Privacy
Upperkick — last updated 13 October 2026
This describes what actually happens, taken from the code rather than from a template. Where it is vague, that is because the answer is genuinely uncertain and not because we are being careful with words.
The short version
Almost everything stays on your computer. Three outside services see your screen, your sound and her lines while she is watching, because that is how she sees, hears and speaks.
If you pay for Upperkick, that traffic reaches them through us. We hold the accounts with those three services so you do not have to open your own, and your app talks to them through our server. It passes the bytes along and reads one thing from the replies — what the call cost — so that a month's allowance can be counted. None of it is written down.
If you run on your own API keys, nothing goes through us at all.
What leaves your computer, and when
Nothing leaves while she is not watching. There is no background activity. Closing the window ends it.
While she is watching:
Your screen → Anthropic
Pictures of the one screen or window you chose, several times a minute, so she can see what is happening. They are sent, used to answer, and not kept. Anthropic's commercial terms say they do not train models on this.
On a licence key these pass through our server on the way. It is a relay and not a stop: it swaps in our credentials, forwards the bytes, and stores none of them. It could store them, which is why this is written down here rather than left as something you would have to take on trust — if that ever changes, this document changes with it and the app says so.
She also sends her own short written notes about what she has seen, which is how she remembers the evening while it is going on.
Your sound → Groq
What your computer plays, in slices, turned into text so she can follow dialogue. And your voice, from your microphone — by default only while you hold the talk key, or continuously if you turn that on in settings.
Groq does not keep this by default and does not train on it. They may hold logs of requests for up to thirty days to investigate faults or abuse.
On a licence key these pass through our server on the way, exactly as the pictures do, and are no more kept than those are.
This includes other people. If you are in a voice call, the people in it are part of what your computer plays. They did not agree to this. You can stop her hearing your computer at any time, including in the middle of a session, from the strip at the top of the screen or from settings.
Her lines → Cartesia
The text of what she says, so it can come back as a voice. Her lines contain your first name and refer to things you said. On a licence key these pass through our server too.
Training on this is switched off for our account, so it is not used to improve their models. They do still hold it, as every service of this kind does.
What stays on your computer
In your own user folder, where you can read, copy or delete any of it:
- The note she keeps about you. A few hundred words of plain English, rewritten at the end of each session. You can read it and delete it. If you have a licence key, a sealed copy is also kept with your account — see below.
- What each evening cost, so the running total in the window means something.
- Your settings, and the two names you chose.
- A log of what the app did, for working out what went wrong. It holds what the app says about itself and nothing about what was on your screen or what anybody said.
None of this is sent anywhere. There is nowhere for it to go.
Other people are kept out of the note
She is told, in the instructions that write it, never to record another person's name, username, or anything they said or did. Someone who griefed your base becomes "a stranger on a server". Friends in a call become "a couple of friends". The exception is someone you tell her about yourself — your brother, by name, because you chose to mention him.
This is a rule given to a language model, and it has been tested against a session deliberately full of other people. It is not a guarantee. If you see somebody else's name in the note, delete the note and tell us.
What we hold
If you are using a licence key: an account number, how much model usage that account has run up this month in dollars, and a fingerprint of your key.
Not the key itself. A fingerprint cannot be turned back into the key it came from, which matters for the next part. The key does pass through us when you sign in, and we do not write it down.
What the introduction settled: the name you asked her to call you, the name you gave her, and the voice you chose. Three short strings, so that installing Upperkick on another machine does not mean starting again with somebody who has forgotten you. This is the only thing we hold that is personal, and it is here because the alternative was worse.
A sealed copy of her note, if you have a licence key. Your app encrypts it on this computer before it is sent, with a key derived from your licence key — the one we only hold a fingerprint of. What reaches us is bytes we have no way to read. Sign in on another machine and your app opens it with the key you typed in.
If you lose your licence key, that copy is lost with it. We cannot recover it for you, and a copy we could recover is a copy we could read.
If you took the free hour, one more thing: a random number this copy of the app made up about itself the first time it ran, so the hour is given once per installation. It is not taken from your hardware, your Windows account or your address, and it says nothing about you — it exists because the alternative was asking you for a card or an email before you had heard her speak.
If you subscribed, Paddle is the seller. They take the payment, hold your card details, and handle the tax where you live — we never see any of it. What reaches us is their customer number and the fact that a payment went through.
No email, no card, no payment details. Nothing you said and nothing you played is written down anywhere by us — it passes through on the way to the three services and is gone.
If you are running on your own API keys, we hold nothing at all, because nothing is ever sent to us.
Deleting it
On your computer: delete the folder. Everything she knows about you is in it, and the app will start again as a stranger.
%APPDATA%\Upperkick
With us: "Delete everything" in settings removes the sealed note from your account before it clears this computer. For the rest — the account, its usage record, the installation number and the names — ask, and they go.
Your payment details are Paddle's, not ours, so those are asked for from them. Cancelling a subscription is separate and is done from the billing page in settings, which is Paddle's own.
Age
Upperkick is for people aged 18 and over. We do not knowingly keep anything about anybody younger. If a child has used it, delete the folder above and write to us.
Changes
If this changes in a way that matters, the date at the top of this page changes with it.
Contact
support@upperkick.app
upperkick.app