Privacy

Preview draft · October 12, 2026. Kaytos, LLC must review this policy before a public launch. This is not a claim that the hosted product is complete or suitable for sensitive data.

Who operates Taste

Kaytos, LLC operates taste.training. This policy describes the Mac app and the hosted development preview. It does not replace the policies of your model provider, operating system, backup service, or coding agent.

Choose where your library lives

Local mode is the default. The app keeps your screenshots, notes, projects, and generated taste skill on your Mac. When you ask a model to read a clip, its image and relevant notes go to the model provider you choose. You pay that provider directly. Keys entered in the Mac app go into the macOS Keychain, not the library or synced config.

Signing into Taste does not upload an existing library. Enabling sync is a separate choice for that library. Sync sends its completed clips, notes, context, projects, and generated profiles to Taste. Local indexes, API keys, and project repository paths are excluded. Free-text notes and images can still contain private details: inspect them before enabling sync.

The planned hosted processing mode will send selected clips to service-selected AI providers without using your own API key. That mode is not available in this preview. Its providers, data handling, and consent screen must be set before activation.

What the service receives and why

• Your email address: to send sign-in links, identify your account, and reply to requests.
• Session credentials, device names, and connection dates: to authenticate you and let you remove a Mac. The service stores hashes of secret session tokens.
• Selected library content and its change history: to store it and sync it to your approved devices.
• Network and request data: Cloudflare handles IP addresses and connection information to deliver and protect the service. Our rate-limit table stores hashed identifiers and counters, not raw IP addresses.
• Messages you send us: to provide support and respond to privacy or security requests.

We use necessary sign-in cookies. The public site does not include advertising trackers or third-party analytics scripts. We do not sell library content or use it for targeted advertising. We do not use your library to train our own general-purpose model.

Service providers and access

Cloudflare provides the website, email delivery, database, and private object storage. Its infrastructure and authorized Kaytos personnel can process data needed to operate and protect the service. Content is not made public or placed in another person's library. We may disclose information when required by law or to address abuse, fraud, or a security incident.

In local mode, Anthropic or OpenAI receives the material you send through its API. That provider's contract, retention, and account settings apply; this policy does not promise zero retention by another company. A coding agent that reads your installed taste skill may send that text to its own provider under that agent's settings.

Hosted processing is not end-to-end encrypted. The service must be able to read the material it processes. Do not upload passwords, API keys, confidential client work without permission, or information that needs stronger protections than this preview provides.

Retention and removal

Sign-in links and uncompleted device requests expire after ten minutes. Sessions expire after thirty days. Expired auth records and rate counters are cleaned hourly. Account identity remains while the account exists.

The sync preview retains uploaded files and change records. Removing a clip creates a deletion record so other Macs can remove it too; it does not yet guarantee physical erasure of historical objects. Automatic object purging and self-service account deletion are release requirements, not completed features. During this restricted preview, ask the operator for account removal and confirmation of its scope before sending sensitive content.

Disconnecting a Mac removes its local access credential and attempts to revoke its server session. It does not delete the account or cloud library. Previously downloaded files stay on that Mac. You control your local copies and any backups made by iCloud or other software.

Your choices and rights

You can stay local, turn sync off, revoke a device, and keep the library files on your Mac. Depending on your location and applicable law, you may have rights to access, correct, export, delete, restrict, or object to use of personal information, and to complain to a data-protection authority. We must verify account ownership before acting on a request.

Where data-protection law requires a legal basis, account and sync processing supports the service you request; security controls support our legitimate interest in preventing abuse. Optional processing requires a separate choice. We may retain limited information when law requires it. Cloudflare and future approved processors may operate outside your country; a database location hint is not a data-residency promise.

Children, changes, and contact

The preview is for adults, not children. We will date policy changes and notify account holders before a material change to how existing library content is used.

For privacy requests, email privacy@taste.training. For product help, email support@taste.training. These addresses reach Kaytos, LLC. Operator mailing details where required, transfer safeguards, and a final retention schedule are required before open registration.