Your privacy, explained.

Who we are

This policy covers the KithoPal app and kithopal.com. KithoPal is published by G S C Jayasena (Gamagedara Sujith Chanaka Jayasena), the individual developer responsible for the app and this website.

For privacy questions or requests, email info@roribot.ai.

Privacy at a glance

Your conversations are processed on your device. KithoPal does not operate a conversation backend, require an online account, or include advertising, tracking, or third-party analytics SDKs.

On-device processing does not mean every feature is offline: initial downloads, App Store transactions, this website, and any support email involve outside services, as described below.

Information on your device

The app processes messages you type, microphone audio and speech transcriptions when you choose voice conversation, generated replies, and the memories and other personal entries saved in the app. This information supports conversation, recall, and your local history.

Speech recognition, speech synthesis, and conversation generation run locally using the selected supported model. The app does not upload conversation content or microphone audio to us or to a remote AI service. Conversation speech buffers are held in memory rather than saved as conversation audio recordings.

Saved conversations, memories, and personal timeline entries are encrypted locally. Opening private data uses the device’s authentication system, such as Face ID, Touch ID, or device passcode. The app receives an authentication result, not your biometric template or passcode. Ordinary preferences, such as language and scene selection, are stored separately in local app settings.

Local encryption and authentication reduce risk; they do not guarantee security on a compromised device or prevent screenshots taken while the app is open.

Permissions you control

• Microphone and speech recognition: used for voice conversations when you enable listening. Silent typed chat does not need microphone permission.
• Device authentication: protects access to private app content.
• Notifications: optional local reminders, if enabled. Reminder scheduling uses generic notification text and dates, rather than private conversation text.
• Selected files and photos: used only when you choose an input or export destination through a system picker or sharing interface, for example to make a video message.

Models and language downloads

Some models and speech or language assets require an initial download. Public conversation model files are downloaded from Hugging Face; Apple provides Apple Intelligence and system speech assets. Those providers receive the connection information needed to deliver a download, such as your IP address and the requested files. Conversation content is not included in these model download requests.

Once the necessary assets are installed, supported conversations can run without an internet connection. Removing a downloaded model is separate from deleting your conversation history.

See the Hugging Face privacy policy and Apple privacy policy for their services.

Purchases and Apple services

Optional purchases and restoration are handled through Apple’s App Store and StoreKit. The app checks purchase entitlements to unlock content. We do not receive your payment card details. Apple may make transaction, sales, or financial reports available to the developer as part of operating the App Store; these are separate from your private conversations.

Apple’s services, including purchase processing and any diagnostics you choose to share with Apple, are governed by Apple’s policies and your device settings.

Free video allowance

A device-only Keychain counter records the number of successfully generated free videos. Free users receive three completed videos per device; the optional one-time unlock includes unlimited video creation. The counter contains no script, conversation or personal profile, is not synced, and remains separate from the private vault. Deleting conversations does not reset this allowance. Failed or cancelled generations and sharing an existing clip do not use a credit.

Reporting a reply

Reporting prepares a draft for you to review. Nothing is sent automatically. A selected reply is included only if you enable its inclusion. Earlier messages, microphone recordings, profiles and memories are not attached automatically. If you choose to send the report by email, the developer and email provider receive the content you send and your email address, and use it to investigate and respond to your concern under the support practices below.

Exports and sharing

Exporting history, saving a file, or sharing a video message is your choice. Those copies leave the app’s private storage and may contain personal information. They are subject to the destination app, recipient, storage provider, and their privacy practices. Exported history does not carry the app vault’s encryption.

Deleting information in KithoPal does not recall exported files, shared messages, recipient copies, or support emails. The video message composer uses the details you enter in that composer rather than reading your private conversation history.

Website visits and support

This website does not add advertising trackers, analytics scripts, account registration, or nonessential cookies. Requests to load the website and its assets necessarily include technical connection information, such as IP address, browser request details, and requested URLs. The hosting service may process request and security logs to serve and protect the website. These requests do not include your in-app conversations.

If you email support, we receive your email address, message, and any attachments you send. We use them to answer your request and resolve the issue. Our email service processes that correspondence. Please avoid sending private conversations, passwords, payment information, or unnecessary sensitive details.

We retain support correspondence while it is needed to handle your request and related operational or legal obligations. You can ask us to delete correspondence; some records may need to be retained where required by law.

Retention and deletion

Local conversations and memories remain on your device until you delete them or remove the app’s local data. The app does not offer cloud conversation recovery or sync. Private app storage is excluded from the app’s backups; do not rely on a device backup to recover conversations.

Use conversation history to delete conversations and manage saved memories. Profile and chapter boundaries matter: deleting the current chapter does not delete other profiles or archives. Independently saved entries and exports may need separate deletion. See Privacy choices for practical steps.

There is no online KithoPal account to close and no remote conversation database for us to search or erase on your behalf.

Your choices and rights

You can stop listening, use typed chat, manage permissions in device settings, review saved memories, delete local data, and choose whether to share an export. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of information we hold, and to contact your local data protection authority.

Contact info@roribot.ai about information you sent to support. We may need reasonable verification of your request. We cannot access device-only conversations; those are managed in the app.

An app for adults

KithoPal is intended for adults aged 18 and over and is not directed to children. If you believe a child has sent personal information to our support address, contact us so we can address it. AI companions are fictional and are not professional or emergency services.

Changes to this policy

We will update this page when data practices change and revise the date above. Material changes will be communicated as appropriate before the changed practices apply. Contact info@roribot.ai with any questions.