Privacy Policy

Activity metadata (via IDE extensions): When you use a Kodo extension, we collect heartbeat data including file paths, programming languages, project names, branch names, editor name, operating system, timestamps, and cursor position. We do not read, store, or transmit the contents of your code.

Account information: When you create an account, we collect your email address and any profile information you provide (e.g. display name).

Usage data: We may collect anonymised usage analytics about how you interact with the Kodo web app (pages visited, features used). This is opt-in and can be disabled in your settings.

Payment information: If you subscribe to a paid plan, payment details are processed by our payment provider. We do not store full card numbers on our servers.

We use the information we collect to:

• Provide, operate, and improve the Service
• Calculate coding time, session summaries, and productivity insights
• Generate AI-powered session titles and summaries
• Send transactional emails (e.g. session digests, receipts)
• Respond to your support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your activity data for advertising purposes.

Your data is stored on servers provided by Supabase (PostgreSQL) hosted on AWS infrastructure. We use industry-standard security measures including TLS encryption in transit and encryption at rest.

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time through your account settings or by contacting us.

We use the following third-party services to operate Kodo:

• Supabase — database and authentication
• Resend — transactional email delivery
• PostHog — anonymised product analytics (opt-in)
• OpenAI / Google Gemini — AI session summaries (file metadata only, never code content)
• Sentry — error monitoring

Each of these providers has its own privacy policy governing their handling of data.

Kodo's IDE extensions include a Privacy Mode setting. When enabled, file paths and project names are omitted from heartbeat data — only language and editor information are sent. You can enable this at any time in your extension settings.

We use session cookies to keep you authenticated on the Kodo web app. We do not use advertising or tracking cookies. You can control cookie behaviour through your browser settings.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Portability — request your data in a machine-readable format
• Objection — object to certain processing of your data

To exercise any of these rights, contact us at codes.kodo@gmail.com. We will respond within 30 days.

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at codes.kodo@gmail.com.