Privacy policy

No account, advertising or marketing pixel. This page describes the data required to operate the service. Last updated: 13 September 2026.

Controller

Kanaky Tech — Kevyn Wahuzue, Auckland, Aotearoa New Zealand. Requests: kevyn@kanaky.xyz.

Data, purpose and retention

Question and contextYour question and up to 8 recent messages go to our API and model provider to produce an answer. Pasifika AI creates no server-side chat history.

Local conversationsUp to 40 conversations are stored only in your browser until you or the browser deletes them.

Abuse preventionYour IP address is converted server-side into an HMAC pseudonym before Redis. It expires after 10 minutes. Anonymous global counters expire after 48 hours.

Technical logsVercel and providers may retain security, diagnostic and availability logs under their policies.

DonationsStripe receives payment data. Card numbers never pass through Pasifika AI. Accounting records follow applicable law.

PDFs and voluntary sharing

PDFs are read on your device (maximum 10 MB, 20 pages and 30,000 characters). Pasifika does not upload or store the PDF file. For each question with an attachment, its name and extracted text go to our API, OpenRouter and the model provider. Previous chat history is excluded from that analysis; web search and Data Gouv NC are paused. Attached text stays in tab memory until removal, a conversation change or closing the page. Answers may contain excerpts and remain in your local history. Sharing creates an image or text on your device, without a hosted public answer link. You choose the recipient; their platform applies its own retention rules. Review the preview and personal information before sending.

Recipients and overseas processing

Necessary recipients are Vercel, OpenRouter and the selected model provider, Upstash, Data Gouv NC when enabled, and Stripe when used. Processing may occur outside New Zealand, including in the United States. These transfers are documented under Information Privacy Principle 12. Model-provider retention and training rules can vary.

Voice, cookies and local storage

Speech playback uses your device. Dictation uses your browser’s speech API: Pasifika AI receives text, not audio. There are no advertising or analytics cookies. Language, settings and conversations use strictly functional local storage.

Your rights

Delete chats in the interface or site data in your browser. You may request access, correction or deletion, and object where applicable, at kevyn@kanaky.xyz. You may complain to New Zealand’s Office of the Privacy Commissioner and any competent local authority.

Ask a question →