What Kyoka does with your mail
Written plainly, because you are about to let software read your email and you should be able to check what it does with it.
What gets read
Every new message that arrives, once, so it can be checked for signs of a scam. That is the whole mechanism — there is no version of this that works without reading your mail, and anyone who tells you otherwise is selling something.
Mail that already sat in your inbox before you connected Kyoka is left alone. It only looks at what arrives from then on.
What gets kept, and for how long
- The message itself
- Never stored. It is read, checked, and not written down.
- Subject lines
- Stored only as a one-way scramble. It can confirm that a particular message was seen; it cannot be turned back into the subject.
- Who it was from
- Kept, encrypted, because the review list has to show you who a message came from. Unreadable without the key.
- Why Kyoka decided what it did
- Kept encrypted, and deleted after 14 days. These explanations tend to quote the message, so they do not stay.
- Scores, costs and times
- Kept. They are numbers about the checking, not about you, and they are what the statistics page is made of.
All of it goes when you delete your account, which you can do yourself at any time.
Where it goes
To decide whether a message is a scam, Kyoka sends it to Anthropic's AI over an encrypted connection. Anthropic does not use it to train anything.
Being honest about the limit of that: Anthropic keeps API traffic for a limited period for abuse monitoring, as most providers do. So "it goes nowhere" would be untrue. It goes to one company, for one purpose, and is not used to build anything.
Nothing about your mail is sent anywhere else. No advertisers, no analytics, no third parties.
Who can see it
- You
- All of it.
- A Trusted Guardian, if you invite one
- Only mail Kyoka has held for review, and only what you allow them to do about it. Not your inbox, not your settings. You can remove them instantly, on your own, and they cannot undo it.
- Whoever runs this Kyoka
- Sees how many messages were checked and what they cost — never who they were from, what they said, or what Kyoka concluded. That is a property of how the operator screen is built, not a promise about behaviour.
What Kyoka never does
- Send email as you, or to you. If a message claims to be from Kyoka, it isn't. Kyoka only ever talks to you inside this app.
- Delete anything permanently. Mail it removes goes to your Gmail Trash, where you can get it back for 30 days.
- Touch mail it hasn't flagged, or anything outside your inbox.
- Ask you for a password, a card number, or a code.
What you can do about it
- Watch only. Kyoka tells you and moves nothing. This is where every account starts.
- Download everything Kyoka holds about you, as one file, whenever you want.
- Delete your account yourself. It withdraws Kyoka's access to your Gmail and removes everything here.
- Revoke access from Google's side at myaccount.google.com → Security → Third-party access, without telling Kyoka anything.
The honest limits
Encryption protects the stored data if the database file is stolen. It cannot protect anything if the running server itself is broken into, because a server that can read your mail must hold the key to do it. That is true of every service of this kind, including the ones that don't say so.
Kyoka's answer is to keep the amount worth stealing small: no message bodies, no subjects, explanations deleted after 14 days, and everything else encrypted.