Privacy Policy

Last updated — 3 October 2026 · Operated by Nexor Sparks

In short: we collect what is needed to run your account and chats, we do not sell your data, and the optional Gmail connector is read-only and is used only to answer your own questions. Google-specific details are on the Google User Data and Gmail Access pages. To delete data, see Data Deletion.

1. Introduction

This Privacy Policy explains how Nexor Sparks ("we", "us", "our") collects, uses, shares, and protects your information when you use Kashish (the "App"). When you create an account, we ask you to actively confirm — via a checkbox that isn't pre-selected for you — that you've read and consent to this Privacy Policy. If you don't consent, please don't create an account or use the App.

2. Information we collect

a) Information you give us

Account information — name, chosen handle, email or phone used to sign in, and date of birth (used to confirm you meet our minimum age requirement).
Profile information — profile photo, display name, and any other details you choose to add.
Content you create — messages, voice interactions, and any images you generate or upload while chatting with Kashish.

b) Information collected automatically

Device information — device type, operating system, and app version, used for compatibility and bug fixing.
Usage data — which features you use and how often, to help us understand what's working and what isn't.
Approximate technical data such as IP-based region, used for security and abuse prevention.
Push notification tokens — if you allow notifications, we store a device token (via Firebase Cloud Messaging) so reminders and updates you've set up can reach you even when the App is closed. You can turn this off anytime from your device settings or the App's notification settings.

c) Information from third parties

If you sign in using a third-party provider, we receive basic profile information (such as name and email) from that provider, as permitted by your settings with them.

2A. Health & wellness features

Kashish includes optional Health features (water, mood, steps, sleep, weight/BMI, resting heart rate, workouts, meals, and similar logs). This section explains specifically how that data is handled, in addition to the rest of this Policy:

Stored on your device only. Everything you log in the Health screen is saved in your browser's local storage on your own device. We do not upload, sync, or store this health data on our servers, and we do not access it — unless you choose to share it with Kashish yourself, for example by tapping "Generate report," which sends the numbers already shown on your Health screen to the AI in that one conversation so it can write you a summary.
Device sensors. With your permission, step tracking uses your device's motion sensor, and air quality / UV index checks use your device's location, only while you actively use those features. You can decline or revoke these permissions at any time in your device settings, and the related feature will simply show no data rather than a fake reading.
Third-party data lookups. Air quality and UV index use Open-Meteo; meal search uses Open Food Facts; workout search uses wger.de; medicine information uses the U.S. FDA's openFDA Drug Label API. These are free, independent public services — when you search or check something, your query and approximate location/IP may be sent directly to that provider (not stored by us) to return real results. Each operates under its own terms and privacy practices.
Not medical data or advice. Health screen figures (including calorie, MET-based, and similar estimates) are self-reported or sensor-derived approximations for your own reference, not clinical measurements, a diagnosis, or medical advice, and medicine information shown is official FDA label text for general reference only. See the Consumer Terms for more on this.

3. How we use your information

To create and maintain your account, and keep you signed in across sessions.
To let Kashish remember conversation history and context so replies feel personal and continuous.
To operate core features, including text chat, voice, and image generation.
To detect, prevent, and respond to abuse, fraud, security incidents, and violations of our Terms or Community Guidelines.
To fix bugs, improve reliability, and understand how the App is used so we can improve it.
To communicate with you about your account, updates, or support requests.
To comply with legal obligations where applicable.

4. How your data is processed

Your messages are sent to the AI systems that power Kashish's responses, along with recent conversation history, so the app can generate a relevant reply. This processing happens through infrastructure operated by Nexor Sparks and its service providers.

5. Sharing of information

We do not sell your personal information. We share information only in these situations:

With service providers who help us operate the App — such as hosting, authentication, database, and AI-processing providers — strictly to perform services on our behalf.
If required by law, legal process, or to protect the rights, safety, or property of Nexor Sparks, our users, or the public.
In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction, subject to this policy.
With your consent, for any other purpose we disclose to you at the time.

6. Data retention

We retain your account information and conversation history for as long as your account is active, so Kashish can maintain context and history. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain certain data for legal, security, or fraud-prevention purposes.

7. Data security

We use reasonable technical and organizational measures — including authentication and access controls — to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

8. Children and minors

Kashish is not intended for children under the minimum age required in their region, and account creation requires self-declaring a date of birth confirming this. We do not knowingly collect personal information from children below that age, and we do not independently verify the date of birth provided. If we learn that we've collected information from someone below the required age, we will take steps to delete it.

9. Your rights and choices

You can view and update your profile information at any time from the Profile screen.
You can request a copy of your data, or ask us to delete your account and associated data, by emailing help@kashishai.com or contacting support through the app.
You can withdraw consent you previously gave (for example, during signup) at any time by emailing help@kashishai.com or contacting support through the app; this doesn't affect the lawfulness of anything we did based on your consent before you withdrew it, and may mean we can no longer provide parts of the App that depend on it.
Depending on your location, you may have additional rights under local law, such as the right to object to or restrict certain processing, or to lodge a complaint with a data protection authority.
California residents: you have rights under the CCPA/CPRA, including the right to know what personal information we hold about you, request its deletion, and correct inaccuracies. We do not sell or share personal information for cross-context behavioral advertising.
EEA/UK/Switzerland residents: we process your data based on your consent, the performance of our agreement with you (these Terms), and our legitimate interests in operating and securing the App. You have rights to access, correct, erase, restrict, or port your data, and to object to certain processing, by contacting us as described below.

10. International data transfers

Your information may be processed on servers located outside your country of residence. Where this happens, we take steps to ensure your data continues to receive an appropriate level of protection.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll take reasonable steps to notify you, such as an in-app notice. Continued use of the App after changes take effect means you accept the updated policy.

12. Contact us

For questions, requests, or concerns about this Privacy Policy or your data, you can reach us at:

Kashish support, data requests, and reports: help@kashishai.com
Sign-in, verification, and account access: auth@kashishai.com
Nexor Sparks (company and legal matters): nexor@kashishai.com

You can also contact the Nexor Sparks support team through the app.

Google user data (optional Gmail connector)

If you choose to connect Gmail, Kashish gets read-only access to your email only to answer your own questions about it. We do not sell it, use it for ads, or use it to train generalised AI models. See the Google User Data Policy, the Gmail Access Policy and Data Deletion.

Payment information

When you buy a paid plan we record your order ID, plan, amount, payment status and a payment reference. Your card, UPI and bank details are collected and processed only by our payment partner, Cashfree Payments (an RBI-authorised payment aggregator), under its own privacy notice. We do not store them.

Children and teens

You must be at least 13 to use Kashish. Under the Digital Personal Data Protection Act, 2023, anyone under 18 is a child, so we need the verifiable consent of a parent or guardian before processing a child's personal data. We do not track or profile children or show them behaviour-based advertising. Parents can write to help@kashishai.com to review, correct or delete a child's data.

Your rights and grievances

You may ask to access, correct or erase your data, withdraw consent, or nominate someone to exercise your rights. Write to help@kashishai.com. See also our Grievance Redressal page.

Limited Use disclosure. Kashish's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.