Privacy policy

Last updated 16 October 2026. This covers kimtu.dev and the Kimtu command line tool.

What we collect

• Your account. When you sign in with Google, GitHub, GitLab or an email code, we receive your email address, your name and your profile picture. From Google that is all we request: the basic profile and email scopes. We never ask for access to your Gmail, Drive, Calendar, contacts or any other Google data.
• Your workspaces. The workspaces you create, their members and invitations, and the architecture and documentation your coding agent or the CLI uploads: component names, connections and the Markdown you chose to publish. Anyone who is a member of a workspace, or who holds one of its share links, can read it.
• Access tokens. Tokens for connected repositories and for the CLI. We store only a hash of each, not the token.
• Feedback. What you type into a feedback form, and an email address only if you ask for updates.
• Usage. Google Analytics 4 records page views and which buttons are clicked, with a cookie. We send it only Kimtu’s own vocabulary, never anything from your repository and never what you type.

What we do with it

We use it to sign you in, to show you your workspaces, to let the people you invite see them, and to learn which parts of the product are worth improving. We do not sell your data, do not use it for advertising, and do not use it to train models.

Who processes it

• Clerk, which handles sign-in and holds your account.
• Vercel, which hosts the site.
• Neon, which hosts the database.
• Google, for sign-in with Google and for Analytics.

Each acts on our behalf under its own terms. We share your data with no one else unless the law requires it.

Keeping and deleting it

We keep your account and workspaces until you delete them. Deleting a workspace removes everything uploaded to it. To delete your account and the data tied to it, email [email protected] from the address you signed up with and we will do it within 30 days. You can also revoke Kimtu’s access to your Google account at any time at myaccount.google.com/permissions.

Google user data

Kimtu’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google email, name and picture only to create and identify your account.

Contact

Questions, or a request to see or remove your data: [email protected].