Legal · Privacy

Privacy policy

How we handle your data, why we collect what we collect, and the rights you keep at every step. Plain English, no surprises.

Last updated · October 27, 2026

01

Introduction

Kioku (“we,” “our,” or “us”) is operated by Jishu Labs LLC. This privacy policy explains how we collect, use, disclose and safeguard your information when you use our decision and context memory at kioku.jishulabs.com (the “Service”). The decisions you record, and the reasoning behind them, belong to you, and we treat them that way.

02

Information we collect

We collect the following types of information:

  • Account information: your name, email address and password when you create an account.
  • Decision records: the decisions you capture, with their context, the options you considered, the rationale, the consequences, tags and projects.
  • Notes you structure: rough notes, threads and discussions you paste in so Kioku can turn them into decision records.
  • Context items: notes, links and source URLs you add and link to a decision.
  • Recall questions: the questions you ask about past decisions, used to find and answer from your own records.
  • Usage data: how many decisions and projects you have and which features you use.
  • Contact messages: your name, email and message when you write to us through the contact page.
  • Device information: browser type, operating system and IP address, for security and to keep the Service working.
  • Product analytics: pages visited, clicks, scroll depth, page performance (Core Web Vitals), JavaScript errors and session replays, recorded with PostHog. Replays mask everything you type, and on signed-in workspace pages they mask all on-screen text, so the decisions and notes in your workspace are not captured.
03

How we use your information

  • To provide and maintain the Service
  • To structure your notes into decision records and suggest tags
  • To answer recall questions from your own decisions, and to search them
  • To keep your timeline, history, projects and statistics
  • To reply to messages you send us
  • To send important service updates and security notices
  • To apply plan limits, such as those of the free plan
  • To improve the quality of structuring and recall
04

Decision and context privacy

Everything you record, and everything you link to it, is scoped to your account and encrypted at rest. We never share your decisions or context with other users, use them to train AI models, sell or license them, or make them public. You can delete any decision, or your whole account, at any time from the workspace and Settings.

05

Data storage and retention

Your data is stored with Supabase on PostgreSQL, protected by Row Level Security policies so only your account can read your own records. Traffic to the Service is encrypted with TLS. We keep your data for as long as your account is active. You can export your data as JSON from Settings at any time, and deleting your account removes all associated data permanently.

06

Third-party services

We use the following third-party services to run Kioku:

  • Supabase: authentication, the PostgreSQL database and application storage.
  • OpenAI: AI processing to structure notes and answer recall questions, when an AI provider is configured. Content is sent over an encrypted API connection only to produce your results.
  • Netlify: hosting and the production web infrastructure.
  • Resend: delivery of the messages you send through the contact page.
  • PostHog: product analytics and session replay, provided by PostHog, Inc. and hosted in the United States. This data is not sold or used for advertising, and it is not used to train AI models.

The current list is kept on the sub-processors page.

07

Your rights

You have the right to access your personal data, export it as JSON, correct inaccurate information, delete your account and all associated data, and opt out of non-essential communications. To use these rights, visit Settings or contact us at the email below.

08

Cookies

We use essential cookies for sign-in, sessions and the demo workspace, and PostHog analytics cookies and local storage (names start with ph_) for product analytics. The analytics storage is set on .jishulabs.com and shared with jishulabs.com and the other Jishu Labs tools. If you declined cookies on jishulabs.com, analytics is not loaded. We do not use advertising cookies. See the cookie policy for details.

09

Changes to this policy

We may update this privacy policy from time to time. We will post material changes on this page and update the “Last updated” date, so please check back periodically.

10

Contact us

If you have questions about this privacy policy, use our contact page or email admin@jishulabs.com.

Questions about this document? Get in touch.