Privacy Policy

Who we are

Kola is provided by Perennify Ltd ("Perennify", "we", "us"), the company behind this AI memory layer. Reach us about this policy at privacy@getkola.app.

Because Kola stores your people graph on your own device and we run no server that receives it, you remain in control of that data at all times. For most of the data Kola handles, you — not Kola — are the party that decides how it is used; Kola provides the software, but does not collect a copy.

What data Kola processes

Depending on which accounts and features you enable, Kola processes the following on your device:

• Names, email addresses, phone numbers, and profile links
• Message content and metadata from the accounts you connect (email, LinkedIn, Telegram, WhatsApp)
• Calendar events and attendees
• Contact profile photos
• Audio recordings of calls you choose to record, and their transcripts
• Notes, custom fields, and lists you create, plus the search embeddings Kola derives from the above

Where your data lives

When you connect an account, Kola reads your messages, contacts, and calendar from that source and builds a unified people graph on your device. That index — names, message bodies, notes, custom fields, embeddings — is written to local storage inside the Kola.app data directory on your Mac.

Kola exposes that index to AI tools through a local server bound to 127.0.0.1:47900. That address is reachable only from your own machine; there is no remote endpoint, and Kola does not transmit your indexed data to us or to any Kola-operated infrastructure.

Accounts you connect

To build your people graph, Kola accesses the accounts you explicitly authorize — which may include Google (Gmail and Calendar), LinkedIn, Telegram, and WhatsApp. Authorization happens through each provider's own login or API flow, and you can revoke it at any time from that provider or by disconnecting the account in Kola.

Data fetched from these services is delivered to your Mac and processed locally. Kola uses it only to provide the app's features — searching your network, briefing you before meetings, and capturing contacts. Kola does not sell your data, does not use it for advertising, and does not share it with third parties for their own purposes.

When you connect Google, Kola may access your Gmail messages (including bodies), Calendar events, and — if you enable contact photos — your Google contacts and their photos. Google user data is processed locally to provide these features, is never used to train any AI or machine-learning models, and is not transferred to others except as needed to provide a feature at your direction. Kola's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Call recording and transcription

Kola can record calls when you choose to. Recordings are saved as audio files in the Kola.app data directory on your Mac and transcribed on your device — the audio is not uploaded to us or to any third party for transcription. Recordings and transcripts stay local and are deleted when you delete them in Kola.

You are responsible for recording lawfully. Many jurisdictions require the consent of some or all parties before a conversation is recorded. It is your responsibility to understand and comply with the laws that apply to you and to obtain any consent required from the people you record.

Optional features that send data to third parties

Some features are off until you turn them on, and depend on an outside service to work. When enabled, they send only the data needed for that feature:

• AI assistant — your prompts and the records the assistant reads are sent to Anthropic (see the next section).
• Contact enrichment — if you provide an Apollo.io key and enable enrichment, contact details are sent to Apollo to retrieve additional information.
• Profile photos — to show avatars, Kola may request images from the connected provider (Google, WhatsApp, Telegram) and from Gravatar. To look up a Gravatar, a hashed form of the contact's email address is sent to Gravatar.
• Other AI keys — if you configure a key for another provider (such as OpenAI), using the related feature sends the relevant data to that provider.

Each of these is optional and governed by the receiving provider's own terms and privacy policy. If you don't enable them, the data they would send never leaves your Mac.

Using Kola with AI assistants

Kola ships a plugin for Claude. When you choose to use it, your prompts and the specific records Claude reads to answer you are sent from your machine to Anthropic, the operator of Claude, so it can generate a response. This happens only for the data involved in the request you make, and only while you are actively using the assistant.

That exchange is governed by Anthropic's own terms and privacy policy, not by Kola. If you never use the AI plugin, none of your data leaves your Mac through Kola.

App updates

To let you know when a new version is available, the Kola app periodically checks getkola.app for an update manifest (on launch and roughly every few hours) and downloads the new version when you choose to install it. Like any web request, this exposes standard technical data such as your IP address and app version to our static host. It does not send any of your indexed personal data.

This website

The getkola.app website is a static page that exists to describe Kola and let you download it. It uses no advertising or product-analytics trackers and sets no tracking cookies.

As with any website, our hosting provider (Cloudflare) processes standard technical request data — such as your IP address and user agent — to deliver the site and protect it from abuse. The Kola app download is served the same way, from our static host on Cloudflare (static.getkola.app), and is covered by the same technical processing.

Security

Account credentials and API keys are stored in the macOS Keychain. Your people graph, notes, recordings, and other data live in the Kola.app data directory on your Mac, under your operating-system user account. Because the data stays on your device, its security depends on the protections you have in place there — your account password, disk encryption (such as FileVault), and device security. We encourage you to keep those enabled.

Retention and deletion

Because your data is stored locally, you control it directly. Disconnecting an account stops further indexing from that source. Deleting people, notes, recordings, or other data within Kola removes them from the local index. Uninstalling Kola.app and removing its data directory deletes everything from your Mac. We hold no copy to delete on your behalf.

Your privacy rights

Depending on where you live, you may have rights over your personal data — including the rights to access, correct, delete, export, and restrict or object to its processing, and to lodge a complaint with your local data-protection authority. Because Kola keeps your data on your own device, you can exercise most of these rights directly: the app lets you view, edit, export, and delete your records, and disconnect any source, without involving us.

For California residents: we do not sell or share your personal information (as those terms are defined under the CCPA/CPRA), and we do not use it for cross-context behavioral advertising. You will not be discriminated against for exercising your rights. If you have a question we can help with, email privacy@getkola.app.

International data transfers

Your indexed data stays on your device and is not transferred by us. When you use an optional feature that contacts a third party — such as the AI assistant, enrichment, or profile photos — the data needed for that feature may be processed by that provider in another country (for example, the United States), under their own safeguards and privacy terms.

Children

Kola is intended for adults and is not directed to anyone under 18 years of age, or the age of majority in your jurisdiction if it is higher.

Changes to this policy

We may update this policy as Kola evolves. Material changes will be reflected here with a new "Last updated" date. Your continued use of Kola after an update means you accept the revised policy.

Contact

Questions about this policy or your data? Email privacy@getkola.app.