Privacy Policy
Version 2026-09-10 · Effective September 10, 2026
This explains what AI9 Labs, Inc. collects when you use Kaboodle, why we collect it, who else sees it, and how to ask us for a copy of it or to delete it.
1. What we collect
Your account. Your email address and username, and whether your email has been verified. We do not store your password: sign-in is handled by Amazon Cognito.
What you write and what you get back. Your conversations: the messages you send, the answers the AI produces, and what the independent review reported about them. We store these so you can return to a conversation later.
Usage. How many requests you made, which model you chose, how many credits an operation used, and whether it succeeded. This is what your usage figures are calculated from, and it is what your bill rests on.
Payment. Subscriptions are processed by Stripe. Your card details go to Stripe and never reach us; we keep the subscription status, the billing period and the transaction record.
Technical records. Server logs and diagnostics, which include request identifiers, timing and error information, and are used to run the service and investigate problems.
Your theme setting (light, dark or system) is stored only in your own browser. It is never sent to us.
2. AI models, and what happens to what you write
To answer you, we send your message and the earlier messages in that conversation to an AI model. To review the answer, we send it for independent review. Both run on Amazon Bedrock in Amazon Web Services regions in the United States.
AI9 Labs, Inc. does not train AI models on your conversations, and does not sell your information or share it for advertising.
Amazon Web Services operates the models we use, under its own terms. We do not control those terms, and we do not make promises here on Amazon’s behalf.
Please do not put information into Kaboodle that you would not want processed by an AI model: passwords, payment card numbers, government identifiers, or health records belonging to someone else.
3. Cookies and analytics
Essential cookies. Signing in sets cookies that keep you signed in. Without them the service cannot work, and they are not used for advertising.
Google Analytics. We use Google Analytics to understand which pages people visit and how the site is used. It sets its own cookies and Google receives the page you visited, your approximate location derived from your IP address, and basic device information. We do not send Google your email address, your conversations or your account identifier.
You can stop Google Analytics by using Google’s opt-out add-on or by blocking third-party scripts in your browser. Kaboodle keeps working either way.
4. How long we keep things
- Your account and your conversations: while your account is open, and until you ask us to delete them.
- A stored copy of a completed AI result, kept so a repeated request can be answered without re-running it: 30 days.
- The record linking one AI operation to one charge: about seven years, because it is the evidence that answers a billing or tax question, and it is never deleted while a payment is unresolved.
- Billing and transaction records: as long as tax and accounting law requires.
- Server logs and diagnostics: kept for as long as they are useful for operating and securing the service, then discarded.
- Sign-in and authorisation history: currently retained while the account exists.
Backups are taken on a rolling basis and are overwritten in the normal course. Deleting something removes it from the live service straight away; it may persist in a backup for a short period after that.
5. Who else is involved
We use a small number of providers to run Kaboodle:
- Amazon Web Services: hosting, databases, and the AI models themselves.
- Stripe: subscription payments.
- Google Analytics: website analytics.
- Microsoft: the email we use to reply to you.
They act for us and are not permitted to use your information for their own purposes, except where their own terms govern their service to us.
6. Where your information is
Kaboodle runs in the United States and your information is processed there. Subscriptions are available in the United States only.
7. Your choices
You can ask us for a copy of your information, ask us to correct it, or ask us to delete it, including your conversations. Some US states give you these rights by law; we offer them to everyone.
These requests are handled by email rather than by a button in the product. Write to info@kaboodleai.com from the address on your account and tell us what you want. We may need to confirm it is really you before we act, and we will keep the records the law requires us to keep even after deleting the rest.
You can close your account at any time by writing to the same address, and you can cancel a subscription yourself without closing your account.
8. Children
Kaboodle is not for children. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.
9. Security
Sign-in tokens are held in cookies your browser will not hand to other sites, credentials are sent only from our servers to ours, and connections are encrypted. No service can promise perfect security, and we do not.
10. Changes, and getting in touch
If we change this policy in a way that matters, we will tell you before it takes effect and update the version at the top of this page.
AI9 Labs, Inc., a Delaware corporation is responsible for the information described here. Email info@kaboodleai.com.
