Privacy policy

Who is responsible

InterfaceDelta, Inc., a Delaware corporation, 1435 Walnut St, Ste 501 #118, Philadelphia, PA 19102, USA, is responsible for your information (the “controller”). Write to us at ka@interfacedelta.com, or by post at that address. We have not yet appointed a representative in the European Union; until we do, write to us at the same address.

What we collect, why, and on what basis

• Your email address: to sign you in, and to send the emails you ask for. Needed to give you Ka (contract).
• What you write and bring in, your reminders and your questions to plain: to keep them for you, and so that Ka and plain can read them and answer. Needed to give you Ka (contract). Because your writing may reveal your health, beliefs, sex life or other sensitive matters, we also ask for your explicit consent to process it, with a separate box when you sign up (see Sensitive matters).
• What Ka makes from your writing: its notes, its lines, the words it finds, now and then a public-domain picture it brought, kept with its line, and a record of when it thought and what that cost. To give you Ka (contract, and the same explicit consent), and to keep its cost within the limits we set (our legitimate interest in running Ka within budget).
• If you apply to the beta: your address and the one line you wrote, until the founder decides. Then both are deleted; if you were approved, we keep only a scrambled code made from the address, so that sign-in lets you in, until you delete your account. To decide on your application (steps you asked for before a contract).
• To stop emails being asked for too often: a scrambled code made from an address and where the request came from, with a count, removed within a day. To keep Ka and your inbox safe (our legitimate interest).
• Our server's log: what our code did and when, never your words, your address or which account it was. To keep Ka working (our legitimate interest).
• If you turn on the optional daily notification: your device's address at its push service, the day the last notification went, and the time of the newest line of Ka's you have seen, so that it comes only for one you have not seen. Your consent, which you withdraw by turning it off.
• If you leave feedback: what you write in the form, and your sign-in address only if you tick that we may write back to you. It comes to us as an email, through Resend, and we keep it in our inbox to read and answer; Ka keeps no copy. Without the tick, nothing of who you are goes with it. To hear what works and what doesn't, and to answer you if you ask (your consent, given by sending it). Write to us to have it deleted.
• Cookies: one that keeps you signed in, and small ones that remember your language, your style, light or dark, and that you have read a note. They are needed for what you ask of Ka, so they need no separate consent.

Everything here comes from you. We need your email address and your writing to give you Ka; everything else you can leave out.

Sensitive matters

A journal holds what matters most, and that often includes your health, your beliefs, your sex life, or other matters the law treats as sensitive. When you sign up, you agree in a separate box that we may process what you write, including such matters, only to keep it and to let Ka and plain read it as this policy describes. You can withdraw that consent at any time. Because Ka cannot work without reading your writing, withdrawing it means closing your account: delete it at the foot of the memory page, or write to us and we will. Withdrawing does not undo what was done before.

What we don't do

We don't sell your information, share it for advertising, or show ads. We don't use your writing to train models, and every request Ka and plain send asks the model company to keep nothing and train on nothing. Ka makes no decisions about you that have legal or similarly significant effects: it writes lines to you, and that is all.

Who else handles it

Only companies that work for us, under contract, for the purposes above:

• Hosting and storage: Neon runs our database, in Frankfurt. Webdock runs our server, in the EU. Cloudflare and Backblaze keep our backups, locked so they cannot read them, in the EU.
• AI: to think, Ka sends parts of your writing through Vercel's AI Gateway to one model company, in the United States: today a model made by OpenAI, run by Microsoft (Azure), Amazon (Bedrock) or OpenAI. How Ka keeps your words names the model and the route. Your email address and your account are never sent with it.
• Search: Brave receives a few general search words, never yours, in the United States.
• Email: Resend sends our emails, from Ireland, and keeps them in the United States.
• The optional daily notification: the push service of the company behind your browser or phone (Apple, Google, Microsoft or Mozilla, each based in the United States) carries it to your device. It learns that a notification went to that device, and when. The notification carries no words: “Ka wrote something.” is written on your device, not sent.

Our server also asks The Met and the Cleveland Museum of Art, in the United States, for a public-domain picture now and then, by the picture's number, after searching our own copy of their catalogues for it. They are given nothing of yours.

We may also disclose information when the law requires it, and only what it requires; we tell you on your memory page and by email, unless the law forbids it, and twice a year publish how many such demands came, on How Ka keeps your words; and, if Ka is taken over, to the company that takes it over, which must keep this policy.

Transfers out of the EU

Some of these companies are in the United States. Where your information goes there, it goes to companies certified under the EU–US Data Privacy Framework, or under the European Commission's Standard Contractual Clauses in each company's data processing terms. Write to us for a copy of the clauses that apply.

How long

Your writing, until you delete it. An application, until it is decided. Everything else for as long as How Ka keeps your words says, each with its period. Backups are deleted after 30 days at most, so what you delete leaves them within 30 days.

How we protect it

Your writing and what Ka keeps about it are encrypted in our database, and our backups are encrypted before they leave our server. The key is on our server, because Ka needs it to read your writing, so this is not end-to-end encryption: we, who run Ka, could read it, and we do not, except when you ask us to look into a problem: from your memory page, for what you choose there, for 14 days at most, read only by the person who makes Ka, never by an AI. Each time, it is written on your memory page and emailed to you. If a breach puts your information at risk, we will tell you and the authorities as the law requires, without undue delay.

Your rights

Read, download and delete your writing, and read and delete what Ka keeps about it, yourself, at any time; delete your account at the foot of the memory page. For anything else, write to ka@interfacedelta.com: a copy of the rest of your information, a correction, or anything below. We answer within 30 days, and do not charge.

• In the EU and the UK, you may also have your information erased, receive it in a form you can take elsewhere, object to or limit how we use it, and withdraw consent at any time. You may complain to a data protection authority.
• In US states with privacy laws, you may ask to know, correct and delete your information, and we will not treat you differently for asking. We do not sell or share it for advertising, so there is nothing to opt out of.

Do Not Track

We do not track you across other websites, and allow no one else to, so a browser's Do Not Track signal has nothing to stop.

Children

Ka is not for anyone under 18 years of age, and we do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will delete it. If you think so, write to ka@interfacedelta.com.

Changes

When this policy changes in a way that matters, we will say so in Ka at least 14 days before it takes effect. If a change would use your information in a new way that needs your consent, we will ask first.

Contact

ka@interfacedelta.com, or by post: InterfaceDelta, Inc., 1435 Walnut St, Ste 501 #118, Philadelphia, PA 19102, USA.