Privacy Policy
Draft effective 8 November 2026 · pending legal review before public launch
1. What Kevin Router is
Kevin Router is a desktop application and a hosted AI gateway. The app configures AI coding clients on your Mac to send requests through Kevin's gateway. Kevin purchases upstream capacity from a supplier and bills you in USD.
2. Data we collect
- Account data: email address, optional display name and avatar, authentication timestamps, locale.
- Device data: a random device identifier, platform, app version, and key metadata (prefix, last use).
- Usage metadata: request id, line, model, protocol, status code, latency, token counts, computed cost, and whether usage was estimated. We do not store request or response bodies.
- Payment data: order id, amount, status and the payment provider's identifiers. Card details are handled by the payment provider and never reach Kevin.
- Diagnostics: only when you explicitly export a diagnostics file. It is generated locally and excludes tokens, keys, emails and request bodies.
3. What stays on your Mac
Your client configuration files, MCP/skill secret values, local gateway logs (metadata only, 7 days), and the original configuration snapshots. Secret values for MCP servers and skills never leave the device; the cloud stores key names only.
4. How we use data
To authenticate you, route and meter requests, bill your balance, prevent abuse, provide support, and meet legal obligations. We do not sell personal data and do not use request content for model training.
5. Processors
We use a payment processor, an email delivery provider, our own hosting provider, and an upstream AI gateway supplier. Each processes only what is necessary for its function. A current list is available on request.
6. Retention
Account and billing records are retained while your account is active and for the period required by tax and accounting law. Local gateway metadata is kept for 7 days. Server usage metadata is retained for 90 days for billing disputes and abuse prevention, then aggregated.
7. Security
Device keys and session tokens are hashed at rest or stored in the macOS Keychain; transport uses TLS; administrative access is separated from the customer control plane. No system is perfectly secure, but we do not log credentials or request bodies.
8. Your rights
Depending on your jurisdiction you may request access, correction, deletion, export, or object to processing. Email privacy@kevinrouter.com. Deleting your account removes your wallet and personal identifiers; legally required billing records may be retained.
9. International transfers
Our infrastructure and processors may process data outside your country. We use contractual safeguards where required.
10. Children
Kevin Router is not directed to children under 16 and we do not knowingly collect their data.
11. Changes
We will post material changes on this page and, where required, notify you by email.
12. Contact
Kevin Router · privacy@kevinrouter.com