Privacy policy
Effective November 10, 2026
Kharo is a personal command center run by Plainlineops LLC. This policy explains what the Kharo website collects, why, who helps us handle it, and how you can have it deleted. Your records are yours: we collect only what the app needs to work for you.
What we collect
- Your sign-in. Your email address, used to send you a sign-in link, or your Google account's email if you choose "Continue with Google". We don't store a password.
- What you put in Kharo. Actions, goals, ideas, notes, settings and anything else you enter, plus files you upload (such as art for a world). They're stored for your account and shown only to you. Uploaded files are stored at a web address that anyone with the exact link could open, so don't upload anything you wouldn't share by link. So Kharo opens instantly, a copy of your records is also kept in your browser on your own device; it's erased when you sign out.
- Connections you add. If you connect Gmail or Google Drive, we hold the access Google grants and use it only to answer your own requests. If you add a Metricool token, your own Claude key or a Claude routine start key (the desk app), we store it for your account and use it only for your requests; a start key is used only to start that one routine when you tap a desk button. You can remove any of them in Settings at any time.
- Bank accounts, only if you link them. The bank page is open only to the account owner. You sign in to each bank in Plaid's own window, and we never see the password. We keep only Plaid's access key for each bank, locked with encryption on our server. Balances and transactions are read from Plaid when you ask and are not stored. Remove a bank to end the link at Plaid and delete its key.
- Your location, only if you use the golf caddie. When you tap Start round on the caddie page, your browser shares your precise location while that page is open. We save your latest spot (not a history), your club distances, how you play (hand, shot shape, launch angle) and the scores you enter (your last 40 rounds) to your account so Meta AI can answer "what's my shot?" through the caddie key you create, and your Kharo Command Center can show your rounds. Tap Stop to stop sharing; your last spot stays saved until your next round. Turn off the caddie key on that page to cut off Meta AI.
- AI requests. When you ask Kharo a question or use the voice orb, the text you send and the records needed to answer are sent to our AI provider to write the reply. We count how many AI requests you make each day to apply a fair-use limit.
- Technical data. Like any website, our host receives your IP address and basic browser information when you visit. We count page visits with Vercel's cookieless analytics, which shows us totals like visits per page and where visitors came from, never who you are.
What we don't do
- We don't sell or rent your information.
- We don't use advertising or tracking cookies, or analytics that follow you across sites.
- We don't use your records to train AI models.
- We don't knowingly collect information from children. Kharo is for adults.
Who helps us run Kharo
These companies process data for us, only to provide their service:
- Vercel hosts the website and counts page visits.
- Supabase stores your sign-in, records, connections and uploads.
- Anthropic provides the AI model that answers your requests.
- Google handles "Continue with Google" sign-in and serves the site's fonts, and provides Gmail and Drive access only if you connect them.
- Metricool only if you connect it, for your social posting stats.
- OpenStreetMap's map services (Overpass API servers) and Open-Meteo receive your location only if you use the golf caddie, to load the course map and the wind where you are.
- Plaid only if you link a bank: it connects to your bank, where you sign in, and returns your balances and transactions.
- Meta only if you connect the golf caddie to Meta AI: it receives the shot answers you ask for and the scores you tell it.
How long we keep it
For as long as you have an account. Delete a record in Kharo and it's gone from your account. Remove a connection in Settings and we delete the key or access for it. Remove a linked bank and we end the link at Plaid and delete its key at once. Delete your account and every record and key goes with it. We review this policy and how long we keep data at least once a year.
Your choices
You can see, change and delete your records inside Kharo at any time. To delete your whole account, tap Delete account in Settings › Connections. To ask what we hold, send a request through the Plainline contact form from the email you signed in with. We'll confirm when it's done. Depending on where you live, you may have more rights under local law, and we'll honor them.
Security
The site uses encrypted connections (HTTPS). Your records are locked to your account by database rules, so other users can't read them.
Changes
If we change this policy, we'll update this page and the date at the top.