Privacy Policy

Effective date: 29 June 2026

The public product name is kiho (Taiwanese “kì-hō”, 記號 — “a mark”).

kiho is a browser extension for in-context English learning: you highlight a word, phrase, or sentence while reading, get an AI explanation in context, and your highlights persist across visits and feed a spaced-repetition review.

What kiho stores on your device

All of the following is stored only in your browser’s local extension storage (chrome.storage.local) on your own machine. None of it is transmitted to the developer or any third party.

• Highlights — the text you selected, its position on the page, the page URL, and the surrounding context sentence.
• Explanations — the AI responses for your highlights (cached so revisiting never re-calls the API).
• Review state — spaced-repetition scheduling data for each highlight.
• Settings — your Anthropic API key, chosen model, and language preferences.

You can export all of this as JSON, or clear it (per page or entirely), at any time from the extension’s options page. Uninstalling the extension deletes all of it.

What leaves your device, and to whom

The only outbound data is the explanation request you initiate by clicking “look up” on a selection. For that request, kiho sends to Anthropic (api.anthropic.com):

• the selected word/phrase/sentence,
• its surrounding context sentence (so the explanation fits the meaning in context),
• optionally the page title,
• authenticated with your own Anthropic API key.

That request is governed by Anthropic’s Privacy Policy and the terms of your own Anthropic account. kiho does not add any recipient of its own — the developer never receives this data.

Your API key

• It is stored locally on your device and is used only as the authorization header on requests to Anthropic.
• It is held exclusively by the extension’s background service worker. The content script that runs on web pages never has access to it.
• It is never logged, never sent to the developer or any third party, and not included in the JSON export.

What kiho does NOT do

• No telemetry, analytics, crash reporting, or usage tracking.
• No accounts, sign-in, or cloud sync (everything is local in v1).
• No selling, sharing, or transfer of your data to anyone.
• No reading or transmitting of page content beyond the specific text you select and its surrounding sentence. The content script runs in an isolated world and does not harvest page contents.

Permissions and why they are needed

• storage — to save your highlights, explanations, review schedule, and settings locally.
• Host access to https://api.anthropic.com/* — so the background can call the Anthropic API with your key to generate explanations.
• Content scripts on the pages you visit — to detect your text selection, show the look-up button and explanation, and re-draw your saved highlights when you revisit a page. This runs locally in an isolated world; it does not send page content anywhere except the term + context you explicitly look up.

Data retention and control

Your data lives on your device until you remove it. Export (JSON), clear-per-page, and clear-all are available in the options page; uninstalling removes everything. Cached explanations exist solely to avoid re-calling the API for text you already looked up.

Changes

Material changes to this policy will be reflected here with an updated effective date and noted on the store listing.

Contact

Questions about this policy or your data: support@trykiho.app.