katib is a personal assistant that Mohamed Ibrahim (MK Builds LLC) runs for himself and a few people he invites. It is not a company product and has no support team. Using it means trusting Mohamed.
Your texts reach katib through Sendblue, the service that connects it to iMessage. Sendblue can read what you text, the photos and voice notes you send, and katib's replies. Because it relays the messages, someone at Sendblue could also send katib a question that looks like it came from you and read the answer, so katib caps how much mail, notes and memory it will read out in a day and emails you a daily count of what it was asked. katib deletes each photo at Sendblue as soon as it has its own copy, each of your texts once it has answered (within about 15 minutes), and its own replies about 15 minutes after sending them, but Sendblue has not yet told us in writing how long it keeps copies. If your phone falls back to SMS, texts also pass through phone carriers, so katib keeps details off the thread until iMessage is back. Don't text passwords, codes, card or account numbers: katib gives you a Face ID page for those. Your account starts in strict privacy mode: most replies come as a short summary with a Face ID link instead of the full text.
Every katib link opens katib.mkbuilds.dev and asks for Face ID before anything else. A text that claims to be katib but links straight to Google or anywhere else is not katib. If you change phone numbers, tell katib first; after 30 days of silence, or a change in how your number reaches it, katib asks for Face ID before answering again.
katib uses Claude on Amazon Bedrock, routed only within US and Canada AWS Regions, with retention turned off, so Amazon and Anthropic don't keep your prompts or train on them. AWS may still keep content its automated child-safety scanner flags.
katib's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to do what you asked: read your calendar and mail, draft replies, and look up contacts. It is not sold, not used for ads, and not used to train a model. Mohamed does not browse it. It is stored in his AWS account. When a reply needs it, Claude on Amazon Bedrock processes it in US and Canada Regions with retention off, so Amazon and Anthropic do not keep those prompts.
Voice notes, maps, web search and site logins are not on yet. When one of those is turned on, this page names the service that receives that data, in the same change.
Your data lives in Mohamed's AWS account, encrypted with a key that belongs only to you. The search index over your memory is encrypted at rest but not field by field, because search needs it. Mohamed can see counts and timestamps, not content, and there is no admin screen that shows your messages, email or memory. His everyday admin access is blocked from using your key and from katib's own services. As the account owner he could still change katib's code or permissions to read your data. That is recorded in AWS logs he also controls, and katib tries to email you when it happens, but he could turn that off. Exports and Face ID recovery email you first and wait 24 hours.
katib keeps raw conversation for 90 days, then a summary memory you can view, edit or erase. Records of actions (what was done and when, without content) stay for a year. Text "freeze" to stop everything except answers, drafts and disconnecting. "Delete my account" (Face ID) deletes your data and destroys your key after 7 days, which makes backups unreadable. Copies already at Sendblue, and email katib sent through your Google account, are outside its control.
Connecting Google shows an "unverified app" warning. That's expected for a personal app with fewer than 100 users.