kayetanaPrivacy is built in, not bolted on.
kayetana was built from day one to run on your own network. Models, documents and logs live on your server, and not a single prompt goes to a cloud service.
What applies with no extra setup.
No content stored
Prompts and answers are only passed through. kayetana logs the time, endpoint, model, status, tokens and duration.
Your retention rules
The usage log and datasets are deleted automatically on your schedule.
Roles and permissions
Owners, admins and members only see what they should.
HTTPS on your network
Encrypted connections with your own certificate, even without internet access.
Daily backups
The database and files are backed up every day at 3:15 a.m. and kept for 14 days.
Runs offline
You only need internet for models and updates. Day-to-day operation is fully local.
What kayetana stores, and what it doesn't.
| Data | Stored |
|---|---|
| Prompts and answers | Never, only passed through |
| Usage log | Time, endpoint, model, status, tokens and duration per request |
| Datasets and embed results | On your server, until your retention period ends |
| Retention period | Unlimited, 7, 30, 90 or 365 days, then deleted automatically |
| Delete the log now | Anytime |
See what's stored where, at a glance.
The privacy page in kayetana shows which data is stored, for how long and how much of it there is. That's where you set retention periods for the usage log and datasets, and where you can delete the log right away.
- Overview of everything stored
- Retention periods for log and datasets
- Delete the log with one click
Solid footing on your own network.
Local only
The app only listens locally and is reached over HTTPS with your own certificate (Caddy).
Backups
Daily backup at 3:15 a.m., kept for 14 days. We also recommend an additional external backup.
Starts on its own
After a reboot, all services start automatically. Updates are applied by script.
Open models
All included models are openly licensed and run locally through Ollama.
API keys with limits
Every app gets its own key with a monthly limit. Once it's exceeded, the API returns 429.
Protected sign-in
Sign-ins last 14 days, and 10 failed attempts trigger a 15-minute lockout.
GDPR and privacy at your company
With kayetana, your data never leaves the building. Models run on your own server, prompts and answers aren't stored, and you delete logs on your own schedule.
That helps you meet GDPR requirements. It isn't a guarantee that your processes are compliant, and this page isn't legal advice. Your data protection officer is the right person to work out how kayetana fits into your company.
Talk to us about your requirements.
In a demo, we'll show you the privacy page, roles and how kayetana runs on your own network.
Frequently asked questions
Who can see my data?
Only your team, within their roles. Prompts and answers aren't stored, and kayetana only logs the time, endpoint, model, status, tokens and duration.
Does anything go out to the internet?
Not during normal operation. You only need internet to download models and updates.
How long are logs kept?
As long as you decide: unlimited, or 7, 30, 90 or 365 days. After that, kayetana deletes them automatically. You can also delete the log right away.
What if the server fails?
kayetana backs up its database and files every day at 3:15 a.m. and keeps the backups for 14 days. We also recommend an external backup.
Is kayetana GDPR certified?
No, kayetana doesn't hold that kind of certification. It helps you protect data because your data never leaves the building, but it's no substitute for legal advice.