets are encrypted.
• When you connect an app, its sign-in token is stored on your computer (or on the hub you run).
• Kaveret does not require a Kaveret account to use the local app.

Where your data goes

1. To the AI engine you choose. Your messages, and the content a feature needs, go to the AI engine you selected and connected (for example Claude, ChatGPT, Grok, or a local model on your own machine), so that engine can do what you asked, as with that engine's own app. That engine's own terms and privacy policy apply to it. Kaveret does not send your data to an engine you did not connect.
2. To the services you connect. When a feature uses a connected app (for example Gmail or Notion), it calls that service with your token.
3. Update checks. The desktop app checks GitHub Releases for new versions.
4. When required. If the law requires it, to secure the service, or as part of a merger or sale of the project, with prior notice to you.

Google user data

When you connect Gmail, Google Calendar, Google Contacts or Google Drive:

• The OAuth token is stored encrypted on your computer (or on the hub you run).
• Mail, calendar events, contacts and file text are fetched from Google to that computer so the feature you asked for can run.
• The app shows you an approval card before it sends mail, and before it creates, changes or deletes a calendar event. Creating or changing an event can email invitations or updates to the guests you listed. Deleting an event can email a cancellation.
• Kaveret does not keep a copy of your mailbox, calendar, contacts or Drive on servers of the Kaveret project.

Google user data is used only to provide the feature you asked for in the app. It is transferred only to Google (to call the Gmail, Calendar, People or Drive API with your token), to the AI engine you selected and connected (only so it can perform the feature you see in the app, for example summarize a message you asked to read, or draft a reply you will approve), or when required by law, for security, or in a merger or sale with prior notice to you as Google's policy requires.

If a connection goes through Kaveret's sign-in server at https://kaveret.ai, that server exchanges the one-time sign-in code for a token and returns the token to your app. It does not store the token, does not write the token to logs, and does not receive the contents of your Gmail, Calendar, Contacts or Drive.

What Kaveret does not do with Google user data

• Kaveret does not sell Google user data.
• Kaveret does not use Google user data for advertising, creditworthiness or data-broker products.
• Kaveret does not use Google user data, raw or derived, to create, train or improve a general machine-learning or AI model. A model you run for yourself on your own device is your choice of engine, not training by Kaveret.
• People who work on Kaveret do not read your Gmail, Calendar, Contacts or Drive. A person may see a specific message or file only if you affirmatively ask them to look at that item for support, or when necessary for security, to comply with the law, or for internal operations on aggregated data that does not identify you.

Google API Services User Data Policy (Limited Use)

Limited Use, as Kaveret applies it:

• Use is limited to providing or improving the user-facing features that are prominent in the app.
• Transfers are limited to what is needed to provide those features with your consent, to security, to the law, or to a merger, acquisition or sale with explicit prior consent.
• Humans do not read this data except with your affirmative agreement to view specific messages, files or other data, or for security, legal, or aggregated internal operations.

Google scopes the app requests

Scope	What the app does with it
https://www.googleapis.com/auth/gmail.readonly	Search and read your mail so the assistant can answer questions about it.
https://www.googleapis.com/auth/gmail.compose	Save drafts in Gmail, and send mail after you approve the send on a card.
https://www.googleapis.com/auth/calendar.events	Show events and, after a card, create, update or delete events. Guests you listed can be notified.
https://www.googleapis.com/auth/drive.readonly	Search your Drive and read a file as text (Docs, Sheets, Slides and text files). The app does not modify Drive files.
https://www.googleapis.com/auth/contacts.readonly	Look up a person's name, email, phone and organization in your contacts. Read only.
https://www.googleapis.com/auth/contacts.other.readonly	Look up people you have interacted with who are not saved in your contacts. Read only.

The app does not request permission to change Drive files, to delete mail, or to change contacts.

Revoking access

You can disconnect Google inside Kaveret. That removes the stored token from your device. You can also revoke Kaveret at Google Account permissions. Revoking access stops further API calls. It does not delete mail, events, contacts or files in your Google account.

This website

This website does not use cookies, analytics or trackers, and does not load anything from third parties. You do not need to sign in to read what Kaveret is, this policy or the terms. The site is hosted on Cloudflare Pages; like any web host, Cloudflare processes technical data such as IP addresses to deliver the pages.

Your choices

Your data is on your device, so you control it: you can export it, back it up or delete it from inside the app, and uninstalling the app does not send anything anywhere.

Changes

Changes to this policy are posted on this page with a new effective date. The home page links to this page.

Contact

Questions about privacy: support@kaveret.ai.