The short version
- Kalon is built so that your data stays on your device. There is no Kalon account, and the apps contain no analytics, telemetry, advertising, crash reporting or tracking of any kind.
- Your conversations, files, memory and settings are stored on your own device. They never reach us, because nothing in the apps sends them to us.
- The apps connect to the internet only for things you start yourself, such as downloading a model or choosing an online model. Online models are off until you turn them on.
- This website sets no cookies and runs no analytics.
The rest of this notice explains each of these in detail, product by product.
Who we are
This notice is published by Kalon ("we", "us"), the maker of the Kalon apps for macOS, iPhone and iPad, Air Kalon and AirLink, and of this website. You can reach us at hello@kalonedge.com.
This website
- No cookies, no analytics. The site does not set cookies, does not use analytics or advertising services, and does not track you across other sites.
- Your theme choice. If you pick light or dark mode, that choice is saved in your browser's own storage on your device. It is never sent to us.
- The contact form. The form does not submit anything to a server. It opens a message in your own email app, and nothing is sent until you send that email yourself.
- Server logs. Like any website, the servers that deliver these pages may briefly record technical details of each request, such as your IP address, browser type, the page requested and the time. These records are used only to deliver and secure the site.
- Email you send us. If you write to us, we receive what you choose to send, such as your name, your email address and your message. We use it only to reply to you, and we keep it only as long as the conversation needs.
The Kalon apps
No account, no analytics
Kalon has no account and no sign-in. The name and photo shown in the app are stored on your device only. The apps contain no analytics, telemetry, crash reporting, advertising identifiers or update checks. Your ratings of replies, your pinned replies and the usage statistics shown in Settings › Usage are computed and stored on your device and are never sent anywhere.
What is stored on your device
Kalon keeps its data in its own folder on your device (on the Mac, ~/Library/Application Support/Kalon). This includes:
- your chats, messages and chat titles
- memory notes Kalon has saved for you
- settings, including your choices for online models
- usage statistics, such as token counts, speed and which models you used
- small preview images of attachments
- the folders and files of Build mode workspaces
- the skills you install
- family profiles, if you create them (see below)
- cloned voices, including the voice recording you provided
- the models you download
Kalon does not add its own encryption to this data. It relies on your device's protections, such as FileVault on the Mac and the passcode-based encryption of iPhone and iPad. The app passcode, if you set one, locks the interface; it is not encryption.
API keys for online providers, sign-in tokens for MCP servers, and Kalon Link credentials are stored in the system Keychain, on this device only. They are never synced and never included in backups.
On iPhone and iPad, your chats and attachments are included in your iCloud or device backups, according to your own backup settings. Downloaded models are excluded.
Connections the apps can make
Every connection below is started by you or by a feature you turn on. None of them sends anything to us.
| Connection | When it happens | What is sent, and to whom |
|---|---|---|
| Model downloads | When you download a model | A request for the model file, to Hugging Face, or to Moonshine for its speech models |
| Online models | Only if you turn on online models, add a provider and choose one of its models | The conversation, including your messages, the system prompt, text from attached documents, images, and in agent mode the tools' inputs and results, to the provider you chose |
| Realtime voice (Mac) | Only when online models are on and you choose a realtime model from OpenAI, xAI or Google in voice mode | Your microphone audio, streamed live, to that provider |
| MCP servers (Mac) | When you add an MCP server that uses the internet | Tool requests to the server you added, and sign-in to it if it asks |
| Media in replies (Mac) | When a reply contains a link to an image, video or audio file | A request to fetch that file so it can be shown |
| Kalon Link | When you pair an iPhone or iPad with your Mac | Your conversation, over your local network only, encrypted, between your own devices |
| Speech recognition (iPhone and iPad) | When you dictate | Recognition runs on the device where your language supports it; otherwise Apple may process the audio under Apple's own privacy policy |
Online providers and MCP servers are third parties. What they do with the data you send them is governed by their own terms and privacy policies, not by this notice. Memory notes are not sent to online models unless you allow it in Settings; note that if you allow the assistant to search your memory during a chat with an online model, what it finds can form part of that conversation.
Block all network access
Block all network access in Settings stops Kalon's outbound connections, including model downloads, online models, realtime voice and media previews. It does not switch off the local servers described below if you have turned them on, it does not restrict programs you run yourself through Kalon's tools (for example a command in the terminal or an MCP server running on your Mac), and it does not change how Apple's speech recognition works on iPhone.
The local API and Kalon Link
On the Mac you can turn on a Local API server, so that your own programs can use your models. It is off by default. It has no authentication: by default only programs on your Mac can reach it, and if you turn on Network access, anyone on your network can use it.
Kalon Link lets an iPhone or iPad use your Mac's models over your local network. It is off by default. Pairing uses a six-digit code shown on your Mac, and the connection is encrypted and pinned to your Mac. The Mac does not keep the text of prompts or replies it serves over Kalon Link; it records only usage statistics.
Encrypted backups
When you create a backup, Kalon writes a single file protected by the password you choose (Argon2id key derivation and AES-256-GCM encryption). It includes your chats, attachments, memory, usage statistics and family profiles. It does not include models, API keys, Kalon Link credentials, the app passcode or your MCP configuration. While the backup is being made, an unencrypted working copy exists briefly in a temporary file on your device. The backup file goes wherever you save it, and only someone with the password can open it.
Family profiles and children
Family profiles are off by default. A parent can create up to five profiles for children under 18. For each child, Kalon stores on the device a name, a date of birth, an avatar or photo, the chosen style of assistant and an optional passcode.
- A child profile has no network access at all: no online models, no downloads, no tools, no MCP servers and no Build mode, and it cannot open Settings.
- Kalon records how long each profile has Kalon open and in front, as screen time, on the device.
- If the weekly summary is on (it is on by default once Family is on), a model running on the device writes a list of the topics each child asked about. It appears only in the parent's chat list, is never written by an online model, and is never sent anywhere. The child's profile tells them this summary is shared at home.
- Replies to children are not content-filtered. Parents should supervise their children's use.
None of this reaches us. We do not knowingly receive any personal information from children.
Air Kalon and AirLink
Air Kalon and AirLink work without any internet connection and without any Kalon server; the one exception, Air Kalon for Mac checking for updates, is described below. We never receive the files you send, the messages you exchange or the calls you make. The details of what each one uses and stores are below.
Air Kalon
- Transfers use no network. A transfer uses no internet, Wi-Fi or Bluetooth connection. The sender's screen shows the file as a stream of codes, and the receiver's camera reads them.
- The camera. The receiving device uses its camera to read the codes. The sending device uses its camera only if you turn on automatic stop, to see when the receiver is done.
- Anyone who can see the screen can read the file. The stream is not encrypted. Any camera pointed at the sending screen can capture the file and its name, type and size, so send private files only where you control who can see the screen.
- What is stored. On the Mac, a received file is saved only where you choose. On iPhone and iPad, it is held in a temporary folder until you save or share it. Air Kalon keeps no history of transfers; it stores only its own settings.
- Links. If you receive a web link, it opens only if you tap it.
- Updates on the Mac. Air Kalon for Mac checks for a new version twice a day, and whenever you choose Check for Updates…. It asks GitHub, where its releases are published, and sends only the version of Air Kalon you have; like any web request, it also shows GitHub your IP address. A new version is downloaded from GitHub and installed when you quit. Turn off Update automatically in the Software Update window and Air Kalon makes no connection at all until you choose Check for Updates…. GitHub's handling of these requests is governed by its own privacy statement. The iPhone and iPad app does not check for updates.
AirLink
- No internet, no server, no account. AirLink sends messages and calls directly between nearby devices over Bluetooth Low Energy and Wi-Fi, including peer-to-peer Wi-Fi, and relays them through other AirLink devices. Nothing passes through any server, and it has no sign-up. Your identity is a pair of keys created on your device.
- What is encrypted. Every message is encrypted end to end to its recipient, and each call uses fresh keys. Devices that relay your messages cannot read them.
- What nearby devices can see. Other devices can tell that AirLink is running nearby. When devices meet, they exchange the display name you chose and your public keys, and this introduction is not encrypted. Devices that relay traffic can see which key a message is addressed to, what kind of packet it is, when it was sent and roughly how large it is, but not its content or its sender.
- What is stored on your device. Your private keys and display name are kept in a protected file. Message text and contact cards are stored encrypted with a key held in the Keychain. Some details are stored without encryption: the time, direction and delivery status of each message, the names you give to contacts, your display name, and a local activity log recording when devices were met and calls were received.
- Lab mode. AirLink has a diagnostic lab mode, off by default, that switches itself off after three hours. While it is on, it records timings, sizes, identifiers and battery level, but not message text, to a log on the device, and can send that log to a Mac running the lab collector on your local network. It sends nothing to us.
Your choices and rights
Because your app data stays on your devices, you control it directly. You can delete a chat, a memory note, a profile or a model in the app, and deleting the app removes the data it stored. For anything you have sent us by email, you can ask us to access, correct or delete it by writing to hello@kalonedge.com.
We process personal information in line with Ghana's Data Protection Act, 2012 (Act 843). If you live elsewhere, you may have additional rights under your local law, and we will honour them to the extent it requires.
Security
We design the apps to keep data on the device and to encrypt what travels between your devices or into a backup. No system is perfectly secure, so keep your devices updated, use a strong device passcode, and choose strong passwords for your backups.
Changes to this notice
If we change how the apps or this website handle data, we will update this notice and the date at the top of this page. If a change is significant, we will say so on this site.
Contact
Questions or requests about privacy: hello@kalonedge.com.