1. Personal data we collect
Data you give us directly
- Identity and contact data — your name, email address, and any other details you give us when you create an account or contact support.
- Payment information — if you subscribe to a paid plan, our payment processor collects your billing details. Keli does not store full card numbers on our own servers.
- Prompts and files ("Inputs") — the messages, files, and instructions you send to Keli in Chat, Cowork, or Code, and the responses and actions Keli returns ("Outputs"). Keli is local-first: files on your machine stay on your machine unless you explicitly attach or reference them in a conversation.
- Feedback — ratings, bug reports, and suggestions you choose to send us.
- Support communications — anything you send us when you contact support.
Data we collect automatically
- Device and technical information — operating system, app version, device type, and IP address.
- Usage information — which features you use, session length, crash and error logs, and general performance metrics, so we can keep the app stable and improve it.
- Cookies — our website uses a small number of cookies for analytics and to remember basic preferences.
2. How we use personal data
We use personal data to:
- Provide, operate, and maintain the Services, including routing your prompts to the model you select;
- Process payments and manage your subscription, including automatically switching you to a free model when you reach a usage limit;
- Provide customer support and respond to your requests;
- Monitor, debug, and improve app stability and performance;
- Detect, prevent, and investigate fraud, abuse, and security incidents; and
- Comply with legal obligations.
We do not use your prompts, files, or conversations to train any AI model — ours or anyone else's. If you submit Feedback (for example, by rating a response), we may review that specific conversation to improve Keli's product experience, but we do not forward it to model providers for training purposes.
We route model traffic through OpenRouter with Zero Data Retention (ZDR) enforced. In practice, this means your prompts are only sent to model endpoints that have contractually committed not to retain your data after generating a response, and OpenRouter itself does not retain your prompts either. Providers that don't retain your data are, by definition, unable to use it to train their models.
3. Third-party AI models and OpenRouter
When you send a message in Chat, Cowork, or Code, Keli routes your prompt through OpenRouter, which forwards it to the underlying model provider you've selected (for example, Anthropic, OpenAI, Google, or an open-weight model). That provider processes your prompt to generate a response and returns it to you through OpenRouter and Keli.
This means:
- OpenRouter acts as our subprocessor for AI inference. Their handling of the data in transit is governed by their own privacy policy and the security controls described at their Trust Center, including SOC 2 Type II certification.
- Zero Data Retention. We enforce Zero Data Retention on our OpenRouter routing, so your prompts are only sent to model endpoints that don't retain your data after returning a response. OpenRouter's own policy is also zero-retention — they don't log your prompts unless you separately opt in to prompt logging, which we don't do on your behalf.
- The underlying model provider you select processes your prompt in memory to generate a response, then discards it. Because the data isn't retained, it can't be used for model training — by OpenRouter, by us, or by the model provider.
- We select and configure which model providers are available inside Keli, but we do not control how OpenRouter or the underlying providers operate their infrastructure. See our Security page for more detail.
4. How we share data
Beyond OpenRouter (Section 3), we share personal data with:
- Service providers — payment processing, cloud hosting, error tracking, and analytics vendors who process data on our behalf and under contract.
- Legal and safety — where required to comply with law, respond to legal process, or protect the rights, property, or safety of Keli, our users, or others.
- Corporate transactions — if Keli is involved in a merger, acquisition, or asset sale, personal data may transfer as part of that transaction.
We do not sell your personal data.
5. Data retention
We keep personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You can delete individual conversations from within the app; deleted conversations are removed from our backend within 30 days. You can request full account deletion at any time (Section 6).
6. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, object to certain processing, or withdraw consent. To exercise any of these rights, email us at privacy@keli.ai. We'll respond within the timeframe required by applicable law.
7. Security
We use encryption in transit and at rest, and we keep files local to your device by default. Because model inference runs through OpenRouter, we also inherit their independently audited security controls. Full details are on our Security page. If you believe you've found a security vulnerability, please email security@keli.ai.
8. Children's privacy
Keli is not directed at, and we do not knowingly collect personal data from, anyone under 18. If you believe a child has provided us with personal data, contact us at privacy@keli.ai and we'll investigate and delete it as appropriate.
9. International data transfers
Keli and our service providers, including OpenRouter and the model providers it connects to, may process personal data in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you directly.
11. Contact us
Questions about this policy or your personal data? Email us at privacy@keli.ai.