Privacy

Updated November 1, 2026

Karma is made by The Ira Company LLC, a New Jersey company (“we”). Karma runs on your own devices: your iPhone, Mac, Windows PC or Linux computer. We don't run servers that can read your data, we don't sell it, and we don't use it for advertising.

On your devices

Your Pages, conversations, memory, Projects and browser sessions are kept in a database on each device. Sign-ins and keys are kept in the device's secure store: the Keychain on iPhone, and on computers a file that only your user account can read.

When you link devices, Karma keeps your Pages, conversations, memory and settings in sync between them. Agent work in progress, browser sessions and most sign-ins stay on the device that has them.

The relay

Linked devices exchange messages through our relay at relay.thekarmaos.com. Messages are encrypted with a key that only your devices hold, so the relay can't read them. The relay keeps:

• an account ID and the list of your devices, with each device's name, type and public keys
• when each device was last online
• encrypted messages waiting for a device that's offline, for up to 24 hours

Calls and screens shared between your devices may pass through the relay live; they're encrypted and never stored. Our web server keeps standard access logs, which include IP addresses and request times, for 15 days.

AI models

Karma's agents use AI models from the provider you sign in with: OpenAI, when you sign in with ChatGPT, or Anthropic, with your own API key or the Claude Code you install. Your requests and the content an agent needs to answer them, such as web pages, emails or files it reads, go directly from your device to that provider. They never pass through our servers. The provider's terms and privacy policy apply, and your settings with that provider decide whether it may use your content to improve its models.

Google accounts

You can connect a Google account so Karma can work with your email, calendar, contacts and files. Karma asks for:

• Gmail: read and search your email, send email you ask it to send, and change labels.
• Google Calendar: read your calendars, and create, change or delete events you ask it to.
• Google Contacts: search your contacts and the people you've emailed.
• Google Drive: search and read your files. Karma can't change or delete them.
• Your email address, to show which account is connected.

How it's used. Karma uses Google data only to do what you ask, such as summarizing new email, sending a reply you approved or adding an event. Requests go from your device straight to Google.

How it's stored. The Google sign-in is kept in each device's secure store. When you connect on one device, your other devices receive it encrypted to each device's own key, so neither the relay nor anyone else can read it in transit. What Google returns is kept on the device that asked for it. It reaches your other devices only when it becomes part of a Page, conversation or memory, which sync as described above.

Who it's shared with. Only the AI provider you chose, as part of answering your request. We don't receive your Google data. We don't sell it, use it for advertising, or use it to train AI models. Nobody at our company reads it unless you share it with us for support, or the law requires it.

Karma's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. Disconnecting Google in Karma revokes access at Google and removes the sign-in from all your devices. You can also remove Karma's access at myaccount.google.com/permissions.

Other services

When you use them, Karma connects your device directly to Apple Music, GitHub, the websites you or your agents visit, and Apple's speech recognition for dictation. Each service's own privacy policy applies.

No tracking

Karma has no analytics, advertising or tracking, and doesn't send us crash reports or usage data. This website uses no cookies or analytics.

Your choices

You can delete anything in Karma from your devices, unlink a device, or disconnect any account at any time. To have your relay account deleted, or for any question about your data, email support@thekarmaos.com.

Children

Karma isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update this page and the date above.