Early Access Privacy Notice

In short: Kai is an AI — never a human, and never a licensed professional. We collect what you share with Kai (which may be deeply personal — we treat all of it as sensitive) plus limited technical data. We use it to run the Services, power Kai's memory, and keep the Services safe. We do not sell your personal information, we do not share it for advertising, and we do not use your private Content to train AI models. You can delete individual memories, exclude patterns, delete conversations from your account, use Whisper Mode for unremembered conversations, and request a full data reset or export anytime. Early Access is for U.S. adults (18+) only.

This Early Access Privacy Notice explains how Mirrorcraft LLC, d/b/a Kai Sanctuary ("Kai Sanctuary," "we," "us") collects, uses, and protects information during the invite-only Early Access period of our websites, applications, and related services (the "Services"). It is written to describe how the product works today; as the product and our tooling mature toward public launch, this Notice will be replaced by a full Privacy Policy, with notice to you.

1. Who we are

The data controller is Mirrorcraft LLC, an Arizona limited liability company, 4539 N 22nd St, STE N, Phoenix, AZ 85016, USA. Privacy questions and requests: support@kaisanctuary.com.

2. Kai is an AI — and how we tell you

Kai is an artificial intelligence system, not a human being, and not a licensed physician, therapist, counselor, or other professional. A persistent notice of Kai's artificial nature is displayed in the product throughout your conversations. The Services are not a medical, mental-health, or crisis service. If you are in crisis, call or text 988 (U.S.) or call 911. Companion-style AI chat services may not be suitable for some minors; the Services are restricted to adults 18 and older (Section 10).

3. What we collect

• Account information: email address, username, password, and account settings.
• Conversations and Content: messages you send to Kai, journal entries, and related material you create in the product. By the nature of a reflective product, your Content may reveal information about your health, emotional state, relationships, or beliefs. We treat all conversational Content as sensitive personal information and protect it accordingly. Share only what you are comfortable sharing.
• Memory data: Kai maintains a persistent memory system — a structured graph of things worth remembering from your conversations, stored separately from your conversation history — plus pattern observations ("Insights") drawn from your Content.
• Technical data: device type, browser, IP address, usage events, and diagnostic logs, used for security, performance, and debugging.
• Support communications: what you send us when you contact support.

We do not collect payment information during Early Access (it's free).

4. How we use information

To provide and operate the Services (including generating Kai's responses); to power memory, personalization, and Insights under the controls in Section 6; to maintain safety, security, and performance and to enforce our Early Access Terms; to communicate with you about the Early Access program; and to comply with law. We do not sell your personal information, we do not share it for cross-context behavioral advertising or targeted advertising, and we do not use your private Content to train AI models. We honor Global Privacy Control signals as required by law; because we do not sell or share personal information, the signal results in no change to our practices.

5. AI processing

Your messages and relevant memory context are processed through AWS Bedrock, our AI infrastructure provider, to generate Kai's responses. Per AWS's published commitments for Bedrock, customer content processed through the service is not stored by AWS for its own use and is not used to train models. Authorized Mirrorcraft personnel may review limited data under access controls where necessary to debug issues, investigate abuse, or keep the Services safe — never for advertising and never to train models.

6. Your controls — what each one does today

• Delete a memory: you can delete individual memories Kai holds about you from within the product; deletion is immediate and permanent in the memory system.
• Exclude a pattern: you can ask Kai to exclude Insights or patterns you don't want used; excluded patterns are no longer applied to your experience.
• Delete a conversation: removes the conversation from your account. During Early Access, residual copies may persist in internal systems and encrypted backups; we are building complete deletion tooling before public launch.
• Whisper Mode: conversations in Whisper Mode are processed transiently to generate a response and are excluded from the memory system entirely — no conversation history, no memory entries, no Insights — and are not visible in your account history after the session.
• Full reset: you can request a complete reset of your account data — memory, conversations, and patterns — by emailing support@kaisanctuary.com.
• Export: you can request an export of your data by emailing support@kaisanctuary.com; we will provide it in a commonly readable format within a reasonable time (typically within a few business days).
• Account deletion: you can request account deletion at any time via support@kaisanctuary.com; we will delete your account and associated personal information, subject to the backup and legal-retention realities described above.

We honor all requests to the extent technically possible today and are hardening these mechanics into self-serve tools during Early Access. We will never deny you the Services, degrade your experience, or discriminate against you for exercising any privacy choice.

7. How we share information

Only with: service providers that host and operate the Services under our instructions (cloud infrastructure and AI processing — AWS — and email/support tooling), bound to use your information only to provide services to us; legal and safety recipients where we believe in good faith that disclosure is required by law or necessary to protect the safety of users or others; a successor entity in a merger, acquisition, or asset sale, subject to this Notice's commitments and with notice to you; and you or anyone you direct us to share with. That's the complete list. No data brokers, no advertisers, no sale, no sharing for advertising.

8. Security

The Services run on AWS infrastructure (SOC 2 Type II-audited provider) with encryption in transit and at rest for production data, segmented development, staging, and production environments, and user isolation. No method of transmission or storage is completely secure and we cannot guarantee absolute security — but if a breach affecting your personal information occurs, we will notify you and regulators as required by applicable law (including Arizona's 45-day notification requirement), and we maintain an internal incident-response plan.

9. Retention

Account data and Content are retained while your account is active — persistent memory is the product — subject to your deletion controls in Section 6 at all times. Encrypted backups age out on a rolling basis. Operational and security logs are retained for a limited period and then deleted or aggregated. When Early Access ends or your account is deleted, we delete your personal information within a reasonable period, subject to backups and legal holds.

10. Adults only (18+), U.S. only

Early Access is limited to U.S. residents 18 years of age or older, by invitation. We do not knowingly collect personal information from anyone under 18; if we learn or reasonably suspect a user is under 18, we will terminate the account and delete its personal information. To report a suspected underage user: support@kaisanctuary.com.

11. Your rights

Wherever you live, you can: access a copy of your personal information, correct inaccurate information, delete your data (Section 6), and export your data — all by emailing support@kaisanctuary.com with the subject "Privacy Request." We verify requests via your account email and respond within the time your state's law requires (generally within 45 days). If we deny a request, you may appeal by replying "Appeal," and your state attorney general is a further avenue. California residents: the rights to know, delete, correct, and non-discrimination apply as described here; we do not sell or share personal information and have not in the preceding 12 months, and we do not use sensitive personal information for purposes beyond providing the Services you request.

12. Changes

We may update this Notice during Early Access; material changes get at least 30 days' notice by email and in-product, and continued use alone will not be treated as agreement to material changes affecting your existing data. At public launch this Notice will be replaced by a full Privacy Policy with notice and, where required, your consent. Versions are archived at kaisanctuary.com/legal/archive.

13. Contact

Mirrorcraft LLC d/b/a Kai Sanctuary · 4539 N 22nd St, STE N, Phoenix, AZ 85016, USA · support@kaisanctuary.com