A CRM knows a lot about you and your conversations. That is why Kistiro follows clear principles.
Your contacts stay with Google or Microsoft. Kistiro stores only the reference and your own data: history, notes, projects. For fast display and search the app uses a display cache of name, number and email that is refreshed from your account and never edited by hand.
The plan is to capture only sender, recipient, subject, time and direction for emails at first. You store the content only if you explicitly switch it on for a contact.
Kistiro never listens in. For calls it is only meant to record that a call took place: direction, time and duration.
Passwords are never stored in plain text, only as a salted hash. Sign-in sessions are protected by a cookie only the server reads. Every user sees only their own data.
What you enter in Kistiro is up to you. You can edit and delete your own contacts and entries at any time.
Note: Some features described here (account linking, automatic capture of calls and emails) are still in development. The principles apply from day one of those features.