Privacy policy

Who is responsible

The controller responsible for processing your personal data is Medin Murtezani (sole proprietorship), Rischstrasse 3, 6030 Ebikon, Switzerland. Email: team.swissai@gmail.com, contact form: Send a message.

Representative in the EU (Art. 27 GDPR): Liridon Selimi, Friedrich-Naumann-Strasse 39, 47055 Duisburg, Germany. People in the EU and EEA and the data protection supervisory authorities there can also contact the representative on any data protection matter.

Applicable law

We process personal data under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies because we also offer our service to people in the EU, it applies in addition. The legal bases under Art. 6 GDPR mentioned below refer to these cases.

In short

• Without an account: no cookies (except a guest ID once you pick in “Green or Red?” or start a test drive) and no third-party tracking.
• We do not store IP addresses. For limits and simple usage statistics we use hash values: the daily counters can no longer be linked to anyone after two days at the latest; the counter for the free weekly check lasts 7 days.
• For the one-time guest test drive such a hash counter lasts 30 days.
• Account, portfolio, pre-registrations, feedback and contact requests are optional.
• For AI features, your input is sent to Anthropic (USA).
• Screenshots for the Reality Check are processed in memory only and never stored.
• The portfolio is read-only: public addresses, CSV holdings and your own positions, stored encrypted and visible only to you – never seed phrases or keys.

Visiting the website (hosting)

The website runs on Vercel Inc. (USA); the server functions run in Frankfurt am Main (Germany). When you visit, Vercel processes technically necessary data such as IP address, time, page requested and browser details to deliver the page and protect it against attacks. Legal basis under the GDPR: legitimate interest (Art. 6(1)(f)).

Accounts, weekly picks, portfolio sources (encrypted), pre-registrations, feedback, contact requests and the anonymous counters are stored in a Postgres database at Neon (Databricks Inc.), region Frankfurt am Main. Vercel and Neon process the data only on our behalf (as processors).

If you open an address without a language (for example just the home page), the server reads your browser's language setting (Accept-Language) and redirects you to German, English, Spanish or Korean. Nothing is stored and there is no language cookie. Your choice lives only in the address (/de, /en, /es, /ko). If none of these languages matches your browser, the server uses the country that our hosting provider Vercel derives from your IP address (for example Switzerland → German, Spain → Spanish); the country isn't stored for this either.

Anonymous daily counters and usage statistics

To keep the AI affordable, Kairos limits the number of AI requests per visitor and day. To do this, the server creates a hash (SHA-256) from your IP address, your browser identifier and a random daily value. Only this hash, the date, the type of counter and the count are stored – never the IP address itself.

The random daily value is deleted after two days at most. From then on, a hash can no longer be linked to anyone. We delete the counters themselves after 90 days. The legal basis is our legitimate interest in preventing abuse and controlling costs (Art. 6(1)(f) GDPR).

To understand which pages and features are used, Kairos records simple events: page view (path only, without query parameters), coin page view, Reality Check (run, viewed, shared), AI request, limit reached, sharing, subscription page view, joining the waitlist (with the chosen plan) and completing account setup (not linked to the account). Each event is stored only with the date and the daily hash described above – without cookies, third-party services or IP address. Visitors therefore cannot be tracked across several days. For accounts, we also count in aggregate how many were signed in again 7 or 28 days after signing up; for this we only use the session times that are stored anyway and do not analyse individual accounts.

If “Do Not Track” or “Global Privacy Control” is enabled in your browser, Kairos sends no events from the browser. Events are deleted after 12 months. The legal basis is our legitimate interest in a user-friendly, economically viable service (Art. 6(1)(f) GDPR).

Protection against abuse (rate limits)

To protect sign-ins and posts against automated abuse, we count requests per time window. For this we store an HMAC hash of the IP address or account and the function – never the IP address itself – together with the count and the end of the window. We delete expired counters after one day at the latest. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

For the free Reality Check (once a week) we count in the same way: the HMAC hash is formed from the IP address and browser identifier and, if you are signed in, additionally from your account. This counter runs for 7 days and is then deleted.

For test drives we count start attempts per hour and, without an account, whether a guest test drive has already been started from this connection in the last 30 days – again only as an HMAC hash of the IP address; these counters last 1 hour and 30 days respectively.

Account (optional)

You only need an account for the community, the portfolio and a plan. We then store: your email address, your username, when signing in with Google also the name and profile picture from your Google account, your confirmation that you are at least 18, the times you accepted the terms and conditions and community rules, your language, whether your profile is public, and when the account was created. The legal basis is your use of the community under our terms and conditions (Art. 6(1)(b) GDPR).

Your username is public (leaderboard, forum). Your profile with picks and posts is public; you can make it private in the settings at any time. Nobody but us sees your email address.

In the settings you can download all data of your account as a JSON file and delete your account at any time. Deleting permanently removes the account, sessions, sign-ins and all community data (picks, posts, comments, likes). Moderation logs keep only an anonymous identifier. We delete accounts without a sign-in for 24 months after notifying you by email.

Session cookie after sign-in

After you sign in, Kairos sets a session cookie (kairos.session_token, httpOnly, HTTPS-only in production, SameSite=Lax). It keeps you signed in for up to 30 days and is deleted when you sign out. While signing in with Google, a signed cookie (kairos.state) is added for at most 5 minutes to prevent forged sign-ins. When you request a sign-in link by email, the cookie kairos.handoff is added for at most 10 minutes: it lets the device where you requested the link sign in too when you open the link on another device and enter the number shown there. These cookies are technically required for the sign-in you request (Section 25(2) No. 2 TDDDG).

For a session we store only an identifier, creation time and expiry – no IP address and no browser identifier. If you are not signed in, you get no cookies – except the guest ID with your first pick in “Green or Red?” or when you start a test drive (see below).

Sign-in with Google

If you choose “Sign in with Google”, Kairos sends you to Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). Google learns that you are signing in to Kairos. We receive your email address, your name, your profile picture and a Google identifier from Google – nothing else. The legal basis is Art. 6(1)(b) GDPR.

Google LLC is certified under the Data Privacy Framework; we rely on this for transfers to the USA.

Sign-in links by email (Resend)

Instead of Google you can sign in with a link by email – no password. We use the email service Resend (USA) as a processor to send it. Your email address and the content of the email with the link are transmitted. The link is valid for 10 minutes and only once; we store it only as a hash. So that the device where you requested the link can be signed in too, we store a random identifier, a two-digit number and your email address only as an unreadable check value (HMAC) for the life of the link – no IP address, no device. This is deleted at the latest one day after expiry.

According to Resend, it is certified under the Data Privacy Framework; we rely on this for transfers to the USA.

Community: weekly pick and forum

When you make picks or write, we store with your account: your pick per round and the points, your posts (type, text, coin, for forecasts the price target and starting price, for gains/losses the percentage and period), comments, likes and your reports. We show picks on the leaderboard with your username and posts and comments publicly. After picks close, we create a SHA-256 hash of all picks of the round (account identifier and coin) and anchor it with OpenTimestamps – only the hash is transmitted. The legal basis is your use of the community under our terms and conditions (Art. 6(1)(b) GDPR).

If you delete your account, we delete your picks, posts (including other people's comments under them), comments, likes and reports. Hashes of earlier rounds that have already been anchored remain; without the deleted data nothing can be read from them.

Reality Check (texts and screenshots)

For a Reality Check you send a text, a screenshot or a purchase idea. A screenshot is already reduced in your browser (longest side at most 1,568 pixels, JPEG). The server forwards the text and image to Anthropic so the AI can extract the claims they contain – rephrased neutrally and without names, usernames or descriptions of people.

• We process images and original texts only in memory. We neither store nor log them.
• Only the result is stored: the rephrased claims, the calculated values, time, prices, the language of the check and – if provided – the amount. This is what makes the share link work. The result contains no information about you.
• If someone opens a shared check in another language, Kairos may generate the AI summary in that language once. Only the calculated results are sent to Anthropic for this, not your original input.
• To avoid calculating identical requests twice, we also store a checksum (HMAC) of the input. The input cannot be recovered from it.
• Free checks are counted using a hash, as described under “Protection against abuse”.
• Please do not upload screenshots containing personal data, such as names, profile pictures or account numbers.

We automatically delete check results after 24 months.

AI features (Anthropic)

When you use an AI analysis, the market briefing or the chat, the server sends your input – such as your chat message or the selected coin – together with public market data to Anthropic PBC (USA) to generate the answer. Anthropic processes this data as a processor.

Kairos does not store your chat messages. Finished coin analyses and briefings contain no personal data and are cached for 30 minutes. They are written once in German; for other languages the same AI provider (Anthropic) translates the finished text. For cost control, we log only the model, feature and number of tokens per request. Please do not enter personal data in the chat.

Transfers to the USA are covered by the Standard Contractual Clauses in Anthropic's Data Processing Addendum.

Portfolio (optional, account only)

In the portfolio you can add public wallet addresses, CSV exports from your exchanges and your own positions – read-only. Kairos never asks for seed phrases, private keys or exchange API keys and does not accept them. CSV files are read by your browser; only the holdings calculated from them are sent to Kairos.

We store names, addresses and holdings encrypted (AES-256-GCM; the key exists only on the server) and show them only to you. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR). The data is included in the JSON export and is deleted when you remove a source or delete your account.

To get the holdings, our server queries the addresses at public blockchain nodes: mempool.space or blockstream.info (Bitcoin), dRPC (Ethereum, Polygon), Offchain Labs (Arbitrum), Base, BNB Chain and the Solana Foundation – or at the providers the operator has set up instead. These services see the address and our server's IP address, not yours. Results are kept in memory for 5 minutes. Public addresses are visible to everyone on the blockchain; together with your account, however, they can be linked to a person – hence the encryption.

For the analysis, Kairos uses existing price data (Binance, CoinGecko). You start the in-depth AI analysis (from Kairos Pro) yourself with a button; only rounded figures (total value, shares, risk measure, correlation, scenario) and the shares of your largest positions in percent with the coin ticker are sent to Anthropic's AI – no addresses, no names of your sources, no amounts and no values per position.

Game “Green or Red?”

When you pick in “Green or Red?”, we store for each day your direction (green or red), whether you use the joker, the time of the pick and of any change, and the result and points. From this we calculate streak, streak shield, hit streak, points, rank, badges and awards (weekly crown, top 10, monthly champion). Legal basis under the GDPR: use of the game under our terms and conditions (Art. 6(1)(b)).

Without an account you play as a guest: with your first pick we set the cookie kairos.gid with a random ID (httpOnly, 400 days) so that your picks and your streak stay assigned to you. It contains no information about you and is not passed on. If you sign in, we assign the guest picks to your account once and delete the cookie. We delete guest data without a new pick after 400 days. To prevent abuse, we count picks per minute and new guest IDs per day using an HMAC hash of the IP address; the counter expires after 24 hours (see “Protection against abuse”).

Only accounts with a username are public: on the leaderboard, in the hall of fame and as badges next to the name (rank, crown). Guests never appear publicly. After the window closes we create a SHA-256 hash of all picks for a candle, and for each week and month a hash of the final ranking, and anchor it via OpenTimestamps – only the hash is transmitted. If you delete your account, we delete your picks, values and awards; in the hall of fame your place remains without a name as “deleted account”.

Test drive

When you start a test drive, we store the coin, amount and currency, duration, start time, the start price of the coin and of Bitcoin, the exchange rate at the start, your gut feeling (higher or lower, optional), an optional stop, the daily closing prices until the end and the result. We also store, once, the rear-view mirror and crash test (calculated from public Binance prices), whether you have seen the report card, your language, and whether and which emails were sent about it. The purpose is the simulation itself: showing standing, course and report card. Legal basis under the GDPR: use of the test drive under our Terms (Art. 6(1)(b)).

Without an account you start as a guest: we set the cookie kairos.gid with a random ID (httpOnly, 400 days) so your test drive stays assigned to you. If you sign in, we assign your guest test drives to your account once; they count there in the month they started. To make sure the free guest test drive is used only once, we store an HMAC hash of the IP address for 30 days; against abuse we count start attempts per hour (also as an HMAC hash, 1 hour). We never store the IP address itself.

Single test drives can only be reached via their link and are not listed anywhere publicly. Anyone opening the link without your account or guest ID sees only the coin, duration and percentages – never the amount, prices or your name; the same applies to the preview and story image. The leaderboard only shows accounts with a username and a public profile, and only with their score, number of drives, number “better than Bitcoin” and rank (days with a test drive) – never amounts, prices, coins or links to single test drives. Scored are the scored drives: the first test drive started from the account in each calendar month; drives started without an account don't count. Your public profile shows the same information (rank, place, score). If you set your profile to private, you no longer appear there. Legal basis for the leaderboard: use under our Terms (Art. 6(1)(b) GDPR). For the community rate of gut feelings we only count how many guesses were right, without any link to people.

Emails are only sent with an account and only if the box “Progress, stop and report card by email” was ticked at the start: for 30 and 90 days a progress update on day 7, for 90 days then every 30 days, once if your stop would have triggered, and the report card on the last day. Sent via Resend (see “Sign-in links by email”). Every email contains a link to unsubscribe from further emails about this test drive.

We delete test drives including their daily closes 24 months after they end, and immediately if you delete your account. The data export of your account includes your test drives.

Plans and payment (Stripe / Link)

If you take out a plan, we redirect you to Stripe's payment page. Purchase and payment are handled by Link (Sold through Link, LLC, a Stripe company) as merchant; payments are processed by Stripe companies, in Europe Stripe Payments Europe, Limited (Ireland). For the purchase, payment, receipts and invoices, taxes, fraud checks, chargebacks and payment support, Stripe and Link process your data – such as name, e-mail address, billing address, payment details, country and device data – as independent controllers. Details are in the privacy policies of Stripe and Link; Stripe also transfers data to the USA.

We send Stripe your e-mail address, your account ID, the chosen plan, the language and the time of your consent to the immediate start (proof for the right of withdrawal). You enter payment details only with Stripe; Kairos neither sees nor stores them.

On your account we store only the plan, its status, the end of the billing period, currency and amount, and the Stripe customer and subscription IDs. For the AI allowance we count, per account, the estimated AI costs of the month and the usage of the day. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and, for records, statutory retention obligations (Art. 6(1)(c) GDPR).

We keep records for as long as statutory retention periods require.

Country for price display

So that the plans page shows prices in the right currency (CHF, EUR or USD) with the correct tax note, the server reads, on each request, the country that our hosting provider Vercel derives from the IP address (header x-vercel-ip-country). The country is not stored, not linked to your account, and no cookie is used. The legal basis is our legitimate interest in correct price information (Art. 6(1)(f) GDPR).

Cancellation and withdrawal

If you cancel or withdraw via “Cancel contracts here” or “Withdraw from contract”, we process the details you enter there: name, email address, the contract and – optionally – a customer or subscription number; for a cancellation also its type, the requested date and, for an extraordinary cancellation, the reason. We also store the date and time of receipt and, if we can match the notice to an account, its identifier. We send the confirmation to the address you give via our email service Resend.

The purpose is to process your notice (ending the plan at Stripe, any refund) and the legally required proof of receipt. The legal basis is Art. 6(1)(b) and (c) GDPR in conjunction with § 312k and § 356a of the German Civil Code (BGB). To prevent abuse, we count notices per connection using an HMAC hash (see “Protection against abuse”).

We keep the proof for three years from the end of the year in which the notice was received (regular limitation period) – even if you delete your account earlier. After that we delete it.

Alerts and portfolio reports by email

With a plan you can set price and risk alerts and turn on a portfolio report by email. For each alert we store the coin, the type, your threshold and when it last triggered; triggered alerts are kept for 90 days. For the report we only store the chosen frequency. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

We send the emails via Resend to your account's address – without tracking pixels. The report only contains figures from your own portfolio; with Max a short AI summary is added, for which only rounded figures go to Anthropic. You delete alerts and turn off the report on the “Alerts & reports” page; everything is deleted together with your account.

Waitlist and pre-registration

Until the plans launched (October 2026), you could join a waitlist on the “Kairos Pro” page. For this we stored your email address, the plan you chose (Plus, Pro or Max, if chosen) and the time of your consent – solely to inform you once when the plans launch. No newsletter, no sharing with third parties. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

You can also pre-register for the community chat (launching 2027) on the community page. For this we store your email address and the time of your consent – only to inform you once about the launch. Withdrawal and deletion as below.

To withdraw or request deletion, simply email team.swissai@gmail.com. Without withdrawal, we delete the entry no later than 12 months after you signed up.

Until October 2026, the page showed one of two test prices, calculated from a hash of your IP address (without storing it). Today everyone sees the same prices; for a sign-up without a chosen plan we stored only the note “plans”.

Feedback

Via “Feedback” you can report an idea, an improvement or a bug without an account. We store the type, text, the page you were on and the language – only to improve Kairos (legitimate interest, Art. 6(1)(f) GDPR). We store your email address only if you enter it and consent to us replying about this feedback (Art. 6(1)(a) GDPR); you can withdraw your consent at any time.

Against spam we count feedback per hour using an HMAC hash of the IP address (see “Protection against abuse”). We delete feedback and email addresses after 12 months at the latest.

Contact form

If you write to us via the contact form, we store your email address, your name (if given), your message and the language in order to reply. Legal basis under the GDPR: legitimate interest in answering your request, or contract if it concerns an account or plan (Art. 6(1)(f) or (b)). To prevent spam, we count messages per hour using an HMAC hash of the IP address (see “Protection against abuse”). We delete the request after 12 months at the latest unless we are required to keep it longer.

News

The server loads the headlines on /news and the home page from the public RSS feeds of CoinDesk, Cointelegraph and Decrypt; your browser does not connect to the sources for this. For the classification (tendency, importance, affected coins, translation of title and short sentence), only the headlines and the short sentence from the feed go to Anthropic's AI – no information about you. Only the classification per article is stored, for at most 30 days. If you click a headline, the source's page opens with its own privacy policy.

Direct connections to third parties

On coin pages, your browser connects directly to Binance's public price service (WebSocket) for the live price. Binance technically receives your IP address in the process. We load coin logos through our own server, so your browser does not connect to CoinGecko for them. Links to news and data sources only open third-party sites when you click them.

Fonts and Bitcoin timestamps

For preview images in Korean, the server loads the required characters from Google Fonts. Only a sorted set of characters without their order is transmitted – no information about you and no readable text. Your browser does not connect to Google for this.

For the track record, Kairos submits the SHA-256 hash of the stored scores to public OpenTimestamps servers every day. Only this hash is transmitted; it contains no personal data.

Storage in your browser

Kairos stores a few settings in your browser's local storage (localStorage): your colour scheme (kairos-theme), your watchlist (kairos-watchlist), the portfolio currency (kairos.portfolio.currency) and whether you closed the cookie notice (kairos-cookie-note). This data stays on your device and is not sent to us. It is necessary for the function you request (§ 25(2) no. 2 TDDDG, Art. 45c Swiss Telecommunications Act). You can delete it at any time in your browser settings. Overview: Cookies.

Recipients and transfers abroad

These service providers receive personal data to the extent necessary for the respective function:

Under Swiss law, the EU – and therefore Germany and Ireland – is considered to provide adequate protection. For the USA we rely on the Data Privacy Framework (for Switzerland, the Swiss-U.S. Data Privacy Framework) where the recipient is certified, otherwise on Standard Contractual Clauses. You can check whether a US provider is certified in the register at dataprivacyframework.gov.

Binance and the blockchain nodes receive no data from your account: Binance technically only receives your IP address when your browser loads the live price on a coin page; the nodes only receive the address queried and our server's IP address.

Data security

We protect your data with encrypted transmission (HTTPS), encrypted storage of portfolio data (AES-256-GCM), hash values instead of IP addresses, access restrictions for internal administration and rate limits against abuse.

No automated individual decisions

We do not make decisions with legal or similarly significant effects based solely on automated processing. AI texts are information, not decisions about you.

Your rights

Under the FADP you have the right to access, rectification and erasure and to receive or transfer your data, and you can object to processing. Under the GDPR you additionally have the right to restriction of processing, to data portability, to object to processing based on legitimate interests and to withdraw consent at any time with effect for the future.

How: email team.swissai@gmail.com or use the contact form. With an account you can export and delete your data directly in the settings. As the daily counters are anonymised, we generally cannot attribute them to you (Art. 11 GDPR).

From the EU or EEA you can also send your request by post to our representative in the EU: Liridon Selimi, Friedrich-Naumann-Strasse 39, 47055 Duisburg, Germany. We answer it like a request sent to us.

Complaints: in Switzerland to the Federal Data Protection and Information Commissioner (FDPIC), in the EU to the data protection supervisory authority of your country of residence.

Deleted data may remain in our database backups (Neon) for up to 7 days; after that it is overwritten automatically. We only restore it if a technical emergency requires it.

Changes

We update this policy when features change. The current version on this page applies.