These are the limits of what the apps protect.
Each limit below is one we found in our own checks, or one that comes with any phone or computer.
Android's own backup can copy an app's data.
Android can include an app's private data in your phone's backup to your Google account, and in the copy it makes when you set up a new phone. The app does not make that backup, and we never receive it. It is between you and Google.
We read each package's backup rules on November 12, 2026:
| App | What Android's backup and phone-to-phone copy can take |
|---|---|
| K Scan | Nothing. It keeps all of its data out of both. |
| K Photos | Nothing goes to your Google account. On some makers' phones, a direct copy to a new phone can still include its data. |
| K Docs | Its settings and working files, in both. |
| K Audio | Its settings and some working files, in both. |
The apps are being changed so that every one of them keeps all of its data out of both, as K Scan does. This table will be updated when we have read the new packages.
You can turn the backup off in Android's Settings, under Backup.
Files in shared folders are ordinary files.
Your photos, documents and recordings live in your phone's shared storage. Other apps that you have given storage access to can read them, and your backup app may copy them. The K apps cannot change that.
Files that a K app saves into a shared folder also stay when you uninstall the app. The privacy policy lists each folder.
What you share is out of the app's hands.
When you tap Share, the file goes to the app you chose. What happens next is up to that app. The same is true of text you copy out of K Docs and paste into an AI chat app.
K Docs can hide private details before text leaves. Its detection can miss things, so read the text before you send it.
The store knows what you installed and bought.
Google Play, the App Store and the Microsoft Store know which apps you installed and what you bought. They show us counts of installs and, from people who allow it, anonymous counts of crashes.
Windows does not enforce the promise.
Android refuses every connection from an app that lacks the internet permission. Windows has no such rule for desktop apps. On Windows the promise rests on our code and our checks, and you can watch for yourself with Resource Monitor.
Private mode hides folders. It does not encrypt them.
Private mode in K Photos keeps chosen folders out of view and can sit behind a lock. The photos themselves stay where they were, as ordinary files. A .kept file is the encrypted kind.
On Android, private screens stay out of screenshots. Nothing stops a person from pointing another camera at your screen.
A device that is not locked is open.
The apps protect your files from the network. They do not protect them from a person who holds your phone while it is open, or from other software that has taken over the device.
A lost recovery phrase cannot be replaced.
The key to your .kept files stays with you. If you lose the device that made them and never saved your 24-word recovery phrase, those files cannot be opened by anyone. We cannot help, because we never had the key.
Detection tools can miss things.
The tools that find private details in K Docs and K Scan work from patterns. They can miss a name or a handwritten number. Check the result before you share it.
AI notes and summaries can be wrong. Check them against the recording or the document.
No outside firm has audited the apps.
We review and test the apps ourselves. No outside firm has audited them. The source code is not public, so the checks on this site are ones you run against the finished apps.