# KaiBox Privacy

**Never store (cloud). Never bundle. Never phone home.**

KaiBox is an open-source browser for people who want a clean tool — not a product funnel.

## What “Never store” means

| Promise | Meaning |
|---------|---------|
| **Never store (cloud)** | No upload of history, bookmarks, cookies, passwords, or profiles to SpartData or any server by default. |
| **Never bundle** | Installer installs KaiBox only. No toolbars, no “recommended apps”, no forced default-browser tricks. |
| **Never phone home** | No telemetry, no crash phone-home, no silent analytics SDK in the launcher. |
| **Never lock you in** | No account required to browse. SpartData and Kai Claw are optional. |
| **Search not via us** | Queries go to Google / Bing / DuckDuckGo directly. We do not proxy or log searches. |

## What we keep on purpose (local only)

| Local | Why | How to clear |
|-------|-----|--------------|
| HTTP disk cache | Faster repeat page loads (every serious browser does this) | Clear browsing data / delete User Data |
| Search engine preference | Remembers Google vs Bing vs DDG | Change in new tab / Discover; or clear site data |
| Chromium profile | Tabs, cookies for sites you visit | Delete `%LOCALAPPDATA%\KaiBox\User Data\` |

**Abandoning all local cache would make KaiBox slower, not more private.** Privacy is about *your data not leaving the device*, not about re-downloading every image.

Optional: enable **clear data on exit** locally if you want a stricter session (default: off).

## What stays on your PC

- Chromium profile under `%LOCALAPPDATA%\KaiBox\User Data\`
- App files under `%LOCALAPPDATA%\SpartData\KaiBox\Application\`
- Local policy: `homepage.txt`, `kaibox.policy.json`, `kaibox-hijack-blocklist.json`

## Default search

Default engine: **Google**. Alternatives: Bing, DuckDuckGo. Same set on Discover, new tab, and policy (`kaibox-policy.json` v1.2+).

## Anti-hijack / anti-bundle (local)

KaiBox restores **your** chosen homepage and search, and blocks known hijack domains via a local blocklist. That is protection — not surveillance. The blocklist is a JSON file you can audit and PR.

## Verify downloads

See [download.html](./download.html) and [trust.html](./trust.html) for SHA256 of the Windows installer. Prefer official `spartdata.com` only.

## Optional companions

| Product | Relation |
|---------|----------|
| **Kai Claw** | Separate install. Local Agent engine. KaiBox may detect it; never requires it. |
| **SpartData** | Optional web links (canvas, member center). Not embedded account lock-in. |

## Contact

Issues and privacy reports: GitHub repository for KaiBox / SpartData web `public/prism` assets.