1. Local-first by default
Your chats, uploaded files, and other content created in Kocoro Desktop are stored locally on your Mac. Your files and conversation history are not uploaded to our servers for storage or sync — data leaves your device only when you run an AI request (Section 2) or turn on one of the optional cloud features in Section 3. There is no account-bound copy of your workspace in the cloud unless you choose to enable those features.
2. Encrypted AI requests
When you send a message to an AI agent, the content travels over an encrypted connection to Kocoro Cloud, which routes it to a managed third-party AI model provider for processing. Under the commercial API terms in place with these providers, they do not use your data to train their models. By default, Kocoro also does not train any AI model on your data.
Kocoro is not locked to a single AI provider and may route content to different providers over time. You can request the current list of subprocessors at any time from contact@kocoro.ai.
3. Optional cloud features, off by default
Two features involve the cloud only after you explicitly enable them, and you can disable them at any time in Kocoro Desktop settings:
- Episodic Memory — when enabled, selected conversation context is stored in Kocoro Cloud and used to train a personalized memory model unique to you. That model is used only for your sessions and is never incorporated into any shared or foundation model, and the third-party LLM provider does not receive Episodic Memory data for its training.
- Session Share — generates a sharable link for a conversation, hosted on Kocoro Cloud. No share links are created unless you ask for one.
Connecting external channels (Slack, WeCom, etc.) or using cloud orchestration tasks routes the relevant content through Kocoro Cloud while those features are active.
4. Data handling and subprocessors
We take necessary and appropriate measures to prevent the leakage, loss, or damage of user information. Where we entrust all or part of the handling of user information to a third party — such as AI model providers or payment processors — we enter into a confidentiality agreement in advance and conduct the supervision necessary to ensure security. We do not sell personal data. The current list of subprocessors is available on request.
5. Telemetry and analytics
By default, we do not use your message content or user content as training data. We may collect anonymized, aggregated telemetry — which does not contain message content — to improve product features. Our website uses Ptengine for anonymized web analytics on kocoro.ai; you can refuse cookies in your browser settings.
6. Your controls
You decide what leaves your Mac. Optional cloud features are off until you turn them on and can be turned off again at any time. You can request access to, correction of, or erasure of the personal information we hold by contacting us — see the Privacy Policy for the full description of your rights.
7. Reporting a vulnerability
If you believe you have found a security vulnerability in Kocoro Desktop or our services, we want to hear from you. Please email contact@kocoro.ai with the details and steps to reproduce. We ask that you give us a reasonable opportunity to investigate and address the issue before any public disclosure, and that you avoid accessing or modifying other users’ data. We will acknowledge your report and keep you informed as we work on a fix.