Reference
Privacy
What Kairos reads, what stays on your Mac, and every time it contacts something else, with the switch that controls it.
Kairos has no account of its own, shows no ads, and collects no analytics. What it reads and what it works out stay on your devices. This page says, in practical terms, what that means; the full privacy policy is the one that applies.
What Kairos reads
- What your coding tools already keep on your Mac: their sessions, transcripts, accounts and usage.
- Your repositories' git history, for Repos, and folder sizes, for Disk.
- How much memory, CPU and disk your sessions use.
It never reads a coding tool's credentials. Each account is signed in by its own tool, in that tool's own way, and Kairos only chooses which account a new session starts on. Everything Kairos keeps is listed in Files and logs.
What leaves the Mac
| What | When | Controlled by |
|---|---|---|
| Anthropic, with each account's own sign-in, for what it has used | While the account is in Kairos | Removing the account |
| Billing and usage pages you open (Claude, Console, Codex, Cursor, Windsurf) | When you open one, in your browser or the account's own Chrome | You |
| Anthropic, for your organization's API costs | Only with an Admin key added; the key is kept in the Mac's Keychain | API keys |
| Claude, with names, numbers and times (never code, a transcript or a file path) | Only with Deeper insights on; it is off until you turn it on | Deeper insights |
| GitHub, through your own GitHub CLI sign-in, for Actions spend and to cancel runs at a limit | Only once you connect GitHub; Kairos never sees the token | Actions |
| kairos.matihlabs.com, sending only the version you have, and GitHub for the download | About once a day | Updates |
| Your coding tools' own services | When Baton or Night Shift runs a tool, which talks to its vendor as it always does | Baton, Night Shift |
| Astral, to download uv and Python | At setup, only on a Mac without Python | Install |
Baton is the one that hands work from one vendor to another: when a marked session's account runs out, the next tool reads that repository. Mark only the sessions you are happy to hand over.
iPhone and iPad
Kairos Code reads only the Mac it is paired with.
- On your Wi-Fi, it talks to the Mac directly, encrypted, with the Mac's certificate pinned when you pair.
- Away from home, it goes through Kairos's relay, end-to-end encrypted with a key that exists only in the pairing code and on your paired devices. The relay cannot read what passes through it.
- Ask is answered by Apple's on-device model where the device has one. With Deeper insights on, a question it cannot answer goes to Claude, through your own Claude Code on the Mac.
- The camera is used only to scan the pairing code.
Unpair a device to delete its room at the relay. See Pairing.
Screenshots and examples
Every screenshot and example in these docs uses demo data: accounts such as account1@example.com, made-up sessions and repositories. None of it is a real person's.
Questions
Write to support@matihlabs.com.