Your data

This page is about what happens to the things you put into Kubi — your plans, your notes, your money, and, if you use it, your health records. It is written to be read, not to protect us. Where the answer is uncomfortable, it is here too.

It is yours

Everything you write stays yours. We do not sell it, we do not show it to advertisers, and we do not train models on it. Your space is separate from every other space at the level of the database itself: a request for your data cannot reach someone else's, and theirs cannot reach yours.

Who can see it

You. Always.

The assistant, only when you switch it on. It is off by default, and you turn it on for one conversation at a time — not once and forever. When it is on, what you showed it leaves our server and goes to the model that answers you. We do not keep those requests, and they are not used for training. But they do leave, and you should know that before you switch it on.

Us — and here is the honest part. We could technically open the database and read what is in it. We do not. The only times we would are when you ask us to help with something specific, or when something is broken and there is no other way to fix it.

Every such time leaves a record, and you can read it yourself on your account page. It is not a note we write afterwards out of good will: access is closed by default, and the same step that opens it writes down who, when and why. Without a reason the database grants nothing, and the window shuts by itself.

The limit of that, said plainly: whoever holds the server itself also holds the application’s own password, and could read the database without leaving a line. No mechanism living on that same machine can prevent it. What the record does give you is that the ordinary path is written down, and an unusual one becomes visible as the absence of a line where there should be one.

We could have promised more by encrypting everything with a key only you hold. We chose not to, and the reason is plain: then the assistant could not read your records either, and forgetting your password would mean losing everything for good. We would rather tell you the truth about access than make a promise that costs you the product.

Deleting

You can delete your space at any time, without asking us — the button is on your account page. Everything goes: plans, notes, money records, health entries, uploaded files, conversations with the assistant.

Files go with it. Documents you uploaded are erased from our disk by the same request that empties the database — not by a cleanup job running later, because between the two your files would still be sitting here after we told you they were gone.

One thing takes longer. We make a copy of the database every night, so that a server failure does not cost anyone their data. Those copies are kept for fourteen days, and your deleted data sits inside them until they expire. We cannot pick one person out of a backup — that is what makes it a backup. After fourteen days it is gone from there too.

Where it lives

On a server in Germany. Backups go to a second machine, also ours, at a different provider — so that losing one account or one company cannot lose your data.

Health is not medicine

If you keep health records here, they are a place to keep them — not a medical service. The assistant reads what you show it and talks to you about it. It is not a doctor, it does not diagnose, and it does not prescribe. This warning is for your sake, not ours: a person who takes a model's answer for a doctor's is taking a real risk.

Last updated: 27 September 2026. If something here is unclear or looks wrong, write to us — this page is meant to be argued with.

Asking us something

There is no email address on this site, on purpose. Everything — a question, a copy of your data, a complaint, a mistake you found on this page — goes through the contact form, which puts your message on a screen we read daily. An address nobody remembers to open is worse than no address at all.