how we hold your words

last updated · 27 april 2026

the short version

kehdo is a voice journal. when you speak, your voice becomes a transcript that lives in your account. we use openai's whisper to turn audio into text and anthropic's claude for gentle summaries — neither company uses your data to train any model, and both delete it within thirty days. everything else lives inside firebase (google cloud). you can delete it all from inside the app, anytime, no questions.

what we collect

• your voice recordings. stored only on your phone, in the app's private folder. cleared automatically after seven days.
• the transcripts of those recordings. kept in your account so they travel with you across devices. each transcript carries its tag, time, language, and word count.
• your name and language preference. whatever you typed during onboarding.
• your tags and routines. the labels and rhythms you set up to organise entries.
• an anonymous account id, generated the first time you open kehdo. if you choose to link a google account later, we also keep that google email so you can sign back in on a new device.
• anonymous crash reports via firebase crashlytics, only when something breaks. these contain the technical stack trace, never your transcripts.
• monthly usage counts — how many times you've used ai features that month, so we can stay within the free tier limits. resets at the start of each month.

we don't collect: your contacts, your location, advertising ids, your other apps, or analytics about how you use kehdo.

where it travels

openai (whisper). when you finish a recording, the audio is sent to openai's whisper api over https for transcription. openai does not use api inputs or outputs to train any model. audio may be retained on openai's servers for up to thirty days for safety review, then deleted. it is not reviewed by humans unless flagged for an explicit safety violation.

anthropic (claude). when you tap the sparkle on an entry to summarise it, when a task-tagged entry gets parsed for sub-actions, or when the weekly digest reflects on the week, the relevant transcript text is sent to claude over https. anthropic does not use api inputs or outputs to train any model. text may be retained for up to thirty days for safety review, then deleted. it is not reviewed by humans unless flagged for an explicit safety violation.

firebase (google cloud). transcripts, account settings, tags, and usage counts live in cloud firestore, primarily in india. authentication is handled by firebase auth. crash reports go to firebase crashlytics. all of this is owned by google and governed by their privacy commitments.

we do not sell your data, share it with advertisers, or feed it to any other service.

how long we keep it

• audio recordings: seven days on your phone. then deleted automatically.
• transcripts and account data: until you delete your account. there is no automatic expiry.
• crash reports: ninety days at firebase crashlytics' default schedule.
• monthly usage counts: archived at month end and kept for a rolling year so caps reset cleanly.

your controls

• delete everything: open the app, settings → delete my account. this wipes your transcripts, settings, tags, routines, and usage counts from firebase, and signs you out. there's nothing to recover after this — make sure you mean it.
• log out without losing data: settings → log me out (shown once you've linked a google account). this unlinks google but keeps your data attached to your anonymous account. signing in again with the same google account brings everything back.
• clear local cache: android settings → apps → kehdo → storage → clear data. wipes the app on your phone; server data stays put.
• email us: if any of the in-app paths don't work for you, write to kehdoaiapp@gmail.com and we'll handle it manually within thirty days.

your rights

under data protection laws including the eu gdpr and the uk gdpr, you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. most of these are available directly in-app — your transcripts are visible in the timeline, settings lets you edit your name and language, the pdf export gives you a portable copy of every entry, and delete account erases everything. if you'd rather we handle a request for you, email kehdoaiapp@gmail.com. you also have the right to lodge a complaint with your local data protection authority.

children

kehdo is not designed for children under 13. we don't knowingly collect data from anyone under 13. if you believe a child has used kehdo, email us and we'll delete the account.

security

connections to firebase, openai, and anthropic are encrypted in transit. our backend endpoints are protected by industry-standard app integrity verification, so only signed kehdo installs can reach them. authentication is managed by firebase auth.

no system is perfect. if we ever discover a breach that affects you, we will tell you in-app and by email (where we have one) within seventy-two hours of becoming aware.

international transfers

your data passes through:

• the united states, briefly, when transcripts are processed by openai or claude.
• india, where firestore stores your account data at rest.

if you're using kehdo from the european union or united kingdom, this means your data leaves those regions. we rely on the standard contractual clauses incorporated by openai, anthropic, and google for these transfers.

changes to this policy

if we change this policy, we update the date at the top and tell you in the app the next time you open it. for material changes that affect how your data is used, we'll give thirty days' notice before the new terms take effect.

get in touch

email kehdoaiapp@gmail.com for anything — questions, deletion requests, things you want to change in kehdo's privacy posture.