KEB OS is made by KEB Tech, Inc., called “KEB Tech,” “we,” or “us” here. This policy covers the KEB OS desktop app, the KEB OS mobile app, KEB OS cloud computers, and keb-os.com. We don’t sell your personal information, and we don’t use it for advertising.
What we collect
Your account
Your email address, your name, an optional handle and profile picture, and what we need to sign you in securely: a hashed password if you set one, passkeys, one-time sign-in codes, and session records.
What you create
Cards and folders, Spaces you create or join with their channels, messages, reactions, and the files and photos you choose to attach, bookmarks, saved prompts, KEB Agent memories, automations, KEB Apps, and passwords you save in Vault. Vault passwords are encrypted before they are stored.
Devices and usage
Your device type, operating system, and app version; push notification tokens so we can deliver notifications; IP addresses and user agents for security and rate limiting; and events about which features you use, so we can understand what works and fix what doesn’t. Our website also uses Vercel Analytics to count page visits. When you arrive from a link with campaign tags (such as utm_source) or from another website, we record those tags and the other website’s domain, to learn how people find KEB OS. We don’t use third-party advertising trackers.
Microphone, speech, and photos
The mobile app asks before it uses your microphone. Dictation turns your speech into text with Apple’s speech recognition. During a voice call with KEB Agent, your audio streams to your own computer over an encrypted connection, sometimes through a relay; we don’t record or store call audio. Photos are only read when you pick them to attach.
KEB Calls
When you start or join a KEB Call, including as a guest without an account, we keep a record of the call: who hosted it, its title, when it ran, and the name each person joined with. To keep calls working and fix dropped sound, the app or browser on each device in the call also reports how the call is going: connection quality (like packet loss, jitter, and delay, and whether the call connects directly or through a relay), whether the device is on Wi-Fi, cellular, or a wired connection, the kind of app, browser, and operating system, the type of microphone (Bluetooth, built-in, or USB, never its name), and when a microphone is muted, unmuted, or changed. They also say whether the call is on screen or in the background, whether the device is online or sharing its screen, and whether the microphone is allowed and how many microphones the device has. These reports don’t include IP addresses, device names, or anything said or shown in the call. We delete the detailed reports after 30 days and each call’s quality summary after 180 days, and we keep the call record as long as the host’s account exists. We don’t keep call audio or video. A call’s host can have a call transcribed, as explained below. Chat messages in a call aren’t saved, except that messages sent while a call is being transcribed go into its transcript. Otherwise our real-time provider holds them for a couple of minutes so someone who joins late can see them.
Call transcripts
A call’s host can have a call transcribed. Before anything is captured, everyone in the call is told and asked to agree, and anyone who doesn’t agree leaves the call while it’s transcribed. A “Transcribing” sign shows in the call the whole time, and a short announcement plays when transcription starts or resumes.
We save a written transcript of what each person said and wrote in the call’s chat while it was on (labeled with the name they joined with), a short record of the call (when it ran and who took part), and a record of who agreed and when. We don’t keep the call’s audio or video, and we don’t identify people by their voice. For a personal call, these go to the Cards of the person who turned on transcription, and only they can open them. For a call in a Space, they go to that Space’s Cards, where only members with access to that channel can open them. Either way, they can share them with others.
Transcription runs on Cloudflare. While a call is being transcribed, each person’s audio goes to Cloudflare Workers AI, which turns speech into text for us under Cloudflare’s data processing terms, and Cloudflare doesn’t use it to train AI models. We keep the text, not the audio. We use transcripts only to provide this feature. We don’t use them to train AI models or for our own analytics, and we don’t read them except to give support that’s asked for, to keep KEB OS secure, or when the law requires it. When someone asks KEB Agent about a call, the transcript goes to the AI provider they use with KEB Agent, as described under “AI features and AI providers.”
A deleted transcript stays in Trash for 30 days. Then it’s permanently deleted, and copies in our encrypted backups are deleted automatically within 90 days after that. It can also be deleted right away. Anything deleted stays deleted, even if we ever have to restore from a backup. Deleting your account deletes the transcripts in your personal Cards too. Transcripts in a Space belong to that Space: they stay until the Space’s owner or admins delete them, or until the Space itself is deleted, in which case they’re permanently deleted 30 days later, unless the Space is restored first. Deleting a transcript doesn’t delete copies made from it elsewhere, like notes, other Cards, KEB Agent chats and memories, or Cards shared in a Space; whoever made those copies can delete them. We keep a short record of who agreed to each transcript (each person’s name, their choice, and the time, but not what was said or any IP address) for 3 years, even after the transcript is deleted, so we can show that everyone agreed.
If you were on a transcribed call and want your part removed, ask the person who turned on transcription (for a call in a Space, the Space’s owner), or email us with the call’s link or date and the name you joined with. We’ll remove your name and your words from the transcript and call record we saved, and we’ll tell the person who turned on transcription, so they can also delete any copies they made elsewhere. We delete the whole transcript if you never agreed to be transcribed, or if the law requires it. We answer within 30 days.
The mobile browser
Pages you visit and your browsing history stay on your phone. Bookmarks and saved logins sync with your KEB OS account so they match your desktop.
Payments
If you buy a paid plan, our payment processor, Stripe, collects your payment details directly. We never see or store your full card number. Stripe shares with us what we need to manage your subscription: your plan and its status, your billing name and country, your card’s brand and last four digits, and your invoice and payment history.
AI features and AI providers
KEB Agent is powered by AI models from third-party providers. Before the mobile app sends anything to KEB Agent, it asks for your permission.
KEB Agent runs in the KEB OS desktop app with the AI provider you connect there, such as Anthropic (Claude), OpenAI (ChatGPT and Codex), Google (Gemini), xAI (Grok), or Cursor, under your own account with that provider. When you message or call KEB Agent from your phone, your messages, voice, and the images you attach go to your computer, and from there to the provider you chose, together with the context KEB Agent needs for the task, like relevant Cards or pages. The provider’s own terms and privacy policy apply to what it receives.
Cloud computers
If your plan includes a cloud computer (KEB Max, or an original KEB Pro or KEB Max plan), we run one for you: a private server with KEB OS on it, hosted by Google Cloud in the United States. Each cloud computer is its own server with its own disk. Nothing on it is shared with other customers, and its disk is encrypted at rest.
- What’s on it. Whatever you and KEB Agent do there: your chats and agent history, automations, files you create or download, the browser profile for websites you sign in to in KEB OS tabs (like cookies and saved sessions), and the sign-ins for the AI providers you connect there. Your AI sign-ins are stored on your cloud computer itself, not in our central databases, and our team never sees or enters them.
- AI on your cloud computer. KEB Agent on your cloud computer connects directly to the AI providers you choose, like OpenAI or Anthropic, under your own account with them, and that provider’s terms and privacy policy apply. We don’t route your prompts through our servers or keep copies of them. Features that sync with your KEB OS account, like Cards, Spaces, and the mobile app, work the same way they do on your own computer.
- Getting in. You open your cloud computer only inside the KEB OS apps, while signed in to your KEB OS account. Its screen, and your clicks and typing, travel over an encrypted connection, either directly or through our relay provider, Cloudflare. The relay can see IP addresses, but not what’s on your screen or what you type. Your cloud computer doesn’t accept incoming connections from the internet.
- When our team accesses it. Our team can technically sign in to a cloud computer, and those sign-ins are logged. We only do it to give you support you’ve asked for, with your permission; to keep KEB OS secure, like investigating abuse or a security problem; or when the law requires it. We don’t look through your files, chats, or accounts for any other reason.
- Running it. We keep operational records, like when your cloud computer was created, went to sleep, woke up, or was canceled, and which plan you’re on, for as long as your account exists. Security and access logs, including records of any staff sign-in, are kept for up to 400 days.
- When you cancel. We stop your cloud computer and keep a snapshot of its disk for 30 days, so you can come back and pick up where you left off. After 30 days, we delete it. If you delete your KEB OS account, we delete your cloud computer and its disk right away, with no snapshot.
How we use information
- To provide KEB OS: sync your data across your devices, deliver Space messages and notifications, and run the features you use.
- To keep accounts and the service secure, prevent abuse, and review content that people report.
- To understand usage, fix bugs, and improve KEB OS.
- To email you about your account and, if you’re on our lists, product news you can unsubscribe from.
Who we share it with
People in your Spaces see your name, profile picture, and the messages and files you share there. Service providers process data on our behalf to run KEB OS: Amazon Web Services (databases and email), Vercel (hosting), Google Cloud (cloud computers), Cloudflare (file storage, call transcription, and connecting and relaying calls and cloud computer screens), Ably (real-time message delivery), Stripe (payments), Expo, Apple, and Google (push notifications and app updates), and the AI providers described above. We also share information when the law requires it, to protect people’s safety, or as part of a merger or acquisition, in which case this policy continues to apply.
Keeping and deleting your data
We keep your data while your account is open. You can delete your account at any time in the mobile app under Settings → Delete account. Deleting your account permanently removes your profile, sign-in methods, personal Cards, memories, bookmarks, saved prompts, Vault, automations, KEB Apps, AI request records, usage events, KEB Calls you hosted and your place in calls you joined, call transcripts in your personal Cards, and the messages, reactions, and files you posted in Spaces. Spaces you own that have no other members are deleted too. If you own a Space that other people still use, you’ll be asked to delete it first. Shared Cards you added to someone else’s Space stay with that Space, no longer linked to you. Reports about content that broke our rules are kept as moderation records. Agreement records from transcribed calls are kept for 3 years, as explained under “Call transcripts.” Copies in our encrypted backups expire on their normal backup schedule. If you have a paid plan, deleting your account cancels it and deletes your cloud computer right away, with no snapshot. We keep payment and invoice records for as long as tax and accounting laws require.
When a business uses KEB OS Automations to collect form submissions, the submitted details are deleted 30 days after they’re received, or once any automation they started has finished, if that’s later. Automation activity logs are deleted after 90 days. A business can also erase a contact’s data on request.
Security
Data travels over encrypted connections and is stored with encryption at rest. Each cloud computer runs on its own server and disk and can’t be reached directly from the internet. Vault passwords are encrypted with a key per account. No system is perfectly secure, so please use a strong password and tell us right away if you think your account was compromised.
Your choices
- See and edit your profile in the app, and delete your Cards and messages at any time.
- Turn notifications, microphone, speech recognition, and photo access on or off in your device settings.
- Withdraw permission for KEB Agent in the mobile app under Settings.
- Ask us for a copy of your data, a correction, or deletion by emailing us. We answer within 30 days.
Where your data is processed
KEB OS is run from the United States, and our main databases are there. Some providers, like Cloudflare, store or process data in data centers around the world, often the one nearest you.
Children
KEB OS isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.
Changes
When we change this policy, we’ll update the date above, and for significant changes we’ll let you know in the app or by email.
Contact
Questions or requests: feedback@keb-os.com. See also our Terms of Use and Support page.