Privacy Policy

This page covers the Kodros website, the Skills purchase, and how your server and our apps handle data.

Last updated:

1. Scope

This policy covers the Skills pack pages on meshvault.ai, Stripe checkout, email delivery and purchase support, run by thefiredev-cloud. It does not describe the native Kodros iPhone app, which is available as a public TestFlight beta, has no App Store listing or release date, and is not part of this purchase. It also does not cover a contracted Kodros install.

Kodros for iPhone and Omarchy Deck have their own pages. Kodros for Android, Shellboard, AmpHours, DrawYears, Priorly, Protocol Guide and JudgeFinder are below.

2. Information involved

Information you send to Kodros

Your email and message, and details you give us to find a purchase, deliver the pack or handle a refund.

Checkout

Stripe hosts checkout and processes payment. Stripe may collect your name, email, billing details, payment method, amount and transaction details. We get what we need to confirm payment, deliver the pack, keep records and handle refunds or disputes. We do not receive your full card number.

Technical requests

Our hosting and security providers may process your IP address, browser type, page and time to serve and protect the site. Fonts are self-hosted. The site uses Vercel Web Analytics for aggregate page-view counts. It sets no cookies.

3. How we use information

  • Answer questions about the pack.
  • Confirm with Stripe that a purchase is paid.
  • Email you the correct pack version.
  • Help with delivery and process covered refunds.
  • Keep accounting, tax, fraud-prevention, and transaction records.
  • Secure and maintain the purchase path.

4. When information is shared

  • Stripe: checkout, payment, status and refunds, under its own privacy policy.
  • Hosting and email providers: to run the site and send files or replies.
  • Advisers or authorities: when reasonably needed for legal, tax, accounting, security or dispute obligations.

We do not sell or rent personal information. The Skills funnel does not use advertising trackers or behavioral advertising. Vercel Web Analytics is the only analytics.

5. Retention

We keep purchase, delivery, refund and support records only as long as reasonably needed for fulfillment, accounting, tax, security, disputes and other legal obligations. Retention can vary by record and applicable requirement. After that we may delete or de-identify them.

6. Your choices

You can ask what personal information we hold about your purchase, or request a correction or deletion. We respond as the law requires, except for records we must keep for transactions, tax, security, disputes or other legal obligations. For data Stripe holds, use Stripe's Privacy Center.

We use reasonable administrative and technical safeguards, and Stripe handles payment credentials. No system is completely secure. Tell us promptly if you think purchase data was exposed or misused.

8. Children

The pack is for businesses and is not directed to children. Do not send us a child's information.

9. Changes to this policy

We may update this policy. The date at the top marks the current version. Material changes apply going forward unless the law requires otherwise.

10. Contact

thefiredev-cloud handles privacy questions: contact@meshvault.ai · Orange County, California.

Your data on your server

A Kodros setup runs on a server you own. No system is free of risk.

What can leave your server

The local model runs on your server. A job goes outside only when the local model cannot do it well, is busy, is down, or a named person says so. You can allow none of these. Each job gets a written route showing where it may go.

Connected apps see what they link to. A remote model you choose gets your prompts. Web pages get a normal browser request. Support gets access only if you grant it. A connector's integration service is a third party, so ask which one is used and what it sees.

Approvals

Agents draft, look things up and prepare. A named person approves sends, payments, posts and access changes. Unapproved actions stay held. Only a person deletes data. Models can be wrong, and an approval does not make a decision correct.

Access

Connectors start read-only, one per approved job. Each person connects their own account. Read-only still lets the app and its integration service see what they read.

Test an unpaired device

  1. Take a phone or laptop that was never enrolled.
  2. Try to open the server from it. It should fail.
  3. Write down the date and that the device was refused.

Run it with your installer. Repeat after big changes.

Restore test

A backup counts only after a restore opens a real file. We run the first test with you before you sign acceptance. One pass does not guarantee later restores.

Report a problem

Email contact@meshvault.ai with "Security" at the start of the subject. Include the URL or system, steps to reproduce and impact. No destructive tests on the live site. See security.txt.

Shellboard, iPhone and iPad keyboard

Shellboard collects no data. It has no network code, analytics or account, and never stores or sends what you type. Suggestions read the current line on the device. Tap counts and settings stay on the device.

Full Access is optional. It enables haptics and your theme, stored in the device keychain. The mic key hands off to Homelab Dictate, which sends audio only to your own speech server. Shellboard never uses the microphone. Deleting the app removes its data, but a device backup may keep a copy.

AmpHours, iPhone calculator

AmpHours keeps saved batteries in one local file. It has no sign-in, profile, server, network calls, analytics, ads or sensor use, so it works offline. Free saves two batteries. Pro saves any number and is one Apple purchase. Deleting the app removes the file, but a device backup may keep a copy.

DrawYears, iPhone calculator

DrawYears saves none of your figures and makes no network calls. It stores one setting: whether you saw the intro. No sign-in, analytics or ads. Pro is one Apple purchase, and the app never sees your card.

Priorly, iPhone forecast journal

Priorly keeps its journal in one file on the iPhone, with no account or server. Deleting the app deletes the journal, so export a CSV first. No brokerage connection, no order path. Apple handles Pro payment, refunds and restores.

Protocol Guide, protocol-guide.com

Protocol Guide is for protocol lookup, not charting. Do not enter patient-identifying details. Searches and voice transcription need a connection. Pro saves protocols for offline reading. The web host may process request data such as IP address. Department seats are sold on protocol-guide.com, whose checkout handles payment.

JudgeFinder, judgefinder.io

Search and read judge records signed out. An account is only for saved items and Pro. The index holds CourtListener docket metadata, not opinions or case captions. The site uses Sentry error reporting. Judge pages carry no ads.

Kodros for Android, package net.meshvault.android

The Android app is an independent client for a Hermes Agent gateway you run. It is not a hosted Kodros account and is not affiliated with Nous Research. Kodros does not receive your chats.

Gateway names, addresses, settings and run snapshots stay in private app storage. API keys are encrypted with an Android Keystore key, and Android backup is off. Files go to the gateway only when you pick them. The app does not request the microphone; voice input uses your installed speech provider and the app gets text.

Prompts, attachments and session and job requests go to the gateway you enter, which may pass them to its AI providers. No analytics, ads, in-app purchases or crash-reporting SDK. Plain HTTP is allowed on a network you manage, with a warning, and is unencrypted.

Removing a gateway or the app deletes local data only, not copies the gateway or providers hold. Not directed to children. Questions: contact@meshvault.ai.