Your files are read, changed and stored on your own device.
This page follows a file through a K app and names every other piece of software that takes part.
A file never leaves the device on its way through a K app.
You open a photo, a document, a scan or a recording. The app reads it from your device's storage. Whatever you ask for next happens on the device's own processor: an edit, text recognition, a transcript, an AI tool. The result is saved back to your device's storage.
No step in that path uses a network, so the apps work the same in airplane mode.
This is where each thing happens.
| What happens | Where it happens | What leaves your device |
|---|---|---|
| Opening and showing your files | In the app | Nothing |
| Editing, text recognition, transcription and the AI tools | On your device's processor | Nothing |
| Settings, recent files and working files | In the app's private storage | Nothing from the app. Android's own backup can copy them for some apps. |
| A .kept file | Sealed on your device. The key stays in the device's secure hardware and in your recovery phrase. | Nothing |
| Installing and updating | Your app store | The store knows which apps you installed. |
| Buying | Your app store | The store handles the payment and reports the sale to us, without your card number. |
| An AI pack | Google Play delivers it, the way it delivers the app | Google Play knows you asked for it. |
| Sharing a file | The app you choose to share with | Whatever you choose to share |
| Writing to support | Your own email app | What you write to us |
The store does the connecting for the app.
Three jobs need a network: installing an app, paying for it and fetching a large AI pack. On Android all three belong to the Play Store app. A K app asks the Play Store app, which is already on your phone, and the Play Store app does the network work.
That is how K Photos and K Docs can offer a download and a purchase while holding no internet permission of their own.
The AI models are files on your device.
An AI model is a large file of numbers. The smaller ones ship inside the apps. The larger ones arrive as packs. Either way the model sits in storage, and the app runs it on your processor.
We never receive your files, so we have nothing of yours to train a model on.
Your keys stay with you.
A .kept file is sealed with strong encryption. The key that opens it stays with you: in the secure hardware of the device that made it, and in your 24-word recovery phrase if you have saved it. Pennylamp never sees either.
That has a cost, and it is on the limits page. If you lose the device and never saved the phrase, those files cannot be opened again, by you or by us.