Skip to main content
Kyro is an open-source product fromTonmoy InfrastructureOwned byEshan Roy
Kyrov0.1.0
Get Kyro
Transparency & Trust

Privacy Policy

Last updated: October 2026 • Product Owner Review Recommended

Notice: This document describes the technical data handling practices of the Kyro website and the open-source Kyro desktop software. It is provided for informational clarity and should be reviewed by legal counsel if customized for commercial operations.

1. Website Data Handling (kyro.tonmoyinfrastructure.org)

  • Zero Tracking Cookies: This website does not use tracking cookies, marketing beacons, or session recording scripts.
  • Zero Third-Party Analytics: We do not embed Google Analytics, Mixpanel, or third-party user fingerprinting tools.
  • Web Hosting Logs: Standard web server connection logs (IP address, user-agent, requested URL) may be processed by hosting infrastructure solely for DDoS mitigation and operational stability.

2. Kyro Desktop Application Data Handling

The Kyro desktop application was architected from day one under a strict Zero-Trust Local-First design:

  • Local SQLite Storage: All chat histories, task runs, memories, timeline steps, artifacts, and local preferences are stored exclusively on your device in SQLite (WAL mode).
  • Operating System Keyring: Your API keys and OAuth tokens are stored in your OS Keyring (macOS Keychain, Linux Secret Service, Windows Credential Manager). They are never saved in plaintext.
  • Zero Telemetry to Kyro Authors: The Kyro desktop application contains no telemetry reporting back to the project authors or maintainers.
  • Local Document & File Processing: PDF extraction, file organization, and code diff calculations execute purely within local Rust memory and never upload files to cloud servers.

3. External Model Inference Providers

When you instruct Kyro to solve a task, prompt text and any attached screenshots are sent directly from your machine to your configured model endpoint (such as NVIDIA NIM or an OpenAI-compatible server):

  • Requests flow directly between your machine and the selected model API provider. Kyro operates zero intermediate proxy servers.
  • Your interactions with model providers are governed by the respective privacy policies and terms of those providers (e.g. NVIDIA, OpenAI, Anthropic, Google).
  • If you configure a self-hosted local model server (such as Ollama or vLLM), zero network data leaves your computer.

4. Questions & Privacy Inquiries

For questions regarding Kyro's data practices or to report privacy concerns, email m.eshanized@gmail.com.