Privacy

tudu is a demo of Kiosk. This page says what it stores and for how long.

What tudu stores

• Your account. Your e-mail address, a hash of your password, your display name and when you signed up.
• Your lists. Each list's title and members, and each to-do's title, due time, whether it is done and which assistant added it. Every member of a list can read it.
• Invites. A hash of each invite code, who made it, when it expires and who used it.

What Kiosk stores for an AI assistant

• The assistant's key. An AI assistant that registers gives us its public key. We store it with the account it acts for, the label you give it, its spending cap and when it was linked. We never receive its private key. An assistant that registers on its own gets an account with no e-mail address.
• Link codes. When you link an assistant to your account, we store a hash of the code, never the code. A code expires 15 minutes after we make it.
• Call counts. We count the calls of each assistant account since its last proof of work, and we record the value of each visit you complete. The call toll reads both.
• Events. We keep each event that we send to your assistant, for example a confirmation, for 24 hours. Then we delete it.

Server logs

Each request writes a log line with its path, its parameters and the IP address it came from. We remove passwords, e-mail addresses, tokens and keys from the parameters before we write them. The server's system journal keeps these lines until it deletes its oldest lines to stay below its size limit.

We do not sell or share what we store. We set one cookie, the session cookie that keeps you signed in and protects our forms.

How long we keep it

We keep everything above that names no other time until we reset this demo. We reset it by hand, with no fixed schedule, and a reset deletes every account and every row named on this page.