Privacy

This page explains what data Kylakas and Polyglyph Analytica have, and where it goes.

Last updated 2 October 2026.

What stays on your computer

Your answers, your monthly numbers, your plan and its history are plain files in your Kylakas folder. The dashboard is served by your own computer to your own computer. None of it is uploaded to us.

What leaves your computer

• A licence check-in, at most once a day. It sends your licence ID, an installation ID and the version you run to Kylakas's licence server. The server uses them to tell whether your copy is licensed, and which version you're entitled to. Nothing about your finances is in it.
• Update downloads, from the same server, when a new version is ready.
• A check for corrections to the rules, once a day, from the same server. Your computer downloads one list of known corrections and announced changes to the tax rules it works to, and checks that we signed it. The list is the same for everyone. Nothing about your finances is sent. With it, your computer asks the licence server for your licence's settings. That sends your licence ID and an installation ID, as the check-in does.
• Your own Claude. Explaining your plan and drafting your monthly review is done by Claude when you ask for it. That happens in your own Claude session, under your Claude account and Anthropic's terms. It never passes through us.
• Your phone, if you pair one. A paired phone reaches your dashboard through our relay server. The connection is encrypted end to end, between your phone and your computer. It's checked by six digits that both screens show. So the relay passes it on without being able to read it, and keeps none of it.
• Notifications, if you turn them on. A push notification goes from your computer to your browser's push service, which is run by the company that makes your browser, such as Google, Apple or Mozilla. It passes it on to the dashboard, or the paired phone, you turned notifications on for. Each one is encrypted for that device, so the push service can't read it.
• Notification emails, if you choose email for a topic. Your computer asks our licence server to send one short email to the address on your licence. It says only which product, which topic and how many things are waiting, such as "Something needs you in Kylakas (approvals)". It never has the details. You see those when you open Kylakas. Our server sends it through ZeptoMail, our email service.
• Bank of England rates. Kylakas fetches Bank Rate and the 10-year gilt yield from the Bank of England's public data. Nothing of yours is sent with the request.
• Exchange rates, only if you ask for them. If you list currencies in your settings (the market.currencies line in kylakas.yml, empty unless you fill it in), Kylakas also fetches each one's reference rate against the pound from the European Central Bank's public data. The request names those currencies, so it shows which ones you listed. Nothing else of yours is sent with it.
• A backup, if you set one up. Kylakas can push your plan to a git repository you choose. It goes only where you point it, and never to us.

What we hold

When you buy, Paddle (our merchant of record) takes the payment and tells us your name, email address, country and the order. We keep that to deliver and look after your licence. That covers the licence file, the purchase email, the update notices that go to every licence holder, refunds and the seat.

We send marketing email only if you said yes to it, anywhere, for any of our products. Saying yes means you agree to hear from Polyglyph Analytica about any of its products and apps, not only Kylakas. It's one preference across all of them. Every marketing email has a one-click way to say no. Using it, or writing to us, stops marketing email from all of them. Update notices are part of the licence and aren't marketing.

Polyglyph Analytica keeps one customer list across all its apps. Paddle, our payment provider and merchant of record, holds it. Paddle also holds the record of what each person chose about marketing.

For notification emails we keep a count of how many we sent for your licence each day, so we can stop at ten. If you use the link in one to stop a topic, we keep that choice. We keep nothing else about them.

Your licence account is on our licence server. It's where you choose whether your agents stop when the list of rule corrections hasn't been checked for 14 days. To sign in, you enter the email address on your licence, and we email a link to it. We keep when we last sent you one, so we send at most one every 15 minutes. Opening the link keeps a cookie on this site for 12 hours. It's sent only to the account page. If you change a setting there, we keep a record of the change: which setting, what it was, what it became, the email address you signed in with, and when.

This website

This site uses analytics cookies only if you say yes. If you press "Allow analytics" on the cookie notice, Google Analytics records which of our pages you visit. It also records the steps you take towards buying:

• seeing the prices;
• opening the checkout;
• completing a purchase;
• starting a trial or a demo.

This is recorded without your name or email. We use it to learn which pages help. Nothing is used for advertising. If you don't say yes, no analytics runs at all.

Apart from analytics, the site keeps two things in your own browser. One is whether you chose light or dark. The other is your answer to the cookie notice. Neither is sent anywhere. To answer again, use "Cookie settings" at the bottom of every page.

To show the price in your currency, the page asks our licence server. The server asks Paddle what it will charge you, and tells Paddle which country your request comes from. If the country isn't known, it passes on your IP address instead, so Paddle can work it out. We don't store your IP address for this.

If you open the price link we email to customers, your browser also keeps a cookie on this site for 30 days. It lets the site show your price as a returning customer. It's sent only to our licence server on this site.

How long we keep it

We keep licence and purchase records, including the record of changes to your licence's settings, for as long as the licence exists, and then for as long as tax law requires. For the daily check-in, we keep only the latest one for each installation. We keep your marketing consent until you withdraw it.

Your rights

Write to hello@polyglyphanalytica.com if you want to:

• ask for a copy of what we hold about you;
• have it corrected or deleted;
• object to its use;
• withdraw a consent.

If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office (ico.org.uk) or your own data protection authority.

Changes

If this policy changes, the date at the top changes with it.

Who you are dealing with

Kylakas is made and sold by Polyglyph Analytica Ltd.
Registered in England and Wales, company number 17495579
hello@polyglyphanalytica.com

Payments are taken by Paddle, our merchant of record. The charge on your statement is from Paddle, and Paddle's own terms apply to the payment itself.