Privacy Policy

Last updated and effective: 8 June 2026

1. Who we are (the controller)

The controller responsible for your personal data is the operator of Kamoš:

We are a sole proprietor, not a company. We have not appointed a Data Protection Officer because we are not legally required to do so. For any privacy question or to exercise any of your rights, contact us at hello@getkamos.com. We answer every request ourselves.

2. Scope of this policy

This policy applies to:

• visitors to our website at getkamos.com;
• customers who buy a Kamoš licence; and
• users of the Kamoš application on macOS.

Kamoš is a decorative desktop companion. It is designed to touch as little of your information as possible. It never reads, opens, moves, uploads or deletes your files. Where it uses macOS Accessibility access, it reads only the on-screen positions of your desktop icons so the character can climb and jump between them. That information stays on your device and is never transmitted to us.

3. The personal data we process

We keep data collection to the minimum needed to run the product. We process the following.

Data you provide

• Email address. Collected at purchase through our payment provider and used to identify your licence and account, deliver your licence key, link the characters you own, and provide support.
• Birthday (day and month only). If you choose to enter it during setup, it is used only to trigger an in-app birthday surprise. It is stored on your device. We never ask for, and do not need, the year of your birth.
• Character prompts and optional reference photos. When you use the "create your own character" feature, the text you write, and any photo you choose to upload, are processed to generate the character. See section 7.
• Support correspondence. The content of emails and messages you send us, so we can help you and keep a record of the matter.

Data created when you use the product

• Licence key and purchase record. The licence key issued to you and the fact, date and amount of your purchase.
• Device identifier. When you activate Kamoš on a Mac, the app reads your Mac's hardware identifier (the macOS platform UUID) and sends it to us. We use it only to bind your licence to your devices, to enforce the limit of two active Macs per licence, and to support transfers between Macs. It is a per-machine value and does not tell us who you are by itself.
• Characters you create or claim. The name, settings and sprite images of characters you generate or claim from a friend, so they can be stored and synced to your other Mac.
• AI generation balance. The number of AI generations remaining on your licence.
• Technical and usage data. Standard information generated when software talks to a server: IP address, request time, the app or browser version, the type of device, and which features were used. This includes server logs and, where enabled, product analytics (see section 5).

We do not process special categories of personal data (such as data revealing health, beliefs or biometric data used to identify you). The face check described in section 7 runs on your own device and is not used to identify anyone.

4. Why we use your data and on what legal basis

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. You may object to this processing at any time (see section 11). Where we rely on your consent, you may withdraw it at any time, without affecting processing already carried out.

5. Website, cookies and analytics

Our website is intentionally light. The strictly necessary cookies and similar storage that keep the site working, and that remember your cookie choice, are used on the basis of our legitimate interest and do not require consent.

We use PostHog for product and usage analytics. This includes session replay, which records interactions with our web pages (such as clicks, navigation and scrolling, with all input fields masked) so we can see where the experience can be improved, and error reporting, which captures technical faults so we can fix them. Where these technologies use cookies or similar storage that is not strictly necessary, we set them only after you give consent, in line with Act No. 452/2021 Coll. on Electronic Communications and the GDPR. You can give or refuse consent, and change your mind later, using the "Cookie settings" link in the footer of the site. Most browsers also let you block or delete cookies; doing so may affect how some parts of the site work.

Analytics help us see which features people use and where the product can be better. We configure analytics to avoid collecting more than we need, and we do not use them to build advertising profiles or to sell your data.

6. The application and what it sends us

The Kamoš app communicates with our servers only for these purposes:

• Licence activation, refresh and transfer. The app sends your licence key and your Mac's device identifier so we can confirm the licence, return your entitlements, and keep the two-device limit and transfers working.
• AI character generation. When you ask for a new character, the app sends your licence details and your prompt (and any photo you chose) to our generation service. See section 7.
• Character sync. If you sync characters, their data and images are stored so they appear on your other licensed Mac.
• Updates. The app periodically checks for updates. This sends standard technical information (such as the current app version and your macOS version) to our update endpoint so we can offer you the right update. Updates are delivered securely and verified by a cryptographic signature before they are installed.
• Analytics, where enabled. The app may send pseudonymous usage events, such as which features are used and the app version, so we can understand how Kamoš is used and make it better. These events do not identify you and never include the contents of your files or the look of your characters. See section 5.

Outside these specific actions, Kamoš runs locally on your Mac. Your characters, your settings, your birthday and your desktop activity stay on your device unless one of the actions above applies.

7. AI character generation

The optional "create your own character" feature turns a description, or a photo, into a character. To do this we send your text prompt, and the reference photo if you upload one, to OpenAI, which generates the images. Please note the following:

• If you upload a photo of another person, you confirm that you are allowed to do so and that you have that person's consent where it is required. Only upload photos you have the right to use.
• The check that a photo contains a face runs entirely on your own Mac, using Apple's on-device vision technology. It only confirms that a face is present so the result looks good. It does not create a biometric template and is not used to recognise or identify any individual.
• We send your prompt and photo to OpenAI only to fulfil your request. According to OpenAI's terms for its API, this content is not used to train its models, and is retained by OpenAI only briefly for the purpose of monitoring abuse.
• We do not keep your uploaded reference photo on our servers after the character has been generated. The resulting character images are stored so you can use and sync them.
• Do not submit prompts or images that are unlawful, that infringe someone else's rights, or that depict another person in a way they have not agreed to.

8. Service providers and sub-processors

We do not sell your personal data and we never will. We share it only with the service providers that help us run Kamoš, and only as far as each one needs in order to perform its function. Each provider acts as our processor under a data-processing agreement, or as an independent controller where it is legally responsible for the relevant processing (for example the payment provider for payment and tax data). The providers we use are:

We may also disclose personal data where we are legally required to do so, to a competent authority on a valid request, or to protect our rights, your safety or the safety of others. If we ever transfer the business, we will pass data to the new operator subject to this policy and will tell you beforehand.

9. International data transfers

Where a provider offers hosting within the European Union, we choose it: our analytics data (PostHog) is hosted in the EU. Several of our other providers are based in the United States, so some personal data may still be transferred outside the European Economic Area. Where this happens, we rely on a lawful transfer mechanism under Chapter V of the GDPR. In practice this means the recipient is certified under the EU-U.S. Data Privacy Framework, or we rely on the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate. You can ask us for more detail or a copy of the relevant safeguards at hello@getkamos.com.

10. How long we keep your data

We keep personal data only for as long as we need it for the purpose it was collected, and then delete or anonymise it. Our standard periods are:

• Account and licence data: for as long as your licence exists. If you ask us to delete your account, we remove it promptly, allowing a short period for routine backups to cycle out.
• Device activations: until you transfer or deactivate the device, or your account is deleted.
• Characters you sync: until you delete them or your account is deleted.
• Reference photos for AI generation: not retained by us after the character is generated.
• Support correspondence: up to three years after the matter is resolved.
• Accounting and tax records: for the period required by law, which in the Slovak Republic is generally up to ten years.
• Server logs: a short period, generally no more than ninety days, unless needed to investigate an incident.
• Analytics data: kept in pseudonymised or aggregated form and retained for no longer than is useful, generally up to twenty-four months.

11. Your rights

Subject to the conditions in the law, you have the right to:

• access the personal data we hold about you and receive a copy;
• rectify data that is inaccurate or incomplete;
• erase your data ("right to be forgotten");
• restrict our processing in certain cases;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• data portability, meaning you can receive certain data in a structured, commonly used, machine-readable format;
• withdraw consent at any time where we rely on it, without affecting earlier processing; and
• lodge a complaint with a supervisory authority (see section 16).

To exercise any right, email us at hello@getkamos.com. We may need to confirm your identity. We respond without undue delay and within one month at the latest, which we may extend by two further months for complex requests, in which case we will tell you. We do not charge for this, unless a request is manifestly unfounded or excessive.

12. How we protect your data

We apply appropriate technical and organisational measures to protect your data. These include encryption of data in transit using TLS, access controls on the principle of least privilege, reputable infrastructure providers, cryptographic signing of licences and of app updates so they cannot be tampered with, and storing only what we need. No method of transmission or storage is perfectly secure, but we work to protect your data and to keep these measures under review. If a personal data breach is likely to put your rights at risk, we will notify the supervisory authority and, where required, you, in line with the GDPR.

13. Children

Kamoš is not directed to children. You must be at least 16 years old to use it and to provide any personal data. If you are under the age of majority where you live, you may use the product only with the involvement of a parent or guardian. If we learn that we have collected personal data from a child contrary to this, we will delete it. If you believe a child has provided us with personal data, contact us at hello@getkamos.com.

14. Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects about you within the meaning of Article 22 of the GDPR. Licence checks are technical validations, not decisions that profile you.

15. Changes to this policy

We may update this policy from time to time, for example when we add a feature or change a provider. When we do, we will change the date at the top and, for material changes, take reasonable steps to tell you, such as a notice on the website or an email. Your continued use after the change takes effect means you have read the updated policy.

16. Complaints and supervisory authority

If you have a concern, please contact us first at hello@getkamos.com so we can try to put it right. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the country of your habitual residence, place of work, or the place of the alleged infringement. Our lead authority is:

For consumer matters, the competent supervisory body is the Slovenská obchodná inšpekcia (Slovak Trade Inspection, SOI). See our Terms of Service for how to raise a consumer complaint and for out-of-court dispute resolution.