← Back to home

Privacy Policy

Effective date: November 3, 2026
Last updated: November 3, 2026
Applies to: the Kimi Code Android app (com.qinkun.mooncode) and this website
Who we are: Kimi Code, an independent developer. Contact: xiezimeng888@gmail.com

Short version: this app is a remote client. Your sign-in and the connection to your computer go through Kimi services, which we do not operate and from which we do not receive your session content. We collect no analytics, run no ads, and store your credentials only on your phone.

1. What this app is

Kimi Code is an Android app that lets you drive a Kimi Code session running on your own computer. You start the Kimi Code command-line client (kimi rc) on that computer, pair the app with it, and then work from your phone.

The app is a client. It does not provide the AI model, the Kimi account, or the relay between your phone and your computer.

2. Who handles what

Three parties are involved, and it helps to keep them apart:

Party	What it handles
Kimi Code mobile (us)	The app you install and this website. We receive nothing from the app except email you choose to send us.
Kimi services (Moonshot AI)	`auth.kimi.com` signs you in, and `code-rc.kimi.com` relays traffic between your phone and your computer. These are operated by Moonshot AI, not by us, under its own privacy policy and terms.
You, on both devices	Your computer runs `kimi rc` and holds the files and terminal you work with. Your phone holds the app, its settings and your credentials.

3. Information the app handles

Category	Why	Retention
Kimi account identifier (from sign-in)	To authenticate you and show which account is active.	Kept on your phone until you sign out or uninstall.
Pairing data for your computer: device ID, alias, platform, client version, local service address, exposed capabilities, online status	To list your computers in the app and connect to the one you pick.	Kept while the computer stays paired; removed when you unpair it.
Connection metadata: network state, IP address, WebSocket session identifier	To establish, route and keep the connection alive.	Transient. Used for the connection, not stored for later use.
Session content: messages you type, terminal output, files you open	To show on your phone what is happening on your computer.	Passes between your devices through the relay. We do not receive or keep it.
App settings and local session cache	To restore the app the way you left it.	On your phone, until you clear app data or uninstall.

4. What we do not collect

No advertising identifiers, and no advertising of any kind.
No analytics, telemetry, A/B testing or crash-reporting SDK. The app ships with none.
No location, contacts, calendar, photos, camera, microphone, call logs or SMS.
No reading of files on your computer outside what a command you send asks for.
No selling or sharing of personal data with data brokers.

5. Permissions and what they are for

Permission	Used for
Internet, network state	Reaching Kimi services, the model endpoint you configure, and detecting whether the network is up.
Foreground service (data sync)	Keeping the connection to your computer alive while a task is running, so the system does not cut it off.
Notifications	Telling you a task finished or a command needs approval. You can turn this off in system settings.

The app requests nothing else. Denying notifications only costs you the alerts; the rest keeps working. You can revoke any permission in Android settings at any time.

6. Where processing happens

On your phone and your computer, plus the Kimi relay in between. The relay and the sign-in service are operated by Moonshot AI and may process data outside your country, including in the United States and other regions where it runs infrastructure.

We do not operate servers that hold your account or session data. Our own processing is limited to reading and answering email you send us.

7. Storage and security

Credentials are stored on your phone with AndroidX Security encrypted storage, using an AES256 key held in the Android Keystore.
Settings and the local session cache stay on your phone and are removed when you clear app data or uninstall.
Traffic between your phone and your computer, and to Kimi services, runs over encrypted channels. We recommend keeping kimi rc and any model endpoint on HTTPS or WSS.
No method of transmission or storage is perfectly secure. If you believe your account has been compromised, contact us and change your Kimi password.

8. Your choices and rights

You can, without asking us:

Unpair a computer in the app, which removes its pairing data.
Sign out to remove your account credentials from the phone.
Clear app data or uninstall the app to delete everything it stored locally.
Turn off notifications, or revoke any permission in Android settings.

To ask us to delete data, or to request access to or correction of anything we hold, email xiezimeng888@gmail.com. We answer within 30 days. Because we do not receive session content, in most cases there is nothing on our side to delete beyond our email correspondence, which we remove on request.

Depending on where you live, you may have additional rights under the GDPR, the UK GDPR, or California law, including the right to object to processing, the right to data portability, and the right to lodge a complaint with your local data protection authority. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use personal data for automated decision-making.

9. Children

Kimi Code is a developer tool and is not directed to children. It is not intended for anyone under 13, or under 16 where local law sets that threshold. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

10. Third-party services

Service	Role
auth.kimi.com	Signs you in to your Kimi account. Governed by Moonshot AI's privacy policy.
code-rc.kimi.com	Relays the connection between your phone and your computer. Governed by Moonshot AI's privacy policy.
Google Play	Distributes the app, delivers updates and processes any payment. Governed by Google's privacy policy.
The model endpoint you configure	Receives your requests when you run a task. Governed by that provider's own terms.

The app contains links out to these services only as part of its function. We are not responsible for how they handle data.

11. This website

kimicode.app is a set of static files. It sets no cookies, runs no analytics, loads no third-party fonts or scripts, and embeds nothing from other domains. Our hosting provider keeps standard server logs (IP address, time, requested path, user agent) for security and troubleshooting.

12. If the project changes hands

If Kimi Code is transferred to another developer or entity, the app and this policy would move with it. Since we hold almost no personal data, there is little to transfer; anything we do hold, such as support emails, would move only as needed to keep the service running. We would post a notice on this page first.

13. Changes to this policy

We update this page when the app's behavior changes, and we change the date at the top. If a change materially affects what happens to your data, we will say so in the app or on the store listing before it takes effect.

14. Contact

Questions, deletion requests, or complaints: xiezimeng888@gmail.com. We reply within 30 days.