Loading…
Loading…
Last updated: October 6, 2026
This Privacy Policy explains what personal information Kachy collects, how we use and share it, and the rights you can exercise.
Kachy is operated by SYZYGY LLC, a Wyoming limited liability company at 30 N Gould St Ste R, Sheridan, WY 82801, United States ("Kachy", "we", "us", or "our"). This Privacy Policy explains how we collect, use, and share personal information when you use Kachy's websites, applications, shopping services, APIs, MCP server, and related support and communications (the "Service").
Where data protection law uses the term "controller", SYZYGY LLC is the controller of the personal information processed for the purposes in this policy.
This policy does not govern how independent third parties, including connected AI assistants, merchants, payment providers, and external wallet services, process information for their own purposes. Their own privacy policies apply to that. This policy explains our practices. It does not replace consent where the law requires consent.
We collect the following types of information:
We also receive information from the providers and partners that help run the Service: connected apps acting within the permissions you approved, payment, wallet, and identity-verification providers, merchants and supply and fulfillment partners, and shipping and tracking providers. This can include payment confirmations, verification results, order updates, and shipment status.
Please do not put sensitive personal information in shopping requests or support messages unless the service you ask for needs it, and never send passwords, wallet recovery phrases, private keys, or full card numbers that way.
We use information to:
If we plan to use information for a materially different purpose, we will give any additional notice and get any consent the law requires.
Where the law requires a legal basis for processing, we rely on these, as appropriate:
Some information is needed to provide a feature or complete an order. Without it, we may not be able to provide that feature or fulfill that order.
We share information with:
We may also share information at your direction or with your consent.
These are the providers the Service sends information to, and what each one receives. We add to this list in the same change that adds an integration.
A provider may act on our behalf for some activities and independently for others. Where it acts independently, its own privacy policy applies.
We do not sell your personal information.
When you create a web request, you can choose whether to share an anonymous summary on Discover. This choice is enabled by default and can be turned off before submission. Requests received through MCP or an API are shared only when that integration explicitly asks us to share them.
Before a request is published, Kachy checks the summary for contact details, links, wallet addresses, address expressions, account names, and prohibited or sensitive products. Product size and approved conditions may be shown with the anonymous summary. Your identity and delivery destination are not included. A request that does not pass this check remains private and can still be processed by Kachy.
These checks reduce the risk of publishing personal or sensitive information, but they cannot catch every identifying detail. Even without your name, an unusual combination of details may let someone recognize a request, so avoid including personal information in content you share. Public summaries may be viewed, copied, or redistributed by others.
You can withdraw a shared request. Withdrawal removes it from Live Requests and from other users' saved requests in Kachy. It does not necessarily remove copies, screenshots, or cached versions held outside Kachy's control. Kachy may retain the underlying private request as needed to provide the Service and meet legal obligations.
You can connect an AI assistant or another app (a "connected app") to kachy through our MCP server at api.kachy.app/mcp. Searching for products works without signing in, and a search without sign-in can still generate the technical and usage information described in this policy. To read or act on your account, the connected app sends you to a kachy page where you sign in and approve the connection. That page lists the permissions the connection will get, and approving grants exactly those. An app gets all four below unless it asks for fewer.
What a tool returns, such as offers, order status, and tracking, goes to the connected app you chose. From there, the app's provider handles it under its own terms and privacy policy, and kachy does not control it. The tools do not return your delivery address or card number. A card receipt link opens our payment processor's receipt page, which shows the card brand and the last four digits. Request text and other content an app can read may include personal information you wrote yourself, so consider what you put in your requests.
A connected app receives an access token that expires after one hour and a refresh token that expires after 30 days. Each time the app uses its refresh token, it receives a new one, so an app you keep using stays connected until you disconnect it.
You can disconnect an app at any time in your kachy profile. It loses access immediately, including through tokens it already holds. Removing kachy inside the app may not revoke its access, so disconnect it in your profile to be sure. Orders you already placed stay in your kachy account. Disconnecting does not delete what the app already received, so ask its provider about those copies.
For each tool call, we record the tool name, whether it succeeded, the kind of error if it failed, how long it took, your account if you were signed in, and one-way hashes of your network address, the connected app, and the request. These call records do not include what you or the app asked or what the tool returned, and we delete them after 90 days. Hashing does not necessarily make information anonymous, so we treat these records as personal information where they can be linked to a person. Hunts, orders, and problem reports made through a connected app are kept with the hunt or order, as they would be on the web.
If you ask a connected app to email you about a hunt's results, we store your email address and language with that hunt and send you a verification email. Until the address is verified, we send it only verification emails. Every email about the hunt after that has an unsubscribe link. We keep the address with the hunt record, and you can ask us to delete it at privacy@kachy.app.
Kachy uses AI processing to interpret your requests and preferences and to help find relevant offers. Request text and saved preferences are sent to the providers listed above for that purpose. What you send through a connected AI assistant is also subject to that assistant's provider.
Personalized results rely partly on preferences inferred from your activity, and those inferences can be wrong. You can ask us to correct or clear your taste memory at privacy@kachy.app.
If you use a feature that transacts on a public blockchain, information such as wallet addresses, amounts, timestamps, and transaction references may become public. Others can copy and analyze those records, and a wallet address may be linked to you through information available elsewhere. Kachy generally cannot change or delete records already confirmed on a public blockchain, and deleting your Kachy account does not delete them.
We use cookies and similar technologies to keep you signed in, remember your preferences, measure usage, and improve the Service. You can control cookies through your browser settings, though some features may not work without them, and browser controls do not necessarily cover every form of analytics. Where the law requires consent for a particular use of cookies or similar technologies, we will ask for it.
For Live Requests analytics, we record the public request identifier, source, placement, and a broad age range. We do not send the request text, user identifier, size, country, or budget to our product analytics provider. This limit applies to Live Requests analytics, not to all information processed elsewhere in the Service.
We keep information for as long as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information, its sensitivity, and the purpose for which it is held. In particular:
Deleting an account does not always mean every related record is deleted at once. We may keep information where the law requires or allows it, including for open transactions and legal claims. Copies may remain in backups until they are deleted or overwritten in the ordinary course, and they stay protected while they do.
We use technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a personal information breach occurs, we will notify affected people and authorities where the law requires. If you think someone has accessed your account without permission, contact support@kachy.app.
Kachy is operated by a United States company. Your information may be processed and stored in the United States and in other countries where our providers operate, whose privacy laws may differ from those where you live.
Where the law requires safeguards for international transfers, we use a legally permitted transfer mechanism and any additional measures required. You can ask privacy@kachy.app about the safeguards that apply to your information.
In kachy, you can:
Deleting your account or clearing your taste memory is handled by us on request rather than by a button in the app today. Write to privacy@kachy.app and we will do it.
Unsubscribing from optional notifications does not stop necessary messages about your account, transactions, security, or privacy requests.
Depending on where you live and the law that applies, you may have the right to:
These rights are subject to legal conditions and exceptions, and listing them does not mean Kachy does every kind of processing above. We will not unlawfully discriminate against you for using them.
To exercise your rights, email privacy@kachy.app, ideally from the email address on your account. We may ask for information reasonably needed to verify your identity, confirm an authorized agent's authority, or understand the request. Please do not send identity documents unless we ask for them through an appropriate process. Where the law allows, an authorized agent may make a request for you.
We will respond within the time the law requires. If we cannot fulfill a request in whole or in part, we will explain why where the law requires or allows. Where you have a right to appeal, reply to our response or email privacy@kachy.app saying that you wish to appeal.
The Service is intended for people aged 18 or older. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact privacy@kachy.app. We will investigate and take appropriate action, including deletion where required.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate or required, provide additional notice.
If a change requires your consent, we will get it before doing the processing that needs it. Updating this policy does not by itself give that consent.
For help with an order or your account, use Support in your kachy account, or email support@kachy.app.
Questions about this Privacy Policy or your information? Contact us at privacy@kachy.app.
SYZYGY LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.
See also our Terms of Service.