Privacy Policy

Effective date: 9 June 2026 · Last updated: 17 August 2026

1. Who we are

Kavaii is published by Systana LLC, a company registered in Georgia. Contact: kavaii@sistana.ge. For data protection enquiries please use the same address with the subject line "Privacy".

2. What Kavaii is

Kavaii is a fully offline 3D anime simulation application. All conversational AI inference, voice synthesis, voice recognition, and image understanding happen locally on your computer, using models downloaded to your device. No conversational content is sent to any server operated by us or by a third party.

3. Information we do not collect

We do not collect, store, transmit, log, sample, analyze or share any of the following:

• The text of your chat messages, in either direction.
• Audio captured by your microphone (Free-Flight voice mode).
• Transcripts of audio captured by your microphone.
• Images or video frames captured by your camera or attached to messages.
• Custom prompts, persona content, or other character configuration.
• Names you give your character or other display-only labels.

These remain exclusively on your computer, stored locally inside Kavaii's application support directory. Chat history and settings are encrypted at rest on your device.

4. Information we do collect

First, the absolute promise: Kavaii has no telemetry, no analytics, and no behavioural tracking, and it never transmits the content of your conversations, your voice, or your camera or attached images — not to us, and not to any third party. The only way we ever learn about a problem is a report you choose to email us.

The only network activity Kavaii makes is the following, and nothing else:

• Licence activation and renewal: Kavaii is sold as a one-time purchase with a licence key that works on two devices. To make that limit meaningful, the app contacts our licence server. What is transmitted, and nothing beyond it:
  • your licence key, so that it can be recognised;
  • a device fingerprint — a one-way cryptographic hash derived from identifiers of your machine. The underlying values are never sent and cannot be reconstructed from the hash;
  • a device name, made up of the operating system and the name your computer carries on your network, so that you can tell your own machines apart when you release one of your two slots. Depending on how your computer was set up, that name may contain your own name;
  • the date of the activation and of the most recent licence check.
  We store the licence key only as a hash, never in readable form. No information about your use of the app is transmitted — not what you talk about, not which features you use, not how long or how often the app runs. After activation the app verifies the licence locally on your computer and comes back roughly once a month to renew it, regardless of how much you have used it in between. If you are offline it simply keeps working.
  Purpose and legal basis: performing the purchase contract with you (Art. 6(1)(b) GDPR) and preventing unlimited copying of the licence (Art. 6(1)(f) GDPR).
• Model download: the list of available character brains is built into the app, so Kavaii does not contact our servers for it. When you choose a brain, the app makes a standard one-time HTTPS request directly from your computer to Hugging Face, the public registry where the model files are hosted. No account, sign-in, or registration is required — the download is anonymous. It goes straight from your computer to Hugging Face; it does not pass through us, and Hugging Face's own privacy policy applies to that request.
• Reports you send voluntarily: if you use the "Report a safety issue" feature, the app drafts an email to kavaii@sistana.ge with the text you write. Nothing is attached automatically and no chat content is included; anything you decide to paste into the report is your choice. This voluntary email is the only way we ever hear about a problem.

5. Purchase and payment

Kavaii is sold through itch.io. Your payment is handled entirely by itch.io and its payment processors — we never receive or store your card details, bank details, or billing address. itch.io's own privacy policy applies to the purchase itself.

As the seller, we can see the information itch.io makes available to us about a sale, which includes the email address used for the purchase and the amount paid. We use it only to answer support requests and for our bookkeeping obligations, and we do not import it into any other system, build profiles from it, or pass it to third parties.

6. How long we keep licence data

A licence record exists for as long as the licence does, because it is what makes the two-device limit work. If you release a device slot, that machine is marked inactive and its record stops being used. You may ask us to delete your licence records entirely — write to kavaii@sistana.ge. Deletion frees all slots on the key, so afterwards you can activate it again from scratch. Records required for accounting are kept for the period the law requires.

7. Local storage on your device

Kavaii stores the following files on your own computer — on macOS inside ~/Library/Application Support/Kavaii/, on Windows inside %APPDATA%\Kavaii\:

• Your chat history — stored encrypted.
• Your settings — stored encrypted.
• Your licence, stored encrypted and bound to this machine.
• The AI model files you have downloaded.

You can delete these files at any time by removing the Kavaii/ folder, which permanently erases your local data.

8. Cookies, analytics, telemetry

Kavaii does not use cookies, advertising identifiers, analytics SDKs, crash reporters that include user content, usage tracking, or any form of behavioural telemetry. We do not track what you do inside the app.

9. Children

Kavaii is not intended for children under 16 years of age. The App is rated 16+ and does not knowingly collect personal information from children under 16. See our Terms of Service for details on eligibility and content rules.

10. Data subject rights (GDPR)

Because we do not collect conversation content, most data subject rights under the GDPR are satisfied by the architecture of the application itself: there is nothing on our side to access, rectify, port, or erase.

The exception is the licence data described in section 4 and the sales information described in section 5. For those, and for any report you choose to email us, you may contact kavaii@sistana.ge to exercise your rights of access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may also lodge a complaint with your local supervisory authority.

11. Where the data is

The licence server and its database are operated on Google Cloud within the European Union (Belgium, with database replication across European regions). Google acts as our processor there.

Payments are processed by itch.io, which is based in the United States, on the basis of the European Commission's standard contractual clauses used by that provider. Model downloads are made directly from your computer to Hugging Face, with no account or sign-in required, and do not pass through us. We do not transfer user content anywhere, because we do not have user content.

12. Security

All local files containing user data are encrypted at rest, and every network request the app makes uses TLS. The licence key is stored on our side only as a hash, so a copy of our database would not yield a usable licence. Your conversations never leave your computer, so there is nothing on any server of ours that could expose them — that content simply does not exist outside your device.

13. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the application and on this page. Continued use of Kavaii after a change constitutes acceptance of the updated policy.

14. Contact

Systana LLC
Email: kavaii@sistana.ge
Subject line for privacy matters: Privacy

← Back to Kavaii