Privacy Policy

Ptmind Inc. (the “Company,” “we,” “us,” or “our”) operates Kocoro Desktop (“Kocoro,” the “Service”) and the related website at kocoro.ai. This Privacy Policy explains what data Kocoro accesses, uses, stores, and shares, and the rights you have. Kocoro is local-first: your work stays on your Mac, and the cloud is involved only when you ask for it.

1. Local-First Storage

Your chats, uploaded files, and other content created in Kocoro Desktop are stored locally on your Mac by default. Your files and conversation history are not uploaded to our servers for storage or sync. Data leaves your device only when you run an AI request (Section 2), connect an external data source (Section 4), or turn on one of the optional cloud features in Section 3. Unless you enable those features, there is no account-bound copy of your workspace in the cloud.

2. AI Inference and Third-Party Providers

When you send a message to an AI agent, the content travels over an encrypted connection to Kocoro Cloud (Shannon Cloud), which routes it to a managed third-party AI model provider for processing. Kocoro is not locked to a single AI provider; the Service may route content to different providers selected by the Company over time. You may request the current list of subprocessors at any time by contacting contact@kocoro.ai.

Kocoro is an AI application that uses third-party AI models to provide its features. We do not use your data — including your content and any data obtained through third-party API services — to train, fine-tune, or otherwise develop any AI or machine learning model. Under the commercial API terms in place with these providers, the third-party AI model providers likewise do not use your data to train their models.

3. Optional Cloud Features

The following features are off by default and involve the cloud only once you enable them. You can disable them at any time in Kocoro Desktop settings.

• Episodic Memory — when enabled, selected conversation context is securely stored in Kocoro Cloud so Kocoro can remember your preferences and context across sessions for a more personalized experience. It is used only to improve your own experience and does not involve any model training. The stored context serves only your own sessions and is never shared with other users.
• Session Share — generates a sharable link for a conversation, hosted on Kocoro Cloud. No share link is created unless you ask for one.

Connecting external channels (Slack, WeCom, etc.) or using cloud orchestration tasks routes the relevant content through Kocoro Cloud while those features are active.

4. Connected Accounts and Third-Party Data Sources

Kocoro can connect to third-party accounts so it can work with your data in those services. Available or planned connections include Google, Microsoft, and Figma. Each connection uses OAuth: we request only the minimum permissions (scopes) needed for the feature you enable, you can review those permissions before authorizing, and you can disconnect a connected account at any time — from within Kocoro or from the provider’s own account settings. Data accessed through a connected account is used solely to provide the features you request and is never used to train any AI model.

Google API Services

When you choose to connect a Google data source to Kocoro using your Google account, this section applies in addition to the rest of this Policy. In the event of any conflict, this section governs with respect to data obtained through Google API Services.

5. Information We Collect

When you register for or use Kocoro, we may collect:

• Account information you provide — full name, email address, phone number, company name, payment information, and other details entered in registration forms.
• Technical information automatically collected when you use the Service — device type, browser, operating system version, display resolution, language settings, referrer, time of access, and approximate geographic region (prefecture or city level only). IP addresses are automatically processed at the time of collection to prevent the identification of individuals.
• Operation history — date and time of access, features used, frequency of use, and other records of your operations within the Service.
• User Content — data, files, materials, and inputs (text, voice, images, documents, knowledge bases, and data source connection information) you transmit, store, create, or generate through the Service. User Content is stored locally by default; cloud processing occurs only as described in Sections 2, 3, and 4.

6. How We Use Your Information

We use the information above only for the following purposes, and will not process it beyond these purposes without your consent, except as required by law:

1. To register you, verify your identity, and operate, maintain, provide, and improve the Service.
2. To bill usage fees and related charges, and to verify payment.
3. To deliver service-related information and notifications, and — only where you have opted in — product-update communications.
4. To notify you of suspension, discontinuation, or termination of the Service, and of changes to our Terms of Use, this Policy, or related documents.
5. To respond to acts that violate the Terms of Use, and to disputes or litigation.
6. To create anonymized, aggregated statistics that cannot identify individuals, used to improve product features.

We do not use your message content or User Content to train, fine-tune, or develop any AI model. If you enable Episodic Memory, the context you opt to remember is used only to personalize and improve your own experience — it does not involve any model training (see Section 3). Only anonymized, aggregated telemetry that does not contain message content may be used to improve product features.

7. Cookies and Analytics

Our website may use cookies and similar technologies to understand site usage and improve the Service. We use Ptengine, an analytics product operated by an affiliated company, for anonymized web analytics on kocoro.ai. You can configure your browser to warn you before accepting cookies or to refuse them; note that refusing cookies may affect some site functionality.

8. How We Share Information

We do not sell personal data. We may disclose or share personal information with third parties only in the following circumstances:

1. With subprocessors that handle information on our behalf to the extent necessary to provide the Service — for example, AI model providers (as described in Section 2) and payment processors.
2. Where a user engages in actions within the Service that harm others or violate public order and morals, and a response is necessary.
3. In connection with a business succession due to a merger, acquisition, or similar event.
4. Where there is an imminent danger to life, property, or other vital interests and an urgent response is required.
5. Where disclosure is requested by a court, police, or other public authority pursuant to applicable law, or where we are otherwise legally obligated to disclose.

Notwithstanding the above, data obtained through Google API Services is never sold, never used for advertising or marketing, and never disclosed or shared with third parties except to the extent strictly necessary to provide the user-facing features you request, maintain security, or comply with applicable law.

9. International Data Transfers

The Company is based in Japan. In providing the Kocoro AI assistant features, we may transfer user information to third-party AI model providers located outside Japan, currently including OpenAI, L.L.C. (San Francisco, California, USA) and Google LLC (Mountain View, California, USA). Where data obtained through Google API Services must be transmitted to OpenAI, L.L.C., such transmission is limited to the minimum scope necessary to provide the query, analysis, visualization, or other core feature you explicitly request, and OpenAI, L.L.C. does not use such data for model training.

We may also provide personal information to group companies located in the People’s Republic of China under agreements that impose necessary and appropriate protective measures. Reference information on the personal-information frameworks of these jurisdictions is available from Japan’s Personal Information Protection Commission: United States and China.

10. Security

We take necessary and appropriate measures — including encryption in transit and anonymization — to prevent the leakage, loss, or damage of user information. Where we entrust all or part of the handling of user information to a third party, we enter into a confidentiality agreement compliant with this Policy in advance and conduct the supervision necessary to ensure security. For more detail on how Kocoro protects your data, see our Security page.

11. Data Retention and Deletion

When personal information we hold is no longer necessary for the purposes in Section 6, we will promptly erase or anonymize it. We may retain information beyond that period where retention is required by law, necessary for scientific or statistical research that cannot identify individuals, or necessary to resolve disputes, enforce our agreements, or maintain the security of the Service. You may request deletion of your data at any time by contacting us.

12. Your Rights

You have the following rights:

• Access to the personal information we hold about you.
• Correction or erasure of your personal information.
• Restriction of processing.
• Objection to processing.
• Data portability.

To exercise these rights, contact us at contact@kocoro.ai. After verifying your identity, we will respond within a reasonable period. You also have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

13. Consent and Children

By agreeing to this Privacy Policy, you consent to our processing of your personal information as described here, and you may withdraw that consent at any time. Providing certain personal information is a prerequisite for using the Service; without it, some features may be unavailable. Users under 16 years of age must obtain parental or guardian consent before using the Service.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices or applicable law, and will notify you if we change how the Service uses your data. Material changes will be communicated in-app, by email, or by prominent notice on our website. Where changes require your consent under applicable law, we will obtain it.

15. Contact Information

For questions, complaints, or to exercise your rights under this Policy, contact us at contact@kocoro.ai.