Privacy policy
Publisher and controller: Elie Lukau EI, 7 Cour Leo Frankel, 77176 Savigny-le-Temple, France. Contact: elielukaupro@gmail.com.
Data we use
We process an account identifier, even when you start without signing in, and the information required for Apple or Google sign-in, such as the email supplied by the provider. We also process your goals, preferences, events, topics and documents, recordings you initiate, their transcripts, estimated timestamps, measurements and feedback, practice history, progress and subscription status (product identifiers and validity dates). Providers process technical information needed for security and operation, including network requests, IP addresses and logs. The microphone is used during recordings you start. Kairos does not create a biometric identity profile: the speech ring represents recording characteristics, not voice identification.
Purposes and legal grounds
Providing the service, managing accounts, history and subscriptions is based on performance of the contract. Voice processing and transmission for automated analysis rely on consent requested before the first recording. You can stop recording and revoke microphone permission in device settings. To stop processing or erase existing data, delete your account or contact us. Security and abuse prevention rely on our legitimate interest. Legal obligations may require retention of some information. We do not use recordings for advertising.
Recipients and artificial intelligence
Supabase hosts the Kairos database and files in Paris (eu-west-3). Audio files are private; a temporary link lets the analysis provider read them. Before using the coach, choose whether to allow this sharing.
What data? Your voice recordings, transcripts, speech measurements and the context you provide: topics, answers, texts, CV or job description. Coach replies may also contain information from that context.
Who receives it? WaveSpeedAI and kie.ai process this data using models from OpenAI, ElevenLabs and Google (Gemini). Depending on the feature and availability, kie.ai may take over from WaveSpeedAI. Supabase hosts Kairos data. For live voice conversations, your voice is sent to Google (Gemini).
For what purpose? To transcribe your voice, analyse your answer, personalise simulations and read coach replies using a synthetic voice.
You can decline and use content without AI. Withdraw permission at any time in Profile → AI data sharing. This blocks new transfers; processing already started and provider copies remain subject to their policies. See retention periods and details in the privacy policy.
WaveSpeedAI · WaveSpeedAI Terms · kie.ai. Avoid secrets, sensitive information and third-party data you are not authorised to share. RevenueCat validates and tracks subscriptions using your account identifier and purchase information. Apple handles App Store payments; Kairos does not receive your card number. Apple and Google also participate if you choose their sign-in services.
Optional diagnostics and transfers
If you enable “Diagnostics and usage” in Profile and the service is configured, PostHog receives usage events and JavaScript errors with a pseudonymous installation identifier and technical metadata. Sharing relies on consent and is off by default. This integration sends no audio, transcript, document or account email. You can stop sharing in Profile; this does not erase data already received, which remain subject to project retention and your rights. The region and retention period must appear in provider details before publication. Some providers may process data outside the European Economic Area. Applicable arrangements and safeguards: Supabase hosts the Kairos database and files in Paris (European Union); its data processing agreement provides the European Commission’s standard contractual clauses for any transfers. RevenueCat (United States) manages subscriptions under a data processing agreement that includes the same clauses. Optional diagnostics, sent only if you turn them on, are processed by PostHog in the United States. WaveSpeedAI (entities in Singapore and Hong Kong) and kie.ai provide access to models from OpenAI, ElevenLabs and Google (Gemini). Required recordings, transcripts, measurements and context may be processed outside the EEA, including in the United States and model-provider countries. WaveSpeedAI provides reasonable security measures and retention for as long as necessary for its service, legal obligations and certain legitimate interests; no precise common retention period for input audio, transcripts and downstream copies is confirmed here. In its reply of 6 October 2026, kie.ai states that its servers are in the United States, generated media are retained for 14 days, and prompts, transcripts and task metadata for approximately two months. kie.ai says it does not itself use this content to train its models, but does not guarantee downstream practices and does not provide separate DPAs or SCCs to individual API customers. Kairos has no specific WaveSpeedAI agreement confirming these points for every model; we therefore do not promise a general absence of training or immediate deletion by all providers. Account deletion removes data from the Kairos project; provider copies remain subject to their terms and data-rights requests. Local 30-day retention and deletion after analysis are described below. For live voice conversations, your voice is sent directly from your phone to Google (Gemini API) using a temporary token issued by our servers; it may be processed outside the EEA, including in the United States, under the Gemini API terms. Kairos does not keep the audio of these conversations; their transcript is saved in your account for the debrief.
Retention
Ordinary recordings become eligible for deletion after 30 days; a daily task purges them. Reference recordings used to compare progress remain with the account for playback. Profile also lets you choose deletion after successful analysis: transcripts and results remain, but that file cannot be replayed. Failed analyses remain subject to the applicable purge. Transcripts, results, preferences and history remain until account deletion. Deleting the account removes Kairos project files and data. Provider copies and retention obligations follow their terms; Kairos deletion does not automatically erase Apple billing records or data Apple or Google hold for their own services.
Your rights
You can request access, correction, erasure, restriction and, where applicable, portability. You can withdraw consent and object to processing based on legitimate interest. Contact elielukaupro@gmail.com; we normally respond within one month, subject to GDPR extensions. In Profile, select “Delete my data” and confirm (the label depends on app language). Removing the app does not delete the account; account deletion does not cancel an Apple subscription. Manage that separately in subscription settings. You can complain to the CNIL (https://www.cnil.fr/fr/plaintes) or your local data protection authority.
Security and updates
Communications with the hosted server use HTTPS. Account data are protected by access rules and files are stored privately. No system guarantees absolute security. This policy will change if processing changes; the update date appears below.