Privacy
Last updated October 26, 2026
The short version: Kuzumi is a free, invite-only hobby project run by one person (Arb) on a server at home. Your data is used only to run these sites. Nothing is sold, there are no ads or trackers, and the AI runs on that home server, so your chats and pictures aren't sent to outside AI companies.
What this covers
The websites under kuzumi.dev: this page, the login portal, the chat site and the image site. Kuzumi's Discord bot works inside Discord and isn't covered here.
What is collected
- Signing in. Logins are handled by Cloudflare Access. It receives your email address and keeps a sign-in log (time, email, IP address and rough location). If you choose "Sign in with Google", Google shares your name, email address and profile picture. Nothing else from your Google account is requested. If you use the emailed one-time code instead, only your email address is used.
- Chat site. Your account (name and email), your conversations, any files you upload and your settings.
- Image site. What you type (and the prompt the AI writes from it), the pictures you make, and daily totals of how many pictures you made, edited or had refused in each style (to see how the site is used and set fair limits). Only you can see your pictures. Deleting a picture removes it from the server straight away. The daily totals don't include what you typed or the pictures, and are deleted after 90 days.
- Web search. When a chat uses web search, the search words are sent to a search service (Tavily) to get results. Your name and email aren't sent with them.
- Usage records. The server keeps basic records of requests (time, which feature, size) for 30 days to find problems. The content of your messages isn't kept in those records.
How it's used
Only to let you sign in, run the features you use, enforce fair-use limits and fix problems. It isn't used for advertising, isn't sold or shared for marketing, and isn't used to train AI models.
Who can see it
Your chats and pictures are stored on the home server, where Arb, as the administrator, can technically see them. They're only looked at when needed to fix something or deal with misuse. Cloudflare and, if you use it, Google, handle your sign-in under their own privacy policies: Cloudflare · Google.
How long it's kept
- Chats, pictures and your account stay until you delete them or ask for them to be deleted.
- Nightly backups are encrypted and stored on a home storage server, with an encrypted copy off-site. Old backups are removed automatically, so deleted data is gone from all backups within about 12 months.
- Usage records are deleted after 30 days. The image site's daily totals are deleted after 90 days.
Your choices
- You can delete your own chats and pictures at any time on the sites.
- To get a copy of your data, or to have your account and everything in it deleted, email privacy@kuzumi.dev.
- If you signed in with Google, you can remove Kuzumi's access at any time in your Google account settings.
Cookies
Only the cookies needed to keep you signed in, set by Cloudflare Access and by each site. There are no analytics or tracking cookies.
Children
These sites aren't meant for children under 13.
Changes and contact
If this page changes, the date at the top changes too. Questions go to privacy@kuzumi.dev.