Privacy Policy

What we collect

Account details. Your name, email address, and a password. Passwords are hashed with Argon2 and are never stored in a readable form. If you sign in with Google, we receive your email address, name, and profile picture from Google — nothing else, and never your Google password.

Your conversations. The messages you send and the replies you receive are stored so your chat history is there when you return.

Files you upload. Documents and images you attach to a conversation, kept so they remain available in that conversation.

Settings and saved items. Preferences, saved memories, and any custom assistants you create.

Technical records. Basic request logs used to keep the service running and to apply rate limits. We do not use advertising trackers, and we do not sell data to anyone.

Who your messages are sent to

Ken AI does not run its own language model. To answer you, your message and the relevant part of the conversation are sent to an AI provider — currently Groq — which generates the reply and returns it. Treat anything you type as leaving our servers for that purpose.

Other services we rely on: MongoDB Atlas stores your data, Resend sends verification and password-reset emails, and Render and Vercel host the application.

Please do not share sensitive information

Do not send passwords, financial account numbers, national identity numbers, medical records, or anyone else's personal information in a conversation. Messages are stored and are processed by a third-party AI provider, so they are not the place for secrets.

How long we keep it

Your account and conversations are kept until you delete them or close your account. Deleting a conversation removes it from the service. Closing your account removes your profile, conversations, messages, uploaded files, memories, and custom assistants. If file storage is temporarily unavailable, file deletion continues through a durable retry queue. Only the object location and cleanup status remain until removal succeeds. Daily shared-key usage counters expire within two days of their UTC usage date.

Your choices

You can edit or delete individual conversations at any time, update your details in Settings, and delete your entire account from Settings → Data controls. Account deletion is permanent and is not reversible.

To request a copy of your data, or if you have any question about this policy, email [email protected].

Security

Traffic is encrypted with HTTPS. Passwords are hashed, session cookies are HttpOnly and cannot be read by scripts, and any AI provider keys you supply are encrypted before they are stored. No service can promise perfect security, but we do not store anything we do not need.

Children

Ken AI is not intended for children under 13. If you believe a child has created an account, email [email protected] and we will remove it.

Changes

If this policy changes in a way that affects you, the date at the top of this page will be updated. Continuing to use Ken AI after a change means you accept the revised policy.