Kultee Memory

Privacy Policy

Last updated: March 9, 2026


This Privacy Policy explains how Kultee Memory ("we", "us", "our") collects, uses, and shares information when you use kultee.com, the Kultee Memory web app, related APIs, and the MCP worker (collectively, the "Service").

Questions can be sent to hello@kultee.com.


Information We Collect

Account and profile data: email address, auth user ID, role assignments, plan, trial dates, and account settings.

Thought data: text you submit, source labels, content hashes, extracted metadata (for example: topics, people, action items), embeddings, and timestamps.

API key data: for MCP/API access we store key name, key prefix, hashed key material, creation time, last-used time, and revocation status. For personal OpenAI credentials we store encrypted key material, provider, masked last four characters, and update timestamps. We do not re-display full key values after save.

Usage and security data: usage counters (for thoughts, searches, MCP calls), audit events, and IP address data used for security and abuse prevention.

Billing data: subscription and customer identifiers needed to manage plans via Polar. Payment card details are handled by Polar, not by us.


How We Use Information

We use information to provide and secure the Service, including to:

  • authenticate you and control account access
  • store, retrieve, and semantically search your thoughts
  • extract metadata and generate embeddings for search features
  • enforce plan limits and support billing operations
  • create exports, process deletions, and provide support
  • monitor abuse, investigate incidents, and maintain reliability

AI Processing and Encryption

To provide capture and semantic search, thought text is processed by a third-party AI provider before storage. In the current implementation, we use OpenAI for embeddings, metadata extraction, and semantic search.

Thought raw text is encrypted at rest with AES-256-GCM using per-user derived keys. Metadata and embeddings are stored separately to enable search and filtering.

Personal OpenAI API keys are also encrypted at rest using the same per-user key derivation model before they are written to the database.


How Information Is Shared

We do not sell your personal information. We share data only as needed to run the Service, including with:

On Personal and Pro plans, LLM requests are sent using the OpenAI API key you save. On Enterprise plans, Kultee-managed OpenAI credentials are used instead.

  • Supabase (authentication and database)
  • Cloudflare (hosting and request infrastructure)
  • OpenAI (AI processing described above)
  • Polar (checkout, subscriptions, and billing webhooks)

If you connect external MCP clients, your requests may pass through those tools and then call Kultee Memory using your API key.

We may also disclose information when required by law, to enforce our terms, or to protect rights, users, and system security.


Retention and Deletion

We keep data for as long as your account is active or as needed to operate and secure the Service. You can export your data from account settings and request full account deletion at any time.

Account deletion removes your thoughts, usage records, MCP API keys, encrypted personal LLM provider keys, profile data, and auth user. Existing audit records are anonymized as part of deletion.


Your Choices

  • export your data as JSON
  • delete your account and associated data
  • create and revoke API keys from account settings
  • control browser cookie behavior through your browser settings

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.


International Processing

The Service relies on infrastructure and subprocessors that may process data in multiple countries. By using the Service, you understand that your data may be transferred and processed outside your home country.


Policy Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.


Contact

For privacy questions or requests, contact hello@kultee.com.