What Kurva stores
Kurva has no accounts, no Kurva server storage, and no analytics.
Projects, images, thumbnails, and conversations stay in this browser.
Chat requests go straight from this browser to OpenRouter with your own key.
A request carries your message, the earlier messages in that chat, the design brief you picked, and a short list of what is on the canvas: frame names, sizes and positions. In Design and Review modes the model also reads and writes designs, so the HTML of the frames it opens or creates goes to the model, and its changes apply to the canvas right away (one Undo reverts a whole reply). A frame screenshot is sent only after you approve it, and an image only when you attach one. Kurva asks for your consent once in each browser; you can turn on “Review each request before it is sent” to see every request first.
A tldraw license ping is sent only when a license key is configured for this build.
When Kurva is hosted, the host’s access logs can record an IP address, the path, and the user agent. OAuth query strings are dropped from those logs. How long a host keeps logs is the host’s setting.