Kipton Privacy Policy

Effective: October 14, 2026 · Last updated: October 14, 2026

On this page

Kipton is made by Bell Technologies LLC, a Virginia company ("we," "us," or "our"). This policy explains what information Kipton collects, how we use it, who we share it with, and the choices you have. It covers the Kipton app at kipton.ai and this help site, info.kipton.ai.

The short version#

Your memories are yours. We use them only to run Kipton for you.
We don't sell your information, we don't show ads, and we don't use your memories to train AI models.
Kipton uses OpenAI to answer your questions and read your photos and documents. OpenAI doesn't use this data to train its models, and it may keep it for up to 30 days to watch for abuse.
Your Lockbox is encrypted on your device with a password only you know.
Chats aren't saved as a history. They clear from your screen on a timer you choose.
You can download your data or delete your account at any time in Settings.

Information we collect#

Account information#

Your email address.
Kipton signs you in with a one-time code sent to your email, or with Google or Apple. Kipton doesn't ask you to create an account password.
If you sign in with Google, Google shares your name, email address, and a link to your profile picture with us. If you sign in with Apple, Apple shares your name and email address, or a private relay address if you choose to hide your email.

Profile information#

Your first name, and if you add them, your last name and phone number.
Whether you want email updates from Kipton. They're off unless you turn them on, and we record when you change this setting.

Age confirmation#

When you sign up, we ask your age to confirm that you're 18 or older. We don't store your age. We only record when you confirmed that you're an adult.
If you enter an age under 18, we delete the account right away and save a cookie in that browser that blocks sign-up there for one year.

Your memories and other content#

Everything you save in Kipton: text, notes, photos, scans, documents and other files, receipts, bills, invoices, and folders.
Information Kipton creates from your content to make it useful, such as titles, categories, importance labels, folder filing, descriptions of photos, text read from photos and documents, receipt details (like the store, date, amounts, and card type with its last 4 digits), and search data that helps Kipton find your memories.
When you type a statement in chat, like "My locker code is 4412," Kipton saves it as a memory automatically. Questions you ask aren't saved.
Kipton hides long card and bank account numbers, showing only the last 4 digits, in the text it reads from receipts, photos, scans, and documents (but not spreadsheets). It doesn't change numbers you type yourself, and your original photos and files are stored exactly as you uploaded them.
Text you type in the Notepad but haven't saved yet is kept as a private draft in your account until you save or clear it. A copy is also kept in your browser on the device you're using until you save it, clear it, or sign out.

Lockbox#

Your Lockbox is a private space with its own Lockbox password. Items you put in it are encrypted on your device, using AES-256 encryption, before they're stored. Only your Lockbox password or your recovery key can unlock them. We can't read your Lockbox items, and we can't recover them if you lose both your password and your recovery key.
An optional password hint is stored without encryption, so never put your password in it.
Text you save to your Lockbox gets an automatic safety check by OpenAI before it's encrypted.
While your Lockbox is open, your chat messages and the text of up to 5 Lockbox items that match your question (their title, text, and photo description, but not attachments) are decrypted on your device and sent through our server to OpenAI, so Kipton can answer you. Kipton doesn't store them.
Your Lockbox locks when you lock it, when you close, reload, or leave Kipton, and after about 5 minutes without a tap or key press. On phones, time with the screen off may not count toward those 5 minutes.

Chats#

Kipton doesn't save your chats as a conversation history, either in your account or in your browser's storage. Recent messages stay only in the open Kipton page and clear after the time you choose in Settings (5 minutes by default), or when you close or reload Kipton.
To answer you, Kipton sends your message, up to 10 recent messages from the conversation, and the memories that match your question to OpenAI.

Voice dictation#

When you use the microphone, your audio is sent through our server to OpenAI to turn it into text. We don't store your recordings. We keep a record of when you used dictation, to prevent abuse.

Calendar reminders#

When you ask Kipton to remind you about something, it creates a calendar event for you to add yourself. Kipton doesn't store, schedule, or send reminders.
If you choose Add to Google Calendar, the event details are sent to Google. If you choose Add to Apple/Outlook Calendar, a calendar file downloads straight to your device.

Feedback and bug reports#

When you send feedback or rate an answer, we keep what you send, along with your account email (or an email address you give us, if your account doesn't have one) so we can reply. This can include a comment, a rating and its reason, a screenshot you attach (we remove hidden photo data, like location), and, only if you tick the box, the question and answer you're rating.
Bug reports include basic technical details unless you untick that box: your browser and its version, operating system, screen size, app version, light or dark mode, the page you were on, and the time.
Feedback text and screenshots get an automatic safety check by OpenAI.

Safety checks#

To keep Kipton safe, we automatically check what you save, ask, upload, or attach, using OpenAI's moderation service. Content that breaks our rules isn't saved. We record only the type of content that was blocked and when, not the content itself.
If content is blocked 5 times within 24 hours, saving, uploads, and edits are paused for 24 hours.

Technical information#

When something goes wrong in the app, Kipton records an error code, the screen and action involved, the app version, your browser type, and your device type (phone, tablet, or computer). These records never include your memories or messages.
We count how many AI actions your account uses each day, to apply fair limits and control costs. These counts don't include your content.
Our hosting and database providers automatically record basic technical information, such as your IP address, approximate location (like your city), browser type, and the pages you visit, to keep Kipton running and secure. Our hosting provider also counts visits and page views, so we can see how many people use Kipton and this site.

Information stored on your device#

Kipton uses your browser's storage to keep you signed in, to remember your settings and choices (like how your sidebar looks), and to keep offline copies and unsaved Notepad text.
For cookies, see Cookies and Do Not Track.

Offline copies#

On phones, Kipton automatically keeps a copy of your memories' text on the device after you sign in, so you can read them without a connection. On other devices, it does this only if you turn on offline copies in Settings. You can turn offline copies off on any device in Settings.
Offline copies include text read from photos and files, but not the photos or files themselves. Your Lockbox is never included. For memories marked Critical, only the details your memory list shows are kept (the title and a short preview with long numbers hidden, plus labels like category, folder, and dates), unless you turn on "Keep offline" for that memory.
Offline copies are kept in your browser's storage on that device and are protected by your device and browser, not by extra encryption from Kipton. If you sign in on someone else's phone, copies stay on that phone until you sign out there.
Offline copies are deleted from a device when you sign out there, when a different account signs in there, or when you choose "Not on this device" there. When you delete a memory, delete all your memories, or delete your account, the copies are removed from the device you're using right away, and from your other devices the next time Kipton is open there with a connection. Signing out of all devices works the same way.

How we use your information#

To run Kipton: to save, organize, and find your memories, and to answer your questions about them.
To read the photos, scans, and documents you save, so you can search and ask about them.
To sign you in, and to send sign-in codes and account emails.
To send email updates, only if you turn them on.
To keep Kipton safe and secure, prevent abuse, and enforce our Terms of Service.
To apply fair limits on storage and AI use, and to control costs.
To fix problems and improve Kipton, using error records and the feedback you choose to send.
To reply when you contact us.
To follow the law.

How Kipton uses AI#

Kipton uses OpenAI's API to answer your questions, read photos and documents, turn speech into text, check content for safety, and organize your memories (titles, categories, importance, folder filing, receipt details, and search).
Kipton sends OpenAI only what's needed for each task, such as your question and the memories that match it.
Under OpenAI's API terms, this data isn't used to train OpenAI's models. Kipton also turns off OpenAI's option to store responses for later use. OpenAI may keep requests for up to 30 days to monitor for abuse, or longer if the law requires it.
Kipton answers from your saved memories first and shows which memories it used. If you ask for a general-knowledge answer instead, it's labeled "Not from your memories."
AI can make mistakes. Check anything important.

What we don't do#

We don't sell or rent your personal information.
We don't share your information for advertising, and Kipton has no ads.
We don't use your memories, messages, or files to train AI models.
People at Kipton don't read your memories, except when you ask us to help with something, to look into abuse or a safety problem, or when the law requires it.

Service providers we use#

We use these companies to run Kipton. They process information for us to provide their services.

Supabase: database, sign-in, and file storage, in the United States. Stores everything in your account.
OpenAI: AI answers, reading photos and documents, voice dictation, safety checks, and organizing and searching your memories. Receives the content needed for each request.
Lovable (using Cloudflare): hosts kipton.ai and info.kipton.ai. Receives basic technical information, like your IP address and the pages you visit.
Resend: sends sign-in codes and account emails. Receives your email address and the email's content.
Google: Sign in with Google, if you choose it, and Google Calendar, if you add a reminder there.
Apple: Sign in with Apple, if you choose it.

Google and Apple handle sign-in under their own privacy policies.

With the service providers above, to run Kipton.
When you choose to, such as adding a reminder to Google Calendar.
When the law requires it, such as a valid subpoena or court order.
To protect the safety, rights, or property of people, Kipton, or the public, or to investigate abuse.
If Bell Technologies LLC is part of a merger, acquisition, or sale of assets. This policy would still apply to your information, and we'd tell you before it becomes subject to a different policy.

How long we keep information#

Memories and other content: until you delete them or delete your account.
Chats: not kept. They clear from your screen as described above.
Undo copies: when you delete something, Kipton may keep a private copy so you can undo it. Undo copies are removed when you use Delete all memories or delete your account.
Feedback, error records, and safety records: until you delete your account.
AI usage counts and records of when you used dictation: kept to apply limits and prevent abuse, and deleted when you delete your account or soon after.
Offline copies: until they're removed as described in Offline copies.
Service providers: OpenAI may keep requests for up to 30 days. Our hosting and database providers keep technical logs for a short time. Deleted information may also remain in our providers' backups for a limited time.

Your choices and rights#

Download your data: Settings → Privacy & Data → Download my data gives you a ZIP file with your memories (including folders, photo descriptions, formatted notes, and your Notepad draft), photos, and original files. It doesn't include Lockbox items, your profile, settings, importance labels, feedback, or receipt details. You can export receipts as a spreadsheet (CSV) from Financials.
Update your profile: in Settings → Account.
Email updates: turn them on or off in Settings → Account.
Offline copies: turn them on or off for each device in Settings → Privacy & Data.
Delete memories: delete them one at a time, or all at once with Delete all memories, which keeps your account, settings, folders, Lockbox, and feedback.
Delete your account: see Deleting your account.
Other requests: email support@kipton.ai to ask what information we have about you, to get a copy of it, to correct it, or to delete it. We may need to confirm it's you, for example by asking you to write from the email address on your account. We'll reply as soon as we can, and within the time the law requires.
We won't treat you differently for making a privacy request.

Deleting your account#

In Kipton: go to Settings → Privacy & Data → Delete account, type DELETE, and confirm. This permanently deletes your memories, photos, scans, files, receipts, folders, Notepad draft, Lockbox, settings, profile, feedback (including screenshots), and your sign-in account. It can't be undone.
By email: if you can't sign in, email support@kipton.ai from the email address on your account, and we'll delete your account within 30 days. We may ask you to confirm it's you.
What may remain for a short time: offline copies on your other devices, until Kipton is open there with a connection or you sign out there; records of when you used dictation and AI usage counts, which don't include your content; and technical logs and backups kept by our service providers for a limited time, including OpenAI's abuse-monitoring logs for up to 30 days.

Security#

Every connection to Kipton is encrypted (HTTPS).
Access rules on every table and storage area let each account reach only its own data. Nothing is readable by visitors who aren't signed in.
Your Lockbox is encrypted on your device.
Automatic safety checks and limits on AI use help prevent abuse.
No system is perfectly secure. If we learn of a security incident that affects your information, we'll let you know as the law requires.

Children#

Kipton is only for adults 18 and older. We don't knowingly collect information from anyone under 18. If someone enters an age under 18 when signing up, we delete the account right away. If you believe someone under 18 is using Kipton, email support@kipton.ai and we'll delete their account.

Cookies and Do Not Track#

We don't use cookies for advertising or tracking. Kipton uses a cookie to block sign-up in a browser after someone enters an age under 18, as described in Age confirmation.
We don't track you across other websites. Kipton doesn't change its behavior when your browser sends a Do Not Track signal.

Where your information is processed#

Kipton is run from, and meant for people in, the United States. Your account data is stored in the United States. Our service providers may process information in the United States and other countries.

Changes to this policy#

If we make important changes, we'll update the dates at the top and let you know by email or with a notice in Kipton.

Contact us#

Bell Technologies LLC

Virginia, United States

Email: support@kipton.ai