Privacy Policy

What Kagodo is

Kagodo is an AI personal assistant. You write to it; it remembers what matters; it helps you manage email, calendar, documents, expenses and the running list of things you mean to do. This page explains what we do with the information you give it.

Kagodo is operated from Singapore and is currently offered by invitation. Your personal data is handled under Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

• Account information. Your email address and name, from signing in with Google, Apple, or email and password.
• What you tell your assistant. Messages you send in the mobile or web app, plus photos and files you attach.
• Email sent to your assistant's @thisismyassistant.com address, including anything you forward or CC to it, and drafts it prepares for your approval.
• Calendar data, if you connect a calendar. Google Calendar, iCloud Calendar and the Apple Calendar on your iPhone are all supported, in any combination and more than one at a time, and Kagodo keeps a calendar of its own alongside them. Kagodo reads events so it can help you with your schedule, and creates or updates them when you ask.
• Documents and files you upload, forward or share in: the file itself, text extracted from it, and a searchable representation of that text.
• Expenses: amounts, merchants, dates and categories taken from receipts and emails you give it.
• Tasks, reminders and collections it is tracking for you.
• Rules and preferences you teach it, so you do not have to say the same thing twice.
• Your current location, only if you allow it. Used in the moment to answer questions that depend on where you are. We do not keep a history of where you have been and we do not track you in the background.
• Telegram messages, only when you call on it. If you link Telegram, your assistant replies only when you @mention it or reply to it directly. It does not read or act on anything else.
• Push notification tokens from your device, so the assistant can notify you.
• Operational logs and telemetry: technical records such as timings and error reports. These do not include message bodies, email content, calendar content, document text or file contents.

Google Calendar data

If you connect Google Calendar, Kagodo uses calendar data only to provide assistant features you request: understanding your schedule, answering questions about upcoming events, and creating or updating calendar events when you ask it to manage your day.

Kagodo does not sell Google user data, does not use Google user data for advertising, and does not use Google user data to train AI models. Google Calendar access stays off until you choose to connect it, and you can disconnect it at any time in Settings.

Kagodo's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Kagodo does not use, transfer or sell Google user data — raw, aggregated or derived — to create, train or improve any foundational or generalised artificial intelligence or machine learning model. We build no models and run no training pipeline. Google Calendar data is sent to our AI providers only to generate the response you asked for, under terms that exclude training on customer content.

Calendars you connect

You can connect more than one calendar at a time, and Kagodo's own calendar sits alongside whatever you connect rather than replacing it. Disconnect any of them in Settings and we delete that calendar, its credential and the events we copied from it.

iCloud Calendar. Apple provides no sign-in button for apps outside its own, so the only way to connect iCloud is an app-specific password — a code you generate in your Apple Account for a single app. This is Apple's own mechanism, not something Kagodo asks for instead of signing in properly. It is not your Apple Account password, we never see that, and it cannot be used to sign in to your Apple Account or change its settings. We use it only to read the calendars you chose, we store it encrypted, and you can revoke it in your Apple Account whenever you like.

The Apple Calendar on your iPhone. No password at all. You give the Kagodo app permission on the device, and only the calendar you select is shared with us.

What we do not collect

• Advertising identifiers.
• Location history, or any background location tracking.
• Passwords, payment credentials, account-access 2FA/OTP codes, or security-question answers. The assistant will refuse these if you try to share them. The one thing we do store is an Apple app-specific password, if you choose to connect iCloud Calendar — a single-app code that is not your Apple Account password and cannot be used to sign in to it. See "Calendars you connect" above.

Identity and travel documents

Kagodo may process identity, travel or account details you choose to provide when they are needed for an assistant task, such as recording a passport number, preparing travel paperwork, or helping with an account form. These details are used only for the task you asked for and are not part of the always-on assistant context.

How we use information

We use your information to operate Kagodo for you: answer your questions, remember information you ask it to remember, organise files and notes, prepare drafts, manage calendar events, track tasks and reminders, send notifications, fix bugs and keep the service secure.

We also record operational logs and telemetry, set out in the next section.

How we know when it isn't working

We record operational logs and telemetry so we can debug failures, verify deployments, measure cost, detect outages and keep the service secure. These records contain no message content, are not used for advertising, and are not used to train AI models.

Operational logs and telemetry are kept for up to 30 days. Usage and cost records are kept for 90 days.

Consent, and taking it back

Some things need a separate yes, including connecting a calendar, linking Telegram, granting location permission and enabling notifications. Those stay off until you turn them on.

You can withdraw consent at any time by disconnecting the integration in Settings, changing the permission on your device, or deleting your account.

Who we share it with

Kagodo runs on a small number of third-party services. Your data reaches them only to operate the product. We do not sell your data, and we never share it for advertising.

• AI model providers to generate your assistant's replies and to read what you send it, in the United States and possibly the European Union.
• Hosting and storage in the United Kingdom and Germany.
• Email delivery in the United States.
• Web search and page reading in the United States.
• Operational monitoring, which receives technical records such as timings and error reports, never the content of your messages, email, calendar, documents or files.
• App delivery and push notifications in the United States, and Apple and Google globally.
• Google and Apple for sign-in, and Google for calendar access if you connect it.
• Telegram, if you link it.

AI, and whether you are training it

Your messages, and whatever your assistant needs to read to answer them, can be sent to AI providers to generate replies. That can include your email, calendar and documents.

We do not use your data to train AI models. We build no models and run no training pipeline. We use an AI provider only where its published API or customer-content terms say customer prompts, inputs and outputs are not used to train its models by default, or not without explicit opt-in.

Which provider handles a given request changes as we balance quality, speed and cost. Every one of them processes your content in the United States or the European Union, under terms that exclude training on it.

Your assistant can be wrong. It works from incomplete information and it makes mistakes. Check anything that matters.

Where your data goes

At rest: your data is stored in the United Kingdom and Germany.

In processing: generating your assistant's replies sends your content to the United States, and may involve the European Union. Web search, and reading a page when a website blocks our own reader, go to the United States.

Operational monitoring: technical records are processed by a monitoring service. They are limited to operational metadata and do not intentionally include message, email, calendar, document or file content.

Looking things up on the web

When you ask your assistant to look something up, it can search and read web pages, and what it finds is processed by the services described above in order to answer you.

When it fills in a form for you, it puts the form to you for approval before anything is submitted, and it never enters a password or login credential, card details, a code used to get into an account, or a security-question answer. Kagodo is never in the money flow: where something needs paying, it hands off to you.

Other people's information

When someone emails you and you forward it to your assistant, or they write to its address directly, their message and address are stored so your assistant can act on it. They have not agreed to anything — you chose to route their mail here. Worth a thought before forwarding something sent to you in confidence.

How long we keep it

We keep your account and its data for as long as your account is active. Files are kept until you delete them, though files attached to a Collection you archive are removed 90 days after archiving. Operational logs and telemetry are kept for up to 30 days, and usage and cost records are kept for 90 days.

If you sign up and never finish setting up an assistant, we delete the account and everything held with it 90 days after you signed up.

When you delete your account from Settings, your assistant is stopped, its workspace removed, connected credentials revoked, and everything we hold about you deleted immediately, including uploaded files. Copies of emails held by our email delivery service are removed within 30 days. We keep one record of the deletion itself, containing a one-way hash of your user ID, not your name or email.

Your rights

You can ask what personal data we hold about you and how it has been used, and ask us to correct anything wrong. Email us and we will respond within 30 days. You can delete your account yourself at any time from Settings, and if you want a copy of your data, ask and we will put it together for you.

If you are in the UK or the EEA, data protection law there may give you further rights, including erasure, portability and objection. Ask and we will honour them.

Security

Your assistant runs separately from everyone else's, can reach only your data, and never holds administrative keys. Accounts are isolated from one another, so no account can read another's. Connected credentials are encrypted at rest, and traffic is encrypted in transit.

Kagodo is early-stage software, built carefully, without an external security audit. Kagodo is run by one person, who has administrative access to the systems it runs on and can reach stored data when operating or fixing the service.

Children

Kagodo is not intended for children under 16. If you believe a child has signed up, email [email protected] and we will remove the account.

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. Material changes will also be sent to you by email or in-app.

Contact

Kagodo is operated by Tan Li-wen Melanie, Singapore. For any privacy question, email [email protected].