Getting started
Privacy
Kimo is local first. Your designs are files on your machine (or in your browser's storage), there is no account, and Kimo has no telemetry: no analytics, no crash reporting, no usage tracking.
On this page3 sections
What leaves your machine
Kimo only talks to the network for these:
| What | When | Where to |
|---|---|---|
| Google Fonts | The first time a file uses a Google font you don't have; then it is stored in the file's assets/ folder and cached, so it is never fetched again | fonts.googleapis.com, fonts.gstatic.com (no cookies, no referrer) |
| Offline font pack | Only when you press Download in Settings › Fonts & privacy | fonts.googleapis.com, fonts.gstatic.com |
| AI providers | Only when you configure a provider and use the built-in agent: each turn, Test, and naming sessions and files with the fast model | The provider you chose (Anthropic, OpenAI, Google, OpenRouter, your own endpoint, AWS, Google Cloud or Azure) |
| Agent CLIs | When the built-in agent runs on Claude Code, Codex or Gemini CLI | Whatever that CLI contacts; Kimo only starts it |
| Agent web access | When the built-in agent searches the web or reads a page for a task (web access, on by default) | The provider or CLI runs the search and fetches the page, not Kimo: Anthropic's or OpenAI's servers, or the CLI on your machine |
| Update check (desktop) | When the app starts, and Check now | GitHub releases. Download updates controls whether updates download |
Google Fonts
When The first time a file uses a Google font you don't have; then it is stored in the file's
assets/ folder and cached, so it is never fetched againWhere to
fonts.googleapis.com, fonts.gstatic.com (no cookies, no referrer)Offline font pack
When Only when you press Download in Settings › Fonts & privacy
Where to
fonts.googleapis.com, fonts.gstatic.comAI providers
When Only when you configure a provider and use the built-in agent: each turn, Test, and naming sessions and files with the fast model
Where to The provider you chose (Anthropic, OpenAI, Google, OpenRouter, your own endpoint, AWS, Google Cloud or Azure)
Agent CLIs
When When the built-in agent runs on Claude Code, Codex or Gemini CLI
Where to Whatever that CLI contacts; Kimo only starts it
Agent web access
When When the built-in agent searches the web or reads a page for a task (web access, on by default)
Where to The provider or CLI runs the search and fetches the page, not Kimo: Anthropic's or OpenAI's servers, or the CLI on your machine
Update check (desktop)
When When the app starts, and Check now
Where to GitHub releases. Download updates controls whether updates download
Links you click (provider key pages, install guides, docs) open in your browser.
Turning things off
Settings › Fonts & privacy:
- Google Fonts off: Kimo never fetches fonts; missing fonts render with a fallback until you install them.
- No third-party fetch on: blocks every request to Google, including the offline font pack download, and turns off the agent's web access. Kimo never loads remote image URLs in any case: images are always files in the file's
assets/folder.
Fonts already stored in a file, installed, in the offline font pack or in the cache keep working either way.
The built-in agent makes no request until you add a provider or a CLI is used. To keep it off the web but still use it, turn off Settings › AI providers › Allow web access, or Web access in the composer's … menu for one session.
Keys and conversations
- API keys: in the desktop app, in your OS keychain; requests are signed by the app itself, so the editor never sees the key. In the browser, in the page's
localStorage. See Providers. - Agent sessions are stored on this device, not in the
.kimofile. - Copy diagnostics (Help) copies only your version, platform, renderer and locale, and only when you paste it somewhere.