Privacy Policy

Konteks is made by James Almeida. The app is published under GSV (the developer name on the App Store). Contact: support@konteks.app.

Konteks reads only from the data sources you explicitly link. Each source is opt-in and revocable.

• iOS Calendar & Reminders. Read via Apple's EventKit framework after you grant access in Settings → Privacy. We read upcoming events, reminders, their titles, due dates, locations, notes, attendees, and recurrence rules. Konteks stores a synthesized card per event/reminder (not the full record) in our cloud cache so the widget can render it without polling EventKit.
• Apple Health. Read via HealthKit if you grant access. We read step count, sleep duration, and bedtime preferences. Raw samples never leave the device; only a daily summary card is sent to our cloud cache.
• Weather (Open-Meteo). If you enable the weather plugin, we fetch the current conditions for a location you provide (defaults to Los Angeles). Open-Meteo does not require an account.
• Google Calendar. If you link your Google account, we receive an OAuth access token + refresh token for the scopes you grant (calendar read-write, email, openid). We use these tokens server-side to pull your upcoming events on a schedule and to perform actions you invoke via Ask (create / edit / delete events).
• Ask (AI chat). When you use the Ask tab with Apple Intelligence, your prompts stay on-device. When you choose Claude / OpenAI / Grok / Kimi, your prompts are sent directly from the Konteks app to the provider you chose, using your own API key. Your key is stored in iOS Keychain on your device only. The Konteks backend never sees your AI prompts or your AI key.
• Push notification tokens. When you allow notifications, iOS gives us an APNs device token. We store it to wake the app for background card refreshes.
• App diagnostics. We do not run any third-party analytics SDK. The only diagnostic data we collect is what Apple sends to us automatically through App Store Connect (anonymized crash logs, only if you opt in via Settings → Privacy → Share with App Developers).

We do not collect: your contacts, your photo library, your microphone, your camera, your location beyond what you set in the weather plugin, your phone number, or your home address.

Konteks uses Convex (a backend-as-a-service provider, convex.dev) to store synthesized cards, OAuth tokens, and APNs device tokens. Convex hosts data on AWS in US regions, encrypted at rest. The deployment is operated by us; only Konteks code can read from it.

OAuth tokens are stored server-side so we can refresh your calendar cards in the background even when the app is closed. API keys for AI providers stay on your device only — they are never uploaded to our servers.

We share data only with the third parties strictly required to deliver the feature you asked for:

• Google. When you link Google Calendar, we call Google's API on your behalf using the token you granted us. Google sees the queries we make against your calendar.
• Open-Meteo. When the weather plugin is on, we send the location you configured. No personal identifiers are sent.
• AI providers (Anthropic, OpenAI, OpenRouter, xAI, Moonshot). Only when you choose them as your Ask backend. The request goes directly from your device to the provider using your API key.
• Apple Push Notification service. Standard iOS notification delivery.
• Convex. Our backend host, acting as a data processor under our instructions.

We do not sell or rent your data to anyone. We do not use your data to train AI models.

You can, at any time:

• Revoke a source. Sources tab → toggle the plugin off, or unlink Google Calendar with the × button. Unlinking Google calls Google's token-revoke endpoint and deletes the token from our servers.
• Revoke OS permissions. iOS Settings → Privacy → Calendars / Reminders / Health → Konteks → off. On next refresh, our cards for that source clear.
• Delete your data. Email support@konteks.app and we'll wipe your row in our database. You can also delete the app from your device — uninstall removes the local cache and any device-only data (Keychain keys, cached cards).
• Export. On request, we'll send you a JSON dump of everything we have for your account.

OAuth tokens and APNs tokens are stored in our Convex deployment, encrypted at rest by Convex's infrastructure. API keys for AI providers are stored in iOS Keychain on your device, encrypted at rest by iOS, sandboxed to the Konteks app, and not included in unencrypted iCloud backups. We do not log AI prompts or AI responses anywhere.

No service is perfectly secure. If you spot a vulnerability, please email support@konteks.app.

Konteks is not designed for children under 13 (or 16 in regions where that age is the threshold under GDPR/COPPA- equivalent law). We do not knowingly collect data from children. If you believe a child has provided us with data, email us and we'll delete it.

We'll update this page when our data practices change. The "Last updated" date at the top will move; for material changes we'll surface a notice in the app on next launch.

Email support@konteks.app.