Terms of Service & Privacy Policy

1. Who we are and what this covers

Adedotun Gabriel is an independent software developer based in Abuja, Nigeria. In this document, “I”, “we”, “us” and “our” mean Adedotun Gabriel, who builds, operates and is responsible for the data in each product. “You” means anyone who visits this website or uses any of our products.

This page applies to every website, web app, mobile app, browser extension, bot, API and other service that we publish and that links to or names this page (together, the “Services”). That includes thekiwidev.me and the Personal Assistant (PA) described in section 4. Some Services may show an additional notice for features specific to them. If a product-specific notice and this page disagree, the product-specific notice applies to that product, but it can only add protections for you, never remove the ones here.

We are the data controller for personal information processed through the Services. Contact details are in section 16.

2. Privacy in plain words

3. Information we collect

Depending on the Service and the features you use, we may collect:

• Account and contact information, such as your name, email address and username, and your messaging-platform identifier (for example your Telegram user ID).
• Content you give us, such as messages, voice notes, images, documents, links and instructions you send to a Service, and feedback or support requests you send us.
• Data from accounts you connect, such as email, calendar, file, note or task data, but only from services you choose to connect and only within the permissions you grant. Section 4 lists exactly what PA accesses.
• Technical and usage data, such as error logs, timestamps, device and browser type, and basic request information our hosting providers record to keep the Services working and secure.
• Payment information, if a Service ever charges a fee. Payments are processed by the payment provider named at checkout; we never see or store full card numbers.

This website (thekiwidev.me) does not use advertising or tracking cookies. It stores one setting in your browser (localStorage) to remember whether you chose the light or dark theme. Our hosting provider may keep standard server logs, such as IP addresses, for security.

4. Personal Assistant (PA)

PA is a personal AI assistant you talk to through a Telegram bot. It reads the accounts you connect so it can answer questions (“find the invoice from last week”), tell you when an important email arrives, including mail that landed in spam, summarise your day, and draft replies. It runs on a backend hosted by Convex and is currently used by its developer and a small number of invited users.

Human in the loop. PA drafts email replies but sends them only after you review and approve each one in Telegram. Every reply is sent from the same mailbox that received the original message. PA does not delete emails or files.

Google data PA accesses

Other services PA can connect to

• Microsoft Outlook and Zoho Mail: the same email features as Gmail (read, alert, draft, send after approval), within the permissions you grant.
• Notion: reads and writes notes and lists you share with the PA integration, for example saving items you send it.
• Linear: reads and updates your tasks when you ask.
• Telegram: carries your conversation with PA. Telegram’s own privacy policy applies to its platform.

5. Google user data and Limited Use

In particular, for data received through Google Workspace APIs such as Gmail, Calendar and Drive:

• We use it only to provide and improve the user-facing features described in section 4, which you see and use in the app.
• We transfer it to others only when necessary to provide or improve those features (for example to the AI providers in section 7), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not use or transfer it to serve ads, including personalised, retargeted or interest-based ads.
• We do not sell it, and we do not use it to determine creditworthiness or for lending.
• We do not use it, or transfer it to anyone, to develop, improve or train generalised or non-personalised AI or machine-learning models.
• No human reads it unless you give us affirmative permission for specific messages or files (for example when you ask for help with a bug), it is necessary for security purposes such as investigating abuse, it is required to comply with law, or the data has been aggregated and anonymised for internal operations.

You can remove PA’s access to your Google account at any time at myaccount.google.com/permissions.

6. How we use information

We use the information described above only to:

• provide the features you ask for, such as searching, summarising, alerting, drafting and, with your approval, sending;
• keep your accounts connected, for example by refreshing access tokens;
• keep the Services secure, prevent abuse and fix errors;
• reply to you when you contact us; and
• meet legal obligations.

Where a law such as the GDPR or the Nigeria Data Protection Act 2023 requires a legal basis, we rely on performing our agreement with you (providing the Service you signed up for), your consent (when you connect an account, which you can withdraw at any time), our legitimate interest in keeping the Services secure, and legal obligations.

7. AI processing

Some features use large language models to understand your request and produce an answer, a summary or a draft. To do that, the relevant part of your data (for example the email you asked about) is sent to an AI provider for processing, and the result is sent back to you. Depending on the task, that provider may be Google (Gemini API), OpenAI, Anthropic or OpenRouter.

• We send only the data needed for the task you asked for.
• We send Google user data and other personal data only to providers under terms that do not allow them to use it to train their models.
• AI output can be wrong. That is why PA asks for your approval before it sends anything on your behalf.

8. Sharing and service providers

We do not sell or rent personal information. We share it only with service providers that help us run the Services, only as far as they need it, and under their data-protection terms:

We may also disclose information if the law requires it, to protect the rights, safety or property of you, us or others, or as part of a merger or sale of a Service, in which case the data stays covered by this policy and you will be told first.

9. Storage and security

• All data is encrypted in transit using HTTPS/TLS.
• OAuth access and refresh tokens and API keys are encrypted at rest with application-level encryption before they are stored, and are never shown in chat or logs.
• Each connected account is asked only for the permissions its features need.
• Access to production systems is limited to the developer and protected by strong authentication.
• Actions that change things outside the app, like sending an email, require your explicit approval.

No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and the relevant authorities as the law requires.

10. Retention and deletion

We keep personal information only as long as needed to provide the Service you use. Content we fetch from connected accounts, such as email text, is kept only as long as a feature needs it (for example to show you an alert or a draft) and is not kept as a permanent copy of your mailbox or drive.

You can delete your data at any time:

• Disconnect an account by asking PA to disconnect it, or by revoking access in your Google account at myaccount.google.com/permissions (or the equivalent page for Microsoft, Zoho, Notion or Linear). Stored tokens for that account become unusable and are deleted.
• Delete everything by emailing adedotun@thekiwidev.me from the address linked to your account. We will delete your account, connected-account tokens and stored content within 30 days and confirm by email.

Backups and provider logs are removed on their normal cycle, within 30 days. We may keep a minimal record when the law requires it, for example of a deletion request.

11. Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal information, to stop or limit a use of it, or to withdraw a consent you gave. Laws such as the Nigeria Data Protection Act 2023, the EU and UK GDPR, and California privacy law give you these rights, and we extend them to everyone. Email adedotun@thekiwidev.me; we will respond within 30 days. We do not sell or “share” personal information for cross-context behavioural advertising. You may also complain to your local data protection authority, such as the Nigeria Data Protection Commission.

12. Children

The Services are not meant for children under 13, or under the minimum age of digital consent where you live (16 in some countries). We do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

13. International transfers

We operate from Nigeria, and our service providers may process data in the United States, the European Union or other countries. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses and data-processing terms.

14.1 Agreement

By using any Service, you agree to these Terms and the Privacy Policy above. If you do not agree, do not use the Services. You must be at least 13 years old (or the age of digital consent where you live) and able to form a binding agreement. If you use a Service for an organisation, you confirm you are authorised to accept these Terms for it.

14.2 Using the Services

We give you a personal, non-exclusive, non-transferable, revocable right to use the Services according to these Terms. You agree not to:

• break any law, or infringe anyone’s rights, through the Services;
• access accounts or data you are not authorised to access;
• send spam, malware, or harassing or deceptive messages;
• probe, overload or disrupt the Services, or get around their security or usage limits;
• copy, resell or reverse-engineer the Services, except where the law allows it or an open-source licence grants it.

14.3 Your accounts and connected services

You are responsible for keeping your login details safe and for what happens under your account. When you connect a third-party account (such as Google, Microsoft, Zoho, Notion, Linear or Telegram), you confirm you are allowed to, and your use of that service stays subject to its own terms. We are not responsible for third-party services, their availability or changes to their APIs.

14.4 AI output and actions on your behalf

Answers, summaries, alerts and drafts are generated automatically and may be incomplete or wrong, and an “important” or “urgent” label is a suggestion, not a guarantee. Review AI output before relying on it. When you approve an action, such as sending an email, you are responsible for it as if you had done it yourself. The Services do not give legal, medical, financial or other professional advice.

14.5 Your content and our property

You keep all rights to the content you send or connect. You give us permission to process it only to run the Services for you, as described in the Privacy Policy. If you send us feedback or ideas, we may use them without any obligation to you. The Services, their code, design and branding belong to Adedotun Gabriel, except for open-source components, which stay under their own licences.

14.6 Availability, beta features and fees

Many Services are built and run by one developer, and some are experimental or offered in beta. We may change, pause or end a Service or feature at any time, and will try to give you reasonable notice and a chance to export your data. Services are free unless a price is clearly shown before you pay; any paid plan will state its price, billing period and refund terms at checkout.

14.7 Ending your use

You can stop using a Service and ask for your data to be deleted at any time (see section 10). We may suspend or end your access if you break these Terms, if we must for legal reasons, or if a Service shuts down. Sections that by their nature should survive, such as 14.5, 14.8 and 14.9, continue to apply.

14.8 Disclaimers and limitation of liability

The Services are provided “as is” and “as available”, without warranties of any kind, including fitness for a particular purpose, accuracy or uninterrupted availability. To the fullest extent the law allows, we are not liable for indirect, incidental, special or consequential damages, or for lost data, profits or opportunities. Our total liability for any claim is limited to the greater of the amount you paid us for that Service in the 12 months before the claim, or USD 50. Nothing here limits liability that cannot be limited by law, or your rights as a consumer under mandatory law.

14.9 Indemnity

If you misuse the Services or break these Terms and that leads to a claim against us, you agree to cover the reasonable costs of that claim, to the extent the law allows.

14.10 Governing law and disputes

These Terms are governed by the laws of the Federal Republic of Nigeria. Before taking formal action, please email us so we can try to resolve the issue informally within 30 days. If we cannot, the courts of the Federal Capital Territory, Abuja, have jurisdiction, unless the law where you live gives you the right to bring the claim in your local courts. If any part of these Terms is unenforceable, the rest still applies.

15. Changes to this page

We may update this page as the Services change. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell you in the Service or by email before it takes effect, and ask for your consent again where the law requires it. We will never use Google user data in a new way without first updating this page and getting your consent.

16. Contact

Adedotun Gabriel
Abuja, Nigeria
Email: adedotun@thekiwidev.me

For privacy requests, put “Privacy request” in the subject so we can find it quickly.