Kitestring
Privacy and security

Your prompts are yours. Here’s exactly how we keep it that way.

Kitestring reads what you ask AI so it can coach you. This page explains what that means for your data in plain language, with the full policy one link away.

What Kitestring sees

Only what you ask. Never what you’re told.

The Kitestring app on your Mac reads your conversations in a fixed list of AI apps and sites, and nothing else on your screen. The answers stay where they are.

Claude
A supported AI app
Draft a follow-up to the Henderson proposal. Keep it short and lead with the timeline.
What we capture
  • The prompts you write, exactly as you wrote them
  • Which AI tool and model you used, and when
  • How long you were active in a supported AI app
  • A character count of each answer, never the answer itself
What we never touch
  • The AI’s answers, beyond their length
  • Your email, documents, files, or any other window
  • Your browsing outside the supported AI sites
  • Your clipboard, except at the moment you paste into a supported tool
Who sees what

Your prompts stay with you. Your company sees the trend.

The line between what you see and what your organization sees is enforced on our servers, not just hidden in the interface.

Your prompts, as you wrote them
  • YouCan see
  • Your organizationCannot see
  • Kitestring staffOnly with a logged reason
Your coaching
Including the excerpts it quotes back to you
  • YouCan see
  • Your organizationCannot see
  • Kitestring staffOnly with a logged reason
Work-type and subject trends
Writing, research, analysis, and so on
  • YouCan see
  • Your organizationCan see
  • Kitestring staffOnly with a logged reason
Usage and cost totals
  • YouCan see
  • Your organizationCan see
  • Kitestring staffOnly with a logged reason
Who you are
Your work email, from sign-in
  • YouCan see
  • Your organizationCan see
  • Kitestring staffOnly with a logged reason
Can seeCannot seeOnly with a logged reason
How long we keep it

Your prompts have an expiry date. You set it.

Nothing is kept out of habit. Try a window below and see what happens to your prompt text.

Prompt retention window
90
daysDefault
Written todayDeleted after 90 days
  • Your prompt text

    Kept for the window you choose, then deleted. Solo accounts start at 90 days; an admin can set the window for a whole organization.

  • Usage signals

    Counts, categories, tool used, active time, and cost estimates. Kept for the life of the subscription, then deleted or returned within 90 days.

  • Your coaching

    The guidance itself, not your prompts. Kept while your account is active so your coach doesn’t repeat itself.

Choose your window

30, 90, or 180 days, or keep prompts while your account is active. Change it any time in settings.

Pause capture

One click in the menu bar and Kitestring stops reading anything until you turn it back on.

Delete everything

Request a full deletion from your personal settings. Prompts, coaching, and signals are gone within 30 days.

How it’s protected

Built to hold up to your IT review

The controls an IT or security team will ask about, in the order they usually ask.

Encrypted in transit

TLS between your Mac and Kitestring, and between Kitestring and every subprocessor it uses.

Encrypted at rest

AES-256 in the production data store. Nothing sits on disk in the clear.

Isolated per customer

Tenant isolation keeps each organization’s data apart. One customer can never reach another’s.

Enforced on the server

The rule that only you see your prompts is checked by the server on every request, not hidden by the interface.

Staff access is logged

Kitestring staff have no access in the ordinary course. Any exception is recorded, and the record is visible to your admins.

Never used for training

Kitestring does not train models on your data, and the AI providers it uses are contractually barred from doing so.

SOC 1 and SOC 2 examinations are underway. The reports will be available under NDA on completion. Until then, our security overview and subprocessor list are available on request.
Security FAQ

The questions we get on every call.

For the window you choose: 30, 90, or 180 days, or while your account is active. Solo accounts start at 90 days. An organization’s admin can set one window for everyone. After the window, prompt text is deleted.

Yes. Request a full deletion from your personal settings and your prompts, coaching, and usage signals are gone within 30 days. Organizations can make the same request for their whole team through help@getkitestring.com.

Yes, both ways. It travels over TLS between your Mac and Kitestring, and between Kitestring and its subprocessors, and it is stored with AES-256 encryption at rest.

No. Kitestring never trains models on your data, and the AI providers it uses to classify and coach are contractually prohibited from doing so.

Nobody. Your organization sees categories, trends, and totals, never prompt text. That separation is enforced on our servers, and Kitestring never ranks or compares people.

Not in the ordinary course. The only exceptions are support you have asked for, a security incident, or a legal obligation. Every such access is recorded, and the record is visible to your organization’s admins.

No. The desktop app reads a fixed list of AI apps and sites, using the Mac’s accessibility interface, and cannot read any other window or tab. It touches your clipboard only at the moment you paste into one of those AI tools, and discards anything that doesn’t match the paste.

Our SOC 1 and SOC 2 examinations are underway. The reports will be available under NDA as soon as they complete. In the meantime we can share our security overview and subprocessor list on request.

help@getkitestring.com. A founder answers it, usually within two working days.

Ask us anything about this.

Everything above is written down in full in the privacy policy. Or just download the app and see for yourself.