Privacy Policy

1. Summary

• We collect the email (and password) you use to create an account, and the email you give to join the launch waitlist or subscribe to our Playbook newsletter.
• Invoices and estimates you make on the Site stay in your browser — they are not sent to us. Records you create in the App are stored in your account.
• We use Google Analytics on the Site only after you accept analytics cookies. The mobile app contains no analytics or advertising SDKs and does not track you.
• We do not sell your personal information.

2. Information you provide

• Account information — your email and a password, used for the account that works on both the Site and the App. Passwords are stored hashed; we never see them in plain text.
• Business records (App) — invoices, estimates, clients, line items, attachments, and company details you save in the App. This data belongs to you and is stored in your account.
• Web maker (Site) — anything you type into a web invoice/estimate stays in your browser's session storage and is not transmitted to us.
• Waitlist — your email, so we can tell you when the app launches.
• Newsletter (Site). If you subscribe to the Playbook newsletter, your email and the frequency you choose (weekly, biweekly, or monthly), so we can send you that content. You can unsubscribe at any time.

3. Information collected automatically

On the Site, with your consent for cookies, we collect standard analytics data (pages viewed, referring links, approximate location derived from IP, device/browser type, interactions). The App collects only limited technical data needed to operate and support it (such as app version and device/OS for troubleshooting and push notifications) and does not use analytics or advertising SDKs.

4. Cookies and analytics

We use Google Analytics (GA4) with Google Consent Mode on the Site. Analytics cookies are denied by default and set only after you choose "Accept"; if you decline, analytics runs in a cookieless, non-identifying mode. You can change your choice anytime via "Cookie settings" in the footer. When you sign in, our authentication provider sets a strictly necessary session token so you stay logged in; it is not used for advertising.

The mobile app does not track you

The Kerythos Invoice mobile apps (iOS and Android) contain no analytics or advertising SDKs and do not track you across apps or websites. The Google Analytics described here applies only to this website.

5. The web maker is private by design

The web invoice/estimate maker runs entirely in your browser. Details you enter are kept in session storage and are never uploaded to our servers. If you use "Share", the invoice is encoded into the link itself — you decide who receives it.

6. App data and storage

Records you create in the App are stored in your account on our own backend platform, Kethosbase, operated by Kerythos AI, so you can use them across devices. Access is protected by per-account isolation (row-level security); the App additionally offers two-factor authentication and biometric unlock.

7. How we use information

• to provide the Service and authenticate your account;
• to store and sync the records you create in the App;
• to operate the waitlist and tell you about the launch;
• to send the Playbook newsletter to subscribers at the frequency they chose, until they unsubscribe;
• to measure and improve the Site (analytics, with consent);
• to send transactional and service notifications;
• to maintain security and prevent abuse;
• to comply with legal obligations.

8. How we share information

We share personal information only as needed:

• Service providers — Kethosbase (our own backend and authentication platform), Stripe (payments and payouts, in the App), Apple/Google (subscription purchases on mobile), Anthropic (the App's optional AI assistant and marketing captions), Magnific (AI marketing images), Google (analytics, on the Site), Mailchimp (Playbook newsletter delivery, if you subscribe), and our hosting/delivery providers (Vercel, Cloudflare), acting on our behalf;
• Legal and safety — when required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

AI assistant (Lucy)

The App includes an optional AI assistant, Lucy. When you use Lucy, the messages you type or dictate are sent to Anthropic, PBC — our AI provider — to generate responses. We send only the content of your request and the related invoice details needed to fulfill it. Anthropic processes this as our service provider and, under its commercial terms, does not use it to train its models. The App asks for your consent before any data is sent, and you can decline and keep using the rest of the App.

Marketing posts (AI images and captions)

The App's marketing feature builds a social-media post: an image, plus a caption. Two different providers are involved, and they receive different things. The photo you upload is stored privately under your account and sent to Magnific, our AI image provider, which generates or enhances the image. Separately, the item name and its price are sent to Anthropic to write the caption. No image is sent to Anthropic. Both act as our service providers and, under their terms, do not use your content to train their models. The App asks for your consent before anything is sent, and you can decline and keep using the rest of the App.

The finished image is stored at a public link, because the social network you post to has to be able to fetch it. Anyone holding that link can open it, so treat a marketing image as public from the moment it is made. Deleting the post moves it to Trash; deleting it permanently removes the image from our storage, though whatever you have already shared elsewhere is beyond our reach. Only upload photos you have the right to share, including of anyone identifiable in them and of any property they show.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

9. Data retention

We keep account information and your App records for as long as your account exists, and waitlist emails until launch or until you ask to be removed. Analytics data is retained per Google's settings. Because web-maker content is not sent to us, there is nothing for us to retain there. When you delete your account, we delete your stored records, subject to any retention required by law.

10. Data security

We use reasonable technical and organizational measures, including encryption in transit (HTTPS), per-account isolation (row-level security), and reputable infrastructure providers. The App additionally offers two-factor authentication and biometric unlock. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. International visitors

We are based in the United States and process information in the U.S. If you access the Service from outside the U.S., you understand that your information will be processed in the U.S., where data-protection laws may differ from those in your country.

12. Children's privacy

The Service is intended for businesses and adults. It is not directed to children under 18, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

13. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. You can delete your account (and its data) yourself in the App or on the web, or by contacting us.

• California residents (CCPA/CPRA). You may request access to or deletion of your personal information and opt out of any "sale" or "sharing". We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising these rights.
• Other U.S. states. Residents of states with comprehensive privacy laws may have similar rights. To exercise any right, email us; we may need to verify your identity first.

14. Communications

If you join the waitlist or create an account, we may send service and launch emails. If you subscribe to the Playbook newsletter, we send it at the frequency you chose until you unsubscribe, and every email includes an unsubscribe link. You can unsubscribe from non-essential emails anytime. Any SMS/text messaging is part of the App and governed by its in-app consent (TCPA); we do not send marketing texts from the Site.

15. Changes to this Policy

We may update this Policy from time to time and will revise the effective date above. Material changes will be reflected here.

16. Contact

• Kerythos AI — Los Angeles, California
• Email: templar@kerythos.ai

© 2026 Kerythos AI. All rights reserved.