Privacy Policy

Effective date: June 18, 2026

This Privacy Policy explains how Ivan Stepanov, operating as Empresário Individual, Brazil ("we", "us", "our") collects, uses, and protects information when you use Kelly ("the Software"). We are committed to protecting your privacy.

1. Data Controller

The data controller is Ivan Stepanov, Brazil. Contact: support@klly.works.

2. What Data We Collect

Kelly is a local-first application. Most data never leaves your machine. We collect only what is strictly necessary:

3. Data You Provide to AI Services

Kelly sends messages and context to AI providers (e.g. Anthropic) using API keys you supply. We are not responsible for how third-party AI providers handle that data. Please review their privacy policies.

4. Local Data

All project data, messages, tasks, documents and knowledge base entries are stored locally in an SQLite database on your machine at ~/Library/Application Support/kelly/. We have no access to this data.

5. How We Use Your Data

6. Third-Party Services

7. Data Retention

License and account data is retained for as long as your account is active and for up to 5 years after closure for legal and tax compliance purposes. You may request deletion at any time (see Section 8).

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact support@klly.works. We will respond within 30 days.

9. Data Security

We use HTTPS for all network communication, bcrypt for password hashing, and HMAC-signed tokens for entitlement verification. No payment data is stored on our servers.

10. Children

Kelly is not directed to children under 16. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via the application or email.

12. Contact

For privacy-related questions, email support@klly.works.

© 2026 Kelly · klly.works · Terms · Privacy · Refund