Privacy Policy

Your notes

Writing, documents and the local library are stored on your device. When you sign in, your documents, including the photos and scanned pages you add to them, sync through our servers to your other devices, encrypted in transit and at rest, together with the account identifiers needed to route them.

Purchases on the web

Web payments are processed by Stripe. For Pix, Stripe receives your name, CPF and e-mail; Kastoro does not store your CPF. For card payments, you enter your card details directly on Stripe's page, and Kastoro never sees or stores card numbers. To grant and manage your access, we keep the payment and subscription identifiers, the product, its status, the amount, the relevant dates and your Stripe customer ID. At checkout, the country of your connection, derived from your IP address by our network provider, is used only to choose the currency and payment method, and is not stored. Deleting your account cancels any active Stripe subscription and deletes our billing records; tax and payment records that Stripe is required to keep stay with Stripe.

Purchases on iPad

Apple processes payment, and Kastoro confirms each App Store subscription directly with Apple. Superwall receives your Kastoro account identifier and your plan (free or Pro) to manage subscription offers. Kastoro receives transaction identifiers, the product, purchase and expiration dates, and storefront information. We do not receive your payment-card details.

Optional online features

When you explicitly use an online AI, speech or catalog feature, the content required to answer that request is sent to our servers and, for AI and speech, to third-party providers that process it on our behalf. Features that say processing stays on device do not upload that content. In a voice conversation, your voice is streamed to the AI provider while the conversation is open; Kastoro does not record it. The app asks for your permission before the first use of each AI feature, and you can turn it off at any time under AI permissions in Account Settings.

On our website

On kastoro.ai and in the web app, we measure product usage with OpenPanel using an opaque account identifier. On our public pages, we measure our own ad campaigns with TikTok: a click identifier, the page viewed, your IP address and browser details and, when you create an account on the web, a registration event. Neither service receives your notes, e-mail or name, and browsers that send Do Not Track or Global Privacy Control are excluded. The iPad app does not use these tools.

Sharing, retention and choices

We do not sell personal information or use it for third-party advertising. Service data is retained only as long as needed to operate, secure and support the product. You can export your documents at any time, and you can delete your account and its data directly in the app under Account Settings — deletion starts immediately and typically completes within 24 hours (at most 30 days). Backup copies expire on a fixed schedule, so deleted data also expires from our backups within that same 30-day window.

Contact

Questions or privacy requests can be sent to hello@kastoro.ai. We will update this page when the product or its service providers materially change.