Privacy Policy
Last updated November 2, 2026
[Owner's full name] ("we") runs Kodara. We keep as little about you as we can. This page says exactly what, why, and who helps us.
What we store on our server
- Account: your email address, first name, a scrambled (hashed) version of your password, your Kodara ID, your credits, plan and account status.
- Usage: a log of credit changes (for example "edit_script −2", purchases, codes redeemed) and how much AI working time you used, so credits and limits work and you can see your history.
- Device check: a one-way hash of an ID from your computer, so free credits are given once per computer. It can't be turned back into the ID.
- Sign-up limit: a salted hash of your IP address that changes every day, used only to stop mass account creation. We don't store your IP address.
- Sessions: a hashed sign-in token for each computer you're signed in on.
- Password reset codes: stored hashed for 15 minutes.
- Purchases: order number, pack, amount and status from Lemon Squeezy. We never see your card or bank details.
- Connect Roblox: when you connect your Roblox account, our server swaps Roblox's sign-in code for access tokens and passes them to your Kodara app. They wait on our server, encrypted, for at most 10 minutes until the app picks them up, then are deleted. When the app renews them (every 15 minutes while in use) they pass through our server without being stored. Kodara only asks Roblox for your username, profile picture and the access you approve on Roblox's consent page (game passes, developer products and uploading images for the games you pick). You can disconnect in the app or remove Kodara from the authorized apps in your Roblox account settings at any time.
What stays on your computer
Your chats, Studio connection, project notes, learned skills, voice recordings (turned into text on your PC and not kept), attached pictures, and any Roblox or OpenAI keys and Roblox connection tokens you add (encrypted) stay on your computer. Studio talks to Kodara on your computer only.
Your AI provider
Kodara runs the AI agent you choose (Claude Code, Codex or Gemini CLI) under your own account. What you ask and what the agent sees goes to that provider under their privacy policy, not to us.
Who helps us
- Cloudflare hosts our server and database.
- Lemon Squeezy processes payments as merchant of record.
- Brevo sends password reset emails.
- GitHub hosts the app downloads and updates.
Why (legal basis)
We use this data to provide the service you signed up for (contract), to prevent abuse and fraud (legitimate interest) and to meet legal duties such as keeping purchase records.
How long
Account data is kept while your account exists. Purchase records are kept as long as tax law requires. Daily sign-up hashes are deleted the next day.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account by emailing Kodaraassistant@gmail.com from your account's email. If you're in the EU/EEA or UK you can also complain to your data protection authority.
Cookies
The website uses no tracking cookies. It loads fonts from Google Fonts.
Contact
[Owner's full name], [Street, postcode, city, country] · Kodaraassistant@gmail.com