Kathawut

Privacy Policy & Terms

Last updated: July 3, 2026

This document plainly explains what data Kathawut collects, uses, and shares — based on how our system actually works today.

1. What is Kathawut?

Kathawut is a free platform with an AI Agent that helps you write and manage novels — designed for students and anyone who wants to practice writing or create their own work.

We did not build this system to replace writers or to produce work for you without thinking. We see AI as an assistant — to help you brainstorm, draft, edit, and organize ideas — while creative direction and responsibility for the work remain yours.

Output from this system should be reviewed and edited before use, especially for schoolwork, submissions, or public publication.

2. Sign-in & account data

Sign-in is supported via Google and LINE. When you accept this policy and log in, we receive basic data from your chosen provider: user ID (sub), display name, profile picture, and email (Google usually provides email; LINE may if your account has one linked).

Account data stored in our database includes name, email, email verification status, profile picture, credit balance, account creation date, and OAuth connections (provider and account ID). We do not store your password — there is no password-based login.

You can edit your name and email from the profile page. Google sign-in automatically verifies your Google email. Changing email later uses a 6-digit OTP sent by email (expires in 10 minutes).

3. Content stored on our servers

Novels, chapters, chapter content, cover images, characters, AI rules, assistant chat history, and AI edits are stored in a PostgreSQL database on our servers — not only in your browser.

This data is tied to your account so you can access it from any device after login and so the AI system can read your novel context.

Profile pictures you upload yourself are stored as files on our servers (not just links from Google or LINE).

4. AI usage & data sent to OpenRouter

The AI assistant runs through OpenRouter, a gateway service that connects to multiple AI models (e.g. Google Gemini).

When you use AI chat or ask AI to edit/write chapters, the following is sent to OpenRouter: your chat messages, chat history in that session, related chapter content, the full chapter list of your novel, your AI rules, and your character data.

AI usage deducts credits from your account based on the model and actual token usage. Deduction and top-up history is recorded in the database.

You own the copyright to novel content you write. We do not claim rights to your writing, but you are responsible if generated content infringes others' rights.

5. Payments & credits

Credit top-ups are processed through Stripe, supporting credit/debit cards and PromptPay. We do not store your card number — Stripe handles payment directly.

We record topped-up credits, bonuses (if any), Stripe Checkout Session references, and credit transaction history in the database.

First-time email verification may grant a bonus credit as defined by the system at that time.

6. Other third-party services

  • Google — authentication at sign-in (requests openid, email, profile scopes)
  • LINE — authentication at sign-in
  • OpenRouter — AI request processing
  • Stripe — credit payment processing
  • SMTP — OTP email verification

Each service has its own privacy policy. Data sent to third parties is limited to what is necessary to provide the service.

7. Data stored in the browser (LocalStorage)

We use browser LocalStorage to:

  • Store JWT tokens to maintain login state
  • Cache basic user info (name, credits) for faster display
  • Remember your theme preference (light/dark)
  • Store terms acceptance status and temporary state during Google or LINE login

Logging out removes tokens and local user data, but does not delete novels or chat history on the server.

8. Security

API communication uses HTTPS. Login tokens expire and are validated on every request. OTP codes are stored as hashes, not plain text.

We strive to protect data with reasonable security measures, but cannot guarantee 100% security.

9. Your rights

You can edit your name, email, and profile picture from the profile page, view credit transaction history, and log out at any time.

To close your account, go to Profile → Delete account. The system performs a soft delete (sets deletedAt), removes email from the account, and deletes uploaded profile files on the server. Novel and chat history in the database may remain after account deletion.

10. Policy changes

We may update this policy when features or laws change. The last updated date is shown at the top of this page.

11. AI usage terms

The AI assistant is a writing and editing tool only. Output may contain errors, repetition, or inappropriate content. You should review and edit before publishing.

Do not use the service to create illegal content, infringe rights, or harm others.

12. Niyoi Feature (Chat with In-Content Images)

Niyoi is a custom feature invented by the user Kathawut (Khun M) that lets authors assign a persona and custom system prompt to an inserted image within novel content, allowing readers to type messages to that image as if it were an in-scene character.

When a reader sends a message, the system forwards that message along with the author-configured system prompt, surrounding scene context, and novel data (characters, relationships, NovelBase, etc.) to OpenRouter so the AI can reply in the assigned role.

Each reader's chat history is stored only in their browser's LocalStorage and is never uploaded to our servers. Clearing browser data or switching devices will erase that chat history.

Chatting with Niyoi consumes credits from the reader's account; the novel author receives credits from this usage according to the system's rate.