Kairos for Mac · Kairos Code for iPhone and iPad

Privacy policy

Effective 24 October 2026

Matih Labs makes Kairos and Kairos Code. Neither has an account of its own, neither shows ads, and neither collects analytics or tracks you. We do not collect, sell or share your personal data.

On your Mac

Kairos reads what your coding tools already keep on your Mac: their sessions, accounts and usage. Its own records, such as history, forecasts and settings, stay on your Mac. It contacts only:

• Anthropic, with your own sign-ins, to read what each of your accounts has used and, if you add an Admin key, your organization's cost report.
• Pages you open, such as your Claude and Console billing pages or your Codex, Cursor and Windsurf usage pages, in your browser or in a Chrome window Kairos keeps for each of your accounts.
• Claude, only with Deeper insights on. It is off until you turn it on. A question Apple's on-device model cannot answer then goes to Claude through your own Claude Code, with the names, numbers and times needed to answer it, never code, a transcript or a file path.
• Your coding tools' own services. Baton and Night Shift run your tools, which talk to their providers as they always do.
• Astral, at setup, only if your Mac has no Python: setup downloads uv and Python.

On your iPhone and iPad

Kairos Code reads only the Mac you pair it with. It keeps the pairing in the device's Keychain, and its settings and the chats you keep on the device, encrypted by iOS.

• Camera: only to scan the code your Mac shows when you pair. Nothing it sees is kept or sent.
• Local network: to reach your Mac on your Wi-Fi, encrypted, with your Mac's certificate pinned at pairing.
• Questions you ask are understood by Apple's on-device model, where your device has one.

Away from home: the relay

Away from your Wi-Fi, Kairos Code reaches your Mac through Kairos's relay, kairos-relay.matihlabs.workers.dev, which runs on Cloudflare. Everything is end-to-end encrypted with a key that exists only in your Mac's pairing code and on your paired devices. The relay cannot read requests, answers, your accounts or your sessions.

For each paired device the relay keeps a random room id and two hashes of that room's secrets, until you unpair. It keeps no logs. Like any internet service, Cloudflare sees the addresses that connect, when they connect and how large the encrypted messages are. Read Cloudflare's privacy policy.

This website

kairos.matihlabs.com runs no script, sets no cookies and loads nothing from another site. Cloudflare Pages serves it, and downloads come from GitHub.

Your choices

• Unpair a device in Kairos Code (Settings, Mac, Unpair) or on your Mac (Kairos, Settings, iPhone and iPad). Its room at the relay is then deleted.
• Delete Kairos and Kairos Code to remove what they keep on your devices.
• We hold no personal data to export or delete. Write to us anyway if you have a question.

Children

Kairos is a tool for software developers and is not directed at children. We collect no personal data from anyone.

Changes

If this policy changes, this page and its date change with it.

Contact

Matih Labs, support@matihlabs.com