Karigar

Privacy

What we send, and what we store

Karigar is a hosted service. Your messages are sent to a server we operate, and your conversations are stored there. This page sets out exactly what that involves, in plain terms.

Where Hix runs

Hix runs on the Karigar server — a Mac mini we operate — and not on your device. When you send a message, the app sends it over an encrypted HTTPS connection to api.sutrar.com, Hix generates the reply there, and the text streams back to you.

Your messages are not sent to OpenAI, Google, Anthropic or any other AI provider. Hix is our own model, running on our own hardware.

What is stored on the server

  • ConversationsThe messages you send and the replies Hix writes, together with the workbenches you file them under. Stored per account and encrypted at rest.
  • Your accountYour email address, when you signed in, and which devices you signed in from.
  • Usage logsOne record per request: the time, which endpoint was called, how long it took, how many tokens were used, and any error. Not the content of your messages.

Usage logs exist so we can tell whether the service is working and how much load it is under. They are not used for advertising, and we do not sell them.

Encryption, and its limits

Conversations travel over HTTPS and are encrypted at rest on the server. The encryption key is held on the Karigar server itself.

This is not end-to-end encryption, and we will not describe it as such. The server has to read a conversation in the clear in order to build the next prompt for Hix, which means we are technically able to read it. Treat Karigar the way you would treat any hosted service: it is not the place for material you cannot share with its operator.

What is not sent: your preferences

Your interface preferences — theme, response settings and similar — are kept in an encrypted store in your own Application Support folder and are not sent anywhere. They are per-device settings rather than content.

Karigar's local services accept connections from your Mac alone, not from other devices on your network.

Deleting your conversations

Deleting a conversation in the app deletes it on the server too, not just on the device you deleted it from. If you want your whole account and everything in it removed, ask us and we will delete it.

When Karigar uses the network

Karigar is online whenever it is open. Specifically:

Every message

Sent to the Karigar server to generate a reply, and your conversation is saved back to it.

Signing in

Your email address is sent so we can post you a code, and the app checks your account status when it opens.

A regular status check

While the app is open it checks every so often that the server is reachable, so it can tell you when it is not.

Downloading the app

You download Karigar from this website. As with any download, the server sees your IP address.

There is no third-party analytics, no advertising network and no crash reporting in the app.

What we do not claim

Karigar is a small private beta run on a single machine. We are not claiming the security posture of a large hosted provider, and we are not claiming that your conversations are invisible to us — they are not. What we can say is what is on this page: where your data goes, what is kept, and who operates it.