Privacy Policy

Last updated: 9 October 2026

Kyrzo (“Kyrzo”, “we”, “us”) provides an AI assistant that operates a business’s phone — for example to prepare and publish social media posts or answer customer messages — with the owner’s approval. This policy explains what data we process when you use the Kyrzo apps (iOS, Android, Windows desktop), the website kyrzo.com and the service at app.kyrzo.com, and the choices you have.

1. Data we collect

• Account data: your name, email address and a securely hashed password.
• Business profile: information you enter about your business (name, type, opening hours, offers, tone of voice, brand details) and your Kyrzo Odyssey preferences (the tasks you automate and the AI apps you use).
• Tasks and activity: the requests you give Kyrzo, each step it performs, approvals and answers, and an activity log of actions in your account.
• Phone screen content during tasks: when a task runs on a paired work phone, Kyrzo reads the screen (accessibility information and, when needed, screenshots) to know what to tap and type. Screen content is processed only while a task runs and screenshots are kept to show you what happened.
• Media and content: images you upload or that are generated for your posts, and post drafts (captions, hashtags).
• Device data: for paired phones and computers — model, operating system version, app version, connection status; for the owner app — a push notification token.
• Connected AI clients: if you connect Claude or Codex, the name of the client and access tokens (stored hashed).
• Technical data: IP address, timestamps and error logs needed to secure and operate the service.

We never ask for or store the passwords of your Instagram, WhatsApp, Facebook or other app accounts. You stay signed in to those apps on your own phone.

2. How we use data

• To provide the service: run the tasks you request, show you previews and ask for your approval before anything is published, sent, deleted or paid.
• To send account and security emails (for example password reset) and push notifications about approvals and finished tasks.
• To keep the service secure, prevent abuse and fix problems.

We do not sell your data and we do not use it for advertising. Legal bases (GDPR): performance of our contract with you, our legitimate interest in securing and improving the service, and your consent where required.

3. AI processing

To understand your requests, write content and decide the next step on the phone, Kyrzo sends the relevant task context (your request, business profile details, and the current screen content or screenshot) to AI providers: Anthropic (Claude) and OpenAI (GPT models used by Kyrzo Odyssey). Under their API terms these providers do not use API data to train their models. If you connect your own Claude or Codex account, that provider processes data under your own agreement with them.

4. Where data is stored and who processes it

• Amazon Web Services (Frankfurt, Germany, EU) — servers, database and encrypted backups; Amazon SES for email.
• Anthropic and OpenAI — AI processing (may involve transfers outside the EU under standard contractual clauses).
• Expo (650 Industries) — delivery of push notifications and app updates.
• Cloudflare — hosting of kyrzo.com and DNS.

Screenshots and media are encrypted at rest. Connections use HTTPS.

5. Retention

• Screenshots: deleted automatically after 30 days.
• Account, business data, tasks and media: kept while your account exists; deleted when you delete your account.
• Backups: kept for 30 days, then deleted.
• Password reset links expire after 1 hour.

6. Your rights and choices

• Delete your account at any time in the app (account menu → Delete account) or in the desktop app (Settings → Account). If you are the only owner of a business, its data is deleted too.
• Access, correct, export or restrict your data, or object to processing, by emailing hello@kyrzo.com.
• Turn off phone control at any time in Android Settings → Accessibility → Kyrzo, or unpair the phone.
• If you are in the EU/EEA, you can complain to your data protection authority.

7. Children

Kyrzo is a business tool and is not intended for children under 16. We do not knowingly collect their data.

8. Changes

We will post updates on this page and, for important changes, notify you by email or in the app.

9. Contact

Questions or requests: hello@kyrzo.com