Kiln privacy policy

The short version

Kiln runs on your own computer. Your chats, the files you upload, the agents' memory and your settings are stored in your own app data folder on that computer. Kiln has no ads, no analytics and no tracking, and it sends nothing about you to the maker of Kiln except what the license check needs. The AI models that write replies are run by the agent tools you install and sign in to yourself; what they send to their providers is governed by those providers' policies.

What Kiln stores, and where

Everything below is kept on the computer running Kiln, in your app data folder (%LOCALAPPDATA%\Kiln), and nowhere else:

• Your account name and a hash of your password. Passkeys and two-step codes, if you turn them on.
• Your chats, the agents' replies and the files you attach or that agents produce.
• The agents' shared memory: facts they keep across chats, which you can read and edit.
• Settings, including any keys or passwords you store in the key vault for the agents to use; the vault is encrypted on disk.
• Logs of what the program did, kept for troubleshooting.

Uninstalling the Store app removes that folder. Uninstalling the installer version leaves it, so you can install again without losing anything.

What Kiln sends over the internet

• License check. Twice a day, and when you enter a key, Kiln sends your license key and a name for your PC to the Kiln license server, which answers with a signed token. The server keeps the key, the PC name and the time of the check in order to enforce the license. Nothing about your chats is sent.
• Updates. The installer version asks the same server which version is newest. The Store version is updated by the Microsoft Store.
• AI providers. Replies are written by the agent tools installed on your machines (such as Claude Code, Codex or Gemini CLI), which send your messages and the files an agent reads to their providers under your own accounts. Kiln itself holds no provider API key and sends nothing to any AI provider directly.
• Model list. Kiln fetches a public list of model names and prices so it can show costs. The request carries nothing about you.
• Fonts. The page loads its fonts from public font services. Those services see your IP address, as any website's font request does.
• Your other machines. If you add other machines to your hub, they connect to it with a token you create. If you turn on the home network or a tunnel in Settings, your hub becomes reachable from the addresses you choose; otherwise it listens only on your own computer.
• Notifications. Windows notifications are shown by the program itself. Browser push notifications, if you turn them on in a browser, go through that browser's push service.
• Links you paste and sources you connect. When you paste a link or connect a service (for example a Git host or a chat bot you set up), Kiln fetches from that site or service on your behalf. It does this only when you ask.

Kiln does not send crash reports, usage statistics or any identifier to the maker of Kiln.

Who can see your data

Only the accounts on your hub. The person who installs Kiln is its owner and creates the other accounts; every account on one hub can read that hub's chats. The maker of Kiln has no access to your hub or its data.

Your choices

You can read, export and delete everything, because it is on your own disk: delete chats and memory in the app, or remove the app data folder. You can delete accounts in Settings. You can end the license check by not using a license, in which case the program stops working, and you can ask for your license record to be deleted at the support address below.

Children

Kiln is a developer tool and is not directed at children under 16.

Changes

If this policy changes, the new text is published at the same address with a new date.

Contact

Support and questions: https://playgrn.com/kiln#support