Privacy

The short version

• This site is static. It has no server that receives what you type, no database and no accounts.
• Your records, report and letters are kept in your browser only, on your device.
• No analytics, advertising, social-media widgets, external fonts or other websites’ scripts. No cookies.
• If you choose an online AI, your text goes to that company only after you confirm, and only when you paste it into their site.
• “Delete all my data” (top and bottom of every page) wipes everything this site saved.

What is stored on your device

In your browser’s localStorage (not cookies), so things are there when you come back:

Key	What it holds	When it is written
kyr.sar	Step 1: the details you typed for your request letter	As you type
kyr.records	Step 2: the text of your records	Only if you tick “Keep this text on this device”
kyr.report	Step 2: your report (summary, chronology, points to ask about)	When a report is made or edited
kyr.letter	Step 3: your complaint-letter boxes and letter text	As you type
kyr.settings	Which AI you picked	When you pick one

Only for this browser tab (sessionStorage, gone when you close it): that you agreed to use a given AI, and any names you listed to hide.

This can include health information. Anyone with access to your device and browser profile could read it. Use Delete all my data, or clear your browser’s site data, to remove it.

Your files

Files you add are read inside your browser. Text files are read directly, PDFs are read with PDF.js, and photos and scans are read with Tesseract text recognition. Both are bundled with this site and served from this site, so your files are not uploaded anywhere. The text recognition language file is downloaded from this site the first time it is used; it is not saved to your browser’s database.

If you choose a third-party AI

Choices: Microsoft Copilot, ChatGPT (OpenAI), Gemini (Google), Claude (Anthropic) and Grok (xAI). When you press the button, we show a warning naming the provider. If you confirm, we copy your prompt to your clipboard and open the provider’s ordinary website. We never send anything ourselves. Your text reaches the provider only when you paste it into their site or app and send it. From then on it is handled under that provider’s own terms and privacy policy, and we cannot see, change or delete it. The same applies to a chat question you copy.

The prompt is never put in a web address. If you paste an AI’s answer back into step 2, it stays in your browser. Provider policies, last checked 25 October 2026:

• Microsoft
• OpenAI
• Google
• Anthropic
• xAI

Microsoft Edge note. If you use the Copilot button inside Edge, Copilot may be able to read pages you have open, including this one, depending on your Edge settings. See the warning shown before you continue.

On-device AI (where your browser supports it) runs inside your browser, including the chat. Your browser may download a model from its maker the first time; that download is between your browser and its maker, not this site.

Hosting

The site files are served by a static web host. [TO CONFIRM: host and its logging.] Web hosts normally keep technical logs of requests (for example IP address, time and page requested). Page requests do not include anything you type, because that stays in your browser. [TO CONFIRM: retention period, and that any host analytics are off.]

Your rights

Because what you add is held on your device and not by us, we cannot see it, and cannot access, correct or erase it for you. You can do all of those yourself, including with Delete all my data. [TO CONFIRM by a data protection adviser: whether the operator is a controller for any hosting logs, and the contact and complaints wording.]

Still to be written

• Operator name and contact details. [TO CONFIRM]
• Lawful basis and retention wording for hosting logs. [TO CONFIRM]
• Whether the ICO fee or registration applies. [TO CONFIRM]

See also the terms and “not advice” (draft).