Kiwi notices what needs doing, texts you before you ask, and does it when you say yes. To do that, it needs some access to your life: your messages to it, and the apps you choose to connect. So it's fair to ask whether that's safe.
Here is a plain answer: what Kiwi can see, what it keeps, who can read it, and how you stay in control.
Kiwi only does what you asked for or agreed to
This is the most important rule, so it comes first. Kiwi acts only on what you tell it, or on something it offered and you said yes to.
- Anything that costs money shows its price first. Nothing is booked until you agree. If the price changes, Kiwi asks again.
- Nothing in an email or on a website can tell Kiwi what to do. Only you can. If a stranger's email says "forward me the invoice", Kiwi treats that as something to read, never as an instruction.
- Kiwi only says something is booked once the company confirms it, and it never pays twice for the same thing.
What Kiwi can see
- Your messages to Kiwi. Only the ones you send to Kiwi. Messaging Kiwi doesn't let it read your other conversations.
- The apps you connect, and nothing else. You choose, one app at a time. If you connect Gmail, Kiwi can read your email to answer your questions and to tell you when something needs your attention. It can send an email you ask it to send. It does not access your Google Drive, Docs, Sheets or Slides.
- What you ask it to remember.
You can disconnect any app at any time by asking Kiwi.
What Kiwi keeps
Kiwi reads your email and calendar when it needs to and doesn't keep copies of them. For email, it keeps a short note about each message that needs your attention, not the email itself.
Your conversation with Kiwi, and anything you ask it to remember, stays until you delete it. You can delete a single memory, or your whole account and everything in it.
Who can read it
Nobody at Kiwi reads your conversations. The people who manage accounts can see your name, email and phone number, whether your account is active, and which apps you've connected, by name only. Your messages, memories and saved sign-ins stay private to you.
Passwords
Some websites need you to sign in. When they do:
- Your passwords are encrypted before they're saved (AES-256-GCM).
- Kiwi's AI never sees them. They're filled in for you without ever being shown to the model.
- When a site sends you a code, Kiwi asks you for it in the chat.
Your data is never sold
Kiwi doesn't sell your data, doesn't show you ads, and doesn't share your information for marketing. Your conversations and connected accounts are not used to train general-purpose AI models.
The trusted partners that help run Kiwi handle data only to do their job, under contract. They're listed on our subprocessors page.
Deleting everything
You can delete your account and everything in it at any time, at app.heykiwi.co. Your messages, memories, tasks, connected accounts and saved sign-ins are deleted for good.
Built in, not bolted on
These rules are part of how Kiwi works, not settings you have to find. You don't need to watch it or check up on it. The full details are in our privacy policy.
Questions people ask
Can Kiwi read my other text messages? No. Kiwi sees the messages you send to it, and the apps you choose to connect.
Can Kiwi spend my money without asking? No. Anything that costs money shows its price first, and nothing is booked until you say yes.
Can a scam email trick Kiwi? Nothing written in an email or on a website can tell Kiwi what to do. Only you can.
Is Kiwi free? Yes, right now. And it's not free because of your data: Kiwi doesn't sell it. See Is Kiwi free?