Privacy Policy

1. What data we collect

Account data

When you create an account we store your email address and a securely hashed password. If you sign in with Google we receive your email address and display name from Google. You may also use Karakoram as a guest, in which case no email is collected and your session is identified only by a random ID.

Usage data

To make the assistant useful we store the content of your focus sessions: session goals, start and end times, your chat history with Noesis, and a short behavioural profile the assistant builds to personalise its responses.

Voice and camera

If you use the microphone, the recorded audio clip is sent to our server and forwarded to a speech-to-text provider so it can be transcribed. If you enable presence detection, your camera is used to detect whether someone is in front of the screen. Camera frames are processed in your browser and are not stored. Audio clips are not retained after transcription; the resulting text is stored as part of your chat history.

Technical data

Our servers and analytics record standard technical information such as IP address (anonymised in analytics), browser type, device type, and pages visited.

2. How we use it

• To provide the service — running focus sessions, timers, and the AI assistant.
• To personalise Noesis's responses to your goals and history.
• To keep you signed in and secure your account.
• To understand which features are used and improve the product.
• To detect abuse and enforce our Terms of Service.

We rely on your consent for optional features such as microphone and camera access, and on our legitimate interest in operating and improving the service for everything else.

3. Third parties

We share the minimum data necessary with the following processors. Each has its own privacy policy governing its handling of that data.

We may also disclose data where required by law, or to protect the rights and safety of our users.

4. Cookies and local storage

We use a small number of browser storage mechanisms:

• Essential. An authentication token that keeps you signed in. Without it the app cannot function.
• Preferences. Local storage entries remembering your settings — for example whether ambient sound is on or off.
• Analytics. Google Analytics cookies that measure visits and page views. These are not required to use the service, and you can block them in your browser or with an ad blocker.

We do not use advertising or cross-site tracking cookies.

5. How long we keep it

Account and session data is kept while your account is active. Guest sessions are transient and are cleared automatically. When you delete your account, your profile, chat history, and session records are removed from our production database.

6. Your rights

Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

• Delete your account. Email [email protected] from your registered address and we will delete your account and associated data. We aim to action requests within 30 days.
• Access or export. Request a copy of the data we hold about you.
• Withdraw consent. Revoke microphone or camera access at any time in your browser settings.

7. Children

Karakoram is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us personal data, contact us and we will delete it.

8. Changes to this policy

We may update this policy as the service evolves. The "last updated" date at the top of this page always reflects the current version, and material changes will be announced in the app.

9. Contact