Privacy Policy

Kalabi (“Kalabi”, “we”, “us”) provides a Chinese learning workspace at kalabi.ai and in our companion apps. This policy explains what personal information we process when you use Kalabi, why, and the choices you have. This policy forms part of our Terms of Service. For privacy questions, write to kalabiapp@protonmail.com.

• Account details. Your email address and password (stored only as a secure hash by our authentication provider). If you continue with Apple, we receive your email address (or an Apple private relay address if you choose to hide it) and, the first time, your name. If you continue with Google, we receive your name, email address and profile picture from Google.
• Your content. Documents, notes, vocabulary, bookmarks, comments, chat history, uploaded files and your study and review progress.
• Usage and device data. Pages and features you use, actions such as saving or reviewing, performance measurements, browser and device type, and an approximate location derived from your IP address.
• Messages to us. What you include when you email or contact us.

• To create your account, sign you in and keep your workspace in sync.
• To provide the features you ask for, including AI explanations and chat.
• To keep Kalabi secure, prevent abuse and fix problems.
• To understand how Kalabi is used so we can improve it.
• To send you service emails, such as account verification and password resets.

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use it for advertising of any kind.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

Kalabi is local-first. What you create is stored in your browser or app on your device before it is synced. When you are signed in, it is also stored on our servers so it is available on your other devices. Data kept only on a device stays there until you clear it or remove the app. Signing out locks the local workspace on that device.

When you use an AI feature, the text needed to answer you, such as your question, a selection or nearby document context, is sent to the AI model provider that handles the request. Depending on the feature and model, this may be Anthropic, OpenAI, Google, Groq, DeepSeek or OpenRouter. They process it to return a response under their business API terms.

We do not use your content to train AI models. AI features are marked in the app, for example with “Ask AI”, so you know when a response comes from AI.

Please don't include sensitive personal information in AI requests that you don't want processed this way.

We share personal information only with:

• Service providers that run Kalabi for us: Supabase (accounts, database and file storage), our hosting and infrastructure providers, Vercel (performance and traffic analytics), PostHog (product analytics), Apple and Google (sign-in) and the AI providers listed above. They may use the data only to provide their service to us.
• Apps you connect. When you authorize the Kalabi iPhone app, Kalabi Coaching or another assistant to access your account, it receives the access shown on the consent screen. You can revoke access at any time.
• People you share with. Content you publish or share by link is visible to whoever has the link.
• Legal reasons. When required by law, or to protect the rights, safety or property of our users, the public or Kalabi.
• A business transfer. If Kalabi is involved in a merger or sale, under this policy or one that is at least as protective.

We use essential cookies to keep you signed in, and browser storage (such as local storage and IndexedDB) to hold your local workspace and preferences. Our analytics providers may also use cookies or local storage to measure usage. Blocking essential cookies will stop sign-in from working.

Where laws such as the GDPR apply, we process your information to perform our contract with you (running your account and features), for our legitimate interests (security, analytics and improving Kalabi), with your consent where we ask for it, and to meet legal obligations.

We keep your information while your account is active. When you delete your account, we delete your account data from our active systems, and remaining copies in backups are removed as those backups expire. We may keep limited records where the law requires it.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to withdraw consent.

• Delete your account in Settings → Profile → Delete account.
• Any other request: email kalabiapp@protonmail.com. We may need to verify your identity first, and we will respond within the time the law requires.
• Someone acting for you: an authorized agent can make a request on your behalf where the law allows it.

We will not treat you differently for exercising your rights. If you have a concern, please contact us first so we can try to resolve it. You can also complain to your local data protection authority.

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia, Texas, Indiana, Kentucky or Rhode Island, you may have the right to know what personal information we hold, to access, correct, delete and obtain a portable copy of it, and to opt out of its sale, targeted advertising and certain profiling. Because we do none of those, there is nothing to opt out of, and we do not process sensitive personal information for those purposes.

If we decline your request, you can appeal by replying to our decision or emailing kalabiapp@protonmail.com with “Appeal” in the subject. We will explain the outcome of your appeal, and if you are not satisfied you can contact your state attorney general.

We use encryption in transit, access controls and reputable infrastructure providers to protect your information. No system is perfectly secure, so please use a strong, unique password.

Our providers may process information in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Kalabi is not directed to children under 13, or under 16 where local law requires parental consent at that age. If you believe a child has given us personal information, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Questions or requests about privacy: kalabiapp@protonmail.com.