Privacy policy

Effective 26 October 2026. Koishi is operated by Ahmet Kamer Çivi. Contact ahmetkamerc@gmail.com with privacy questions or requests.

What the app handles

Sign in with Apple supplies an Apple account identifier and authorization tokens. Our server stores that identifier, an encrypted refresh token, random session identifiers as hashes, consent status, subscription status, reply usage and request metadata. We do not request your Apple email or name. Conversations, drafts and memory notes are stored on your iPhone in a separate archive for each account. That archive is excluded from device backup and does not sync between devices.

AI conversations

When you send a message after giving consent, your message, limited recent context and memory notes you approved for chat are sent through our Cloudflare Worker to OpenRouter, which routes them to the Luna model to generate a reply or to gpt-oss if Luna filters a response. Each message you send is also sent once, on its own, through OpenRouter to TypeSafe's Jev decision model, which only chooses the companion's on-screen expression (an animation and an emoji) and does not write replies. We make the same zero-data-retention and no-data-collection request for that call. A separate model call may use your latest message and approved notes to propose a new note or detect an explicit correction. New notes are saved only if you review and approve them. If you clearly correct an approved note, the app may update that note automatically and notify you; you can edit or remove it in Saved notes. Our server does not keep a permanent transcript, note text or model output in its database or application logs. When a message matches our fixed crisis checks, the server adds one to a daily count of crisis guidance shown; the count contains no account, request or message information. See our safety protocol. We request zero-data-retention routing and deny data collection on each model call. OpenRouter and the selected model host apply their own service terms and operational safeguards. Your text is not end-to-end encrypted from the AI provider.

If you choose a companion nickname in Settings, it is stored on this device and included as a display-name preference with chat requests to the same AI provider.

Subscriptions and notifications

Apple processes purchases. RevenueCat receives a random app user ID and purchase information to verify your entitlement; we do not send it your chats or notes. If you allow notifications, iOS occasionally delivers a generic local reminder scheduled on your device. You can turn these off in Settings. No chat or note text appears in notifications. We do not receive a push token or send a remote notification for this feature.

Retention and controls

You can edit or delete memory notes, erase chats on this device, export the local archive, withdraw consent for new AI processing, or delete your account in Settings. Account deletion revokes our Apple connection, requests RevenueCat customer deletion and removes the server account; RevenueCat processes its deletion request asynchronously. Completed request metadata and old usage records are normally removed after about 30 days. If you report a reply, we keep the report (its reason and, only if you chose to include it, the reply text) for up to 90 days to review it; reports are deleted with your account. Service providers may retain operational or legally required records under their own policies. Exported files are controlled by the destination you choose in the share sheet.

Where data goes

Cloudflare, OpenRouter, its selected model host, Apple and RevenueCat may process data outside your country. Koishi is intended for adults 18 or older. Do not send passwords, payment card details or another person's private information. We do not use advertising trackers in the app. To ask about access, correction or deletion, contact ahmetkamerc@gmail.com.