Privacy Policy

This policy covers the Kunobi desktop app and the online services Zondax provides for it. Feature availability depends on your release channel and plan. The website has its own policy.

Your local memory is stored in portable files on your device. Using sharing, remote tools, publication or a connected AI provider can send content off that device. This policy explains those differences. We do not sell your personal data, use your memory for advertising or use your Content to train AI models.

Who is responsible

Zondax AG, Dammstrasse 16, 6300 Zug, Switzerland, is responsible for the account, service-operation and diagnostic processing described here. Contact dataprotection@zondax.ch about personal data or hello@kunobi.com for product support.

If you use Kunobi for an organisation, that organisation may be responsible for the personal data it instructs Kunobi to process or shares with others. Where Zondax acts as its processor, the applicable processing agreement must define that role. This does not remove our responsibility for processing we control ourselves.

Local files and connected tools

You can read, export and delete local memory files with other tools. Local storage does not itself upload those files to Zondax. Other software, backups and AI tools you connect may access files under the permissions you give them.

An AI provider receives the content and tool results made available to it. Its terms and privacy policy govern its own processing. Disconnecting a provider stops further access through that connection; it does not erase what the provider already received.

Accounts and sharing setup

Account features process sign-in and account identifiers. Registering a device for sharing sends a profile identifier, device name, product and release variant, platform and app version. Invitations include the recipient's email address. We use these data to authenticate access, connect the intended people and devices, and manage permissions.

Our services and infrastructure providers also process connection information, including IP addresses, request times and security-related events, to deliver and protect online features. Optional telemetry is separate from these functional requests.

Sharing and synchronisation

Sharing sends content to the people, devices and tools permitted by your grants. Synchronisation can include saved file versions, file names, authorship information and history associated with the shared space. It is not limited to a single file's current visible text. Once configured, synchronisation may continue automatically.

Presence sharing can tell authorised collaborators that you are active in a shared space and which saved, shared file you are viewing. Turning presence sharing off stops that exchange through Kunobi.

Peer connections use encrypted transport and may use a relay when a direct connection cannot be established. A relay processes network and connection metadata and may forward encrypted peer traffic. That does not make every other Kunobi feature end-to-end encrypted: the remote tool service below processes tool messages separately.

Recipients can retain downloaded files and saved history. Revoking access stops future authorised access through that grant, but does not guarantee deletion of earlier copies. Deleting a local file is not a request to delete every recipient's copy or saved version.

Remote tool connections

Cloud MCP routes authorised tool calls and their results through a Zondax-operated service between a connected client and the desktop. Those messages can contain memory, file content and other information returned by a tool. Zondax infrastructure therefore processes message contents to deliver this feature; the traffic is not limited to connection metadata. Account, device and grant information is also processed to control access. A running connection does not give every client access to every tool or file.

Links and publication

Where hosted publication is available, publishing uploads the selected document's snapshot and any supplied preview image to Kunobi hosting. Account and link records support creating, managing and revoking the publication. Anyone who obtains a public link may be able to read and copy what it exposes.

Links served from your computer work differently: Kunobi serves the publication while the local service is running, potentially through a Cloudflare tunnel or another proxy you configure. The tunnel or proxy provider processes traffic under its applicable terms. If you enable automatic updates, later document changes can reach the existing link without a separate approval for each update.

Ending a link does not retrieve copies already saved by viewers. A hosted link's expiry or revocation also does not establish when all server backups are erased.

Updates, optional telemetry and reports

Update requests include the app version, operating system, architecture and release channel, alongside ordinary network request information. They do not require your memory contents. If you enable telemetry, update requests can also include installation and session identifiers, a check counter and installation-method information.

Optional telemetry is off unless enabled. When enabled, it sends technical performance and usage events, errors and crash counters to help diagnose failures and improve Kunobi. You can turn it off in the app. Disabling telemetry does not disable functional requests needed for features you use or erase information already received.

Sending feedback or a full crash report is a separate submission. A report can contain your message, app and platform details, crash times, error messages, stack traces and module information. If signed in, the submission can be associated with your account. The app sanitises user paths in crash diagnostics, but this is not a guarantee that all personal or confidential information has been removed. Review what you submit and avoid including secrets or unrelated personal data.

We use submissions to diagnose problems, test fixes and improve our products.

Security and abuse reports

A security or abuse report may contain a link, account or device identifier, description and relevant content excerpts. We may process that information and relevant service records to assess the report, address a security risk, protect affected people or meet legal duties. This processing is limited to those purposes and does not authorise access to unrelated local files. Submitting a report does not create a commitment to investigate, respond or take a particular action, except where required by law. Report concerns to hello@kunobi.com and include only the information needed to explain the problem.

Payments

If you buy a Kunobi plan, the checkout and billing provider processes the details needed for that purchase. Zondax processes the account, subscription and transaction information needed to provide the plan and meet legal obligations. Spending with an AI provider or another seller is governed by that provider's or seller's arrangements. This policy does not represent that agents can make purchases in every version of Kunobi.

Purposes and legal grounds

The Swiss Federal Act on Data Protection applies to Zondax's processing. Where the GDPR applies, we rely on the following grounds as appropriate to the particular processing:

• Contractual necessity, Article 6(1)(b), for the account and service features you request.
• Consent, Article 6(1)(a), for optional telemetry. You may withdraw it without affecting processing that was lawful before withdrawal. Accepting the EULA is not blanket consent to optional processing.
• Legitimate interests, Article 6(1)(f), for service security, abuse prevention, reliability, support and analysing voluntary feedback and reports to improve our products, subject to the applicable balancing of interests.
• Legal obligations, Article 6(1)(c), for required accounting records and legal compliance.

When you share other people's personal data, you or your organisation must have a lawful basis for doing so. Your instruction to share does not replace their rights.

Recipients and international processing

Recipients include the collaborators and tools you authorise, public-link viewers, and providers of identity, hosting, connectivity, diagnostics and payment services. Zondax may also disclose data where legally required or necessary to establish, exercise or defend legal claims. These disclosures remain subject to applicable law.

The service providers page identifies the providers involved, their purposes and destination countries. Where a transfer requires safeguards, we use an applicable adequacy decision or legally required contractual or other safeguards. You can request information about the safeguards applying to a particular transfer.

Retention and deletion

You control local files and backups you keep. Other recipients and connected providers control their copies under the applicable arrangements; Zondax cannot erase them merely because you uninstall Kunobi or revoke a grant.

For data held by Zondax, retention depends on its purpose: maintaining an account or active share, delivering a publication, resolving a report, protecting service security or meeting a legal obligation. We delete or anonymise data when that purpose ends, except where a lawful retention obligation or claim requires it to be kept. Accounting records subject to Swiss statutory retention are generally kept for ten years.

The service providers page sets out retention periods or criteria for account records, remote-tool traffic and logs, publications, diagnostics and backups. Deleting a record from an active service may precede its removal from backups. Ask us to delete personal data we hold using the contact below; we will explain any lawful limits on that request.

Your rights

Depending on the applicable law and its conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Contact dataprotection@zondax.ch. We respond within the period required by the applicable law and may need proportionate information to verify a request.

You may complain to the Swiss Federal Data Protection and Information Commissioner or, where applicable, the supervisory authority where you live or work in the EEA. If an organisation controls the data concerned, we will explain our role and direct or assist the request as appropriate.

Adult users and security

Kunobi is offered to users who have reached the age of majority where they live and can enter the EULA. If you believe a minor has provided personal data to us as a user, contact us about the personal data concerned. Applicable legal requirements govern its handling.

Protect your device, account and access grants, and keep independent backups. Access controls and encrypted transport do not establish that shared content is harmless or that a connected agent will disregard malicious instructions. No service can guarantee absolute security. Report suspected unauthorised disclosure to hello@kunobi.com.

Changes

This policy is version 1.2. Published versions remain available at their own addresses, and kunobi.com/privacy/desktop identifies the current one. We will explain material changes and obtain consent before new processing where the law requires consent. Publication of a policy does not itself grant new access permissions.