Privacy policy

Effective October 21, 2026

This policy describes how Travis Ueki (“we”), the developer of Kashi, handles information in the Kashi apps for macOS and iOS and on kashi.ueki.dev.

Summary

• Kashi runs coding agents on a computer that you control. In this policy, “your computer” means the computer that runs Kashi for you. It can be a different computer from the one that you’re using.
• The Kashi apps connect to your computer. Kashi doesn’t have its own cloud account, and you don’t sign in to Kashi.
• The Kashi apps don’t include analytics, advertising, or crash-reporting software.
• We don’t sell your information.

What moves between the app and your computer

When you use Kashi, the app and your computer exchange messages, the files and images that you attach, code and file previews, agent output, and details about your agents and workspaces. Your computer stores this data in its Kashi data folder. Files that you upload stay in that folder until you delete them. The iOS app keeps saved computer connections and temporary copies of attachments on your phone.

How the app reaches your computer

Kashi connects in one of two ways. The iOS app asks for local network access so that it can connect to your computer directly on your network. If you turn on the relay on your computer, the app can also connect through a relay server. By default, that server is relay.paseo.sh, which the Paseo project operates. This policy doesn’t cover the relay operator’s practices. The relay is off on a new computer.

Kashi encrypts relay traffic end to end, so the relay can’t read your messages or files. The relay can see IP addresses, connection times, the size of the data, session identifiers, and the public part of the encryption handshake.

Coding agents

Kashi runs coding agents, such as Claude Code and Codex, with the accounts that you sign in to on your computer. When an agent works, your computer sends your prompts, the files that you attach, and the code that the agent reads to that agent’s provider. The provider’s own terms and privacy policy cover that data.

Kashi features on your computer

Workspace briefs

Your coding agents can record a brief for each workspace: the goal, the current step, the tasks, and a short history of changes. Your computer stores each brief in a private file that only your user account on that computer can read. It keeps the first entry and up to 99 recent ones. The app reads briefs from your computer and shows them to you. Because your agents write briefs, their text also goes through the agent provider that you select. You can hide briefs in Settings. The app stores that choice on your device, and your computer keeps the briefs.

Channels

If you use Channels, the app reads and sends channel messages through your computer. Your computer either runs a Channels service itself or connects to a Channels service that you choose, which you or another operator runs. That service stores the channel messages and keeps them for as long as its operator decides. Kashi doesn’t operate a Channels service.

Jobs and Sentry

You enter a Sentry access token on your computer, which stores it in a private file that only your user account can read. When you check for errors, your computer reads error events from your Sentry organization’s regional Sentry service and stores them in its local Jobs database.

Job runs

When you start a Job run, your computer sends the error details and access to the repository that you chose to the agent provider that you select, under your own account with that provider.

Pull requests

If you choose to create a pull request, an agent makes the change in a separate copy of the repository, using an agent provider account on your computer. That provider receives the findings and the repository content. When you choose to publish the change, your computer pushes a branch and opens a draft pull request with the git and GitHub credentials that are stored on it.

Briefs and Jobs data don’t pass through any service that we run. We don’t receive or keep copies of data that moves between your computer and the services that you connect.

Diagnostics

The app can create a diagnostic report that removes sensitive values. Kashi doesn’t send it anywhere. You decide whether to copy and share it. If you test Kashi through TestFlight, or if you choose to share crash data with app developers in your device settings, Apple can share crash reports and feedback with us under Apple’s terms.

This website and the downloads page

kashi.ueki.dev doesn’t use cookies, analytics, or tracking scripts. If you change the theme, your browser stores your choice on your device. Cloudflare hosts this site and processes standard request data, such as IP addresses, to serve it and protect it from abuse. The downloads page asks for the download code that you received. After you enter it, the downloads page sets a cookie that keeps that browser unlocked for 7 days. The cookie doesn’t contain the code.

Retention and deletion

Most Kashi data is on your phone and your computer, so you control how long it stays. To remove Kashi data from your phone, delete the app. To remove it from your computer, delete the Kashi app and its data folder. Accounts with agent providers and other services are separate from Kashi. Delete them with those services. To ask about information that we hold, such as the email that you sent to ask for an invitation, contact us.

Children

Kashi is a tool for software developers. It isn’t directed to children under 13.

Changes to this policy

If we change this policy, we update this page and its effective date. For significant changes, we also tell invited testers.

Contact

Email travueki@gmail.com with questions or requests about your data.