Your data is yours
Kete is a personal AI ecosystem. Everything you create — notes, journal entries, conversations, calendar items, app data — sits in your own encrypted vault. We do not sell, rent, share, or train external models on your data. None of it. Not now, not later, not for any commercial reason.
Who we are
Kete is operated by Bruce Rawiri (Rotorua, Aotearoa). For privacy questions, email privacy@kete.one.
What we collect
- · Email + password (hashed, never stored as plaintext) — to authenticate you.
- · Tier metadata (Koha or Individual) and Stripe payment metadata for Individual subscribers — held by Stripe, not by us.
- · Your kete content — the notes, conversations, journal, app data you create. Encrypted at rest, isolated per user.
- · Aggregate site stats — Cloudflare Web Analytics (cookieless). We see total visits, popular pages, referrers. No individual tracking.
What we do not collect
- · No advertising IDs.
- · No third-party trackers (no Google Analytics, no Facebook Pixel, no Hotjar, no Segment).
- · No cookies set by us — except functional ones for sign-in. Stripe sets its own when you check out.
- · No location tracking.
- · No selling, renting, or sharing of your data with anyone, ever.
Where your data lives
On hardware we own and operate in Aotearoa New Zealand. Your kete contents do not leave Aotearoa. The marketing site is served via Cloudflare's global edge network — only public marketing content is on the edge, never your private data.
Your rights
Under the NZ Privacy Act 2020, you have the right to:
- · Access your data — email privacy@kete.one.
- · Correct incorrect data — same email path, or do it directly in your kete.
- · Delete your account — full cascade delete: every byte goes. Email privacy@kete.one with the subject "Delete my kete".
- · Complain to the NZ Privacy Commissioner if you think we've fallen short.
Retention
While your account is active, we retain your data until you delete it. When you cancel an Individual subscription, you keep your kete on Koha (or you can delete it). When you delete your account, we remove your data from active systems immediately. Encrypted backups age out of the backup pool within 90 days.
Children
Kete is intended for adults. Whānau-tier shared accounts (v1.1) will have explicit family-group consent flows. Individual signups are not designed for users under 16.
Changes
When we change this policy, we update the "Last updated" date at the top and email account holders. The current version is always at kete.one/privacy.