Privacy Policy

1. Who is responsible for your information

PLACEHOLDER LEGAL NAME INC., registered at PLACEHOLDER STREET ADDRESS, PLACEHOLDER CITY, ONTARIO, PLACEHOLDER POSTAL CODE, Canada, trading as KIRIAN, is the organisation responsible for the personal information described in this policy. In data-protection language, we are the controller.

Questions, requests, and complaints go to privacy@kirian.ai, and we answer them.

This policy explains what we collect, why we are allowed to collect it, how long we keep it, who else processes it, and what you can make us do about it.

2. What we collect and why

Account information: your name, email address, and password, held as a cryptographic hash we cannot reverse. We need this to give you an account and to let you back into it. Without it there is no service.

Age confirmation: a yes-or-no record that you confirmed you are old enough, and the date you confirmed it. We ask for your date of birth to make that check.

From that date we keep your birth month, your birth year, your age at the moment you confirmed it, and your star sign. We do not keep the day of the month, and we do not keep the date itself. The day is used to work out the four things above and is discarded in the same request; there is no field anywhere in our systems that can hold one, and an automated check on every release enforces that. Your birthday cannot be recovered from what we hold. Being precise about the limit of that: because star signs begin part-way through a month, your month and your sign together point at a window of roughly ten days rather than the whole month.

We keep these to make the service feel like it knows who it is talking to, and for nothing else. They are not used to advertise to you, to segment you, or to price anything differently. You can see all four in your data export and remove them by deleting your account.

What you write to Kirian: your messages, the situations you describe, and anything you upload. This is the substance of the service and we cannot provide it without processing this.

Your memory file: the specific lines you have reviewed and approved for Kirian to remember, plus the people you have described. Nothing enters this file without your explicit approval, line by line, and you can edit or remove any line at any time.

Membership and payment records: your plan, its status, renewal dates, and the identifiers our payment processor gives us. We never receive or store your full card number.

Technical and operational records: IP address, browser and device information, session records, and logs of errors and request timing. We use these to keep the service running, to keep your account secure, and to stop abuse. These logs are built to hold no message content.

Terms acceptance: which version of the terms you accepted and when.

3. Sensitive information, named plainly

There is no polite way around this, so here it is directly. What you write to Kirian is about your relationships, your attractions, and your private life. It can reveal your sex life, your sexual orientation, and your mental or emotional state. Under Canadian, European, and several United States privacy laws that is sensitive or special-category personal information, and it gets the highest level of protection we can give it.

Where the law requires your explicit consent to process information of this kind, we rely on the consent you give when you create your account and start a conversation. You can withdraw that consent at any time by deleting your data and closing your account, and withdrawing it does not affect processing that already happened lawfully.

We use this information for exactly one purpose: providing the service to you. We do not use it, or anything inferred from it, to advertise to you, to segment you, to score you, to build a marketing profile, or to inform any decision about you other than answering what you asked. We do not disclose it to advertisers or data brokers, at any price.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under United States state privacy law. We honour Global Privacy Control signals where your browser sends them.

4. Other people in what you share

When you paste a message, share a screenshot, or describe someone, information about that person passes through the service. That person has not agreed to our terms and has given us nothing, and we treat their information accordingly.

We process it only to answer your question in the moment. We do not retain the content of a shared screenshot or message beyond that, we do not build a profile of anyone you describe, we do not make anyone searchable, and we never harvest or sell any of it.

What can persist is the note you approve into your memory file about your own situation, using the label you chose for that person. We do not store another person's age, contact details, photograph, employer, address, or account handles.

5. Our legal bases

Where European or United Kingdom data-protection law applies, we rely on: performance of our contract with you, for account, membership, and the delivery of the service; your explicit consent, for special-category information and for any optional use such as improving the service with de-identified content; our legitimate interests, for security, abuse prevention, and keeping the service working, balanced against your rights; and compliance with a legal obligation, where one applies to us.

Where Canadian law applies, we rely on your knowledge and consent, which this policy is written to inform, and on the limited exceptions Canadian privacy legislation provides for matters such as investigating a breach of an agreement or complying with a legal requirement.

You can withdraw consent at any time. Where consent is what allows us to run your account at all, withdrawing it means closing the account.

6. How long we keep things

Your account, your conversations, and your memory file: kept while your account is open, including while a membership is paused. After you cancel a paid membership we keep them for sixty days so you can come back to them, unless you delete them sooner.

Content belonging to other people, such as a shared screenshot: processed in the moment and deleted within one hour. It is never added to your memory file and never used to build any long-term record.

On a deletion request: your data is hard-deleted from our live systems within thirty days, and purged from backups within ninety days. Backup retention is capped below that ceiling so that every backup containing your data expires inside the window rather than needing to be edited.

Operational logs: twelve months, on a rolling basis. These contain no message content by design.

Safety records: where a safety control is triggered we keep the category and the timestamp for ninety days. We do not keep the content that triggered it.

Billing and cost records: kept for up to twenty-four months, and for longer where tax or accounting law requires it. When you delete your account, your identifier is severed from these records so that the accounting figures survive and you do not.

Rate-limiting and session keys: forty-eight hours or less, expiring automatically.

Deletion receipts: kept indefinitely, and containing no personal information at all, not even a hashed email address.

7. Who else processes your information

We use a small number of service providers to run the service. Each is bound by a contract that limits them to processing on our instructions, and none of them is permitted to use your information for their own purposes.

Hosting and application delivery: Vercel. Database and storage: Neon. Short-lived caching and rate limiting: Upstash. Payment processing: Stripe, which holds card details directly so that we never do. Model inference for generating Kirian's replies: Google, under terms that prohibit using your content to train their general-purpose models.

Some of these providers process information outside your country, including in the United States. Where that happens we rely on the transfer mechanisms the law provides, including standard contractual clauses, and we assess the protection available before a provider handles production data.

We will keep this list current. If we add a provider that materially changes how your information is handled, we will update this policy and tell you.

Beyond this, we disclose personal information only where you ask us to, where we are legally required to, or where it is necessary to establish or defend a legal claim or to prevent serious harm. If we are ever part of a merger or sale, your information may transfer with the business, and this policy continues to apply until you are told otherwise.

8. What you can make us do

You can exercise all of the following from your settings, without emailing anyone and without explaining why.

See what we hold: your memory file is visible to you line by line, with its provenance.

Correct it: edit or remove any line that is wrong.

Export it: download everything we hold about you in a portable, machine-readable format. This includes your profile, your memory file, the people you have described, your conversations, your consent records, and your membership history.

Delete it: close your account and erase your data. We ask you to confirm your password first, because a stolen session must not be able to erase your record. There is then a seven-day window in which you can undo it, after which the deletion is final and irreversible.

Withdraw consent: turn off any optional processing, such as improving the service with de-identified content, without losing access to the service.

Object or restrict: where the law gives you the right to object to processing or to have it restricted, write to privacy@kirian.ai and we will act on it.

We do not charge for any of this, we do not degrade your service for asking, and we respond within thirty days, or sooner where the law requires it.

9. What deletion actually deletes

Deletion here means deletion, so it is worth being specific about the mechanics.

When the seven-day window closes we remove your account and profile, your conversations, your memory file and the people in it, the mathematical representations derived from your memory, your onboarding responses, and your cached session and rate-limiting keys. We ask our payment processor to delete your customer information, though it keeps transaction records where its own legal obligations require it.

Your billing and cost records are anonymised rather than deleted: your identifier is severed so the accounting totals still add up and nothing in them points back to you.

Backups expire on their own schedule, within ninety days, and we do not restore a deleted account from one.

When it is done you get a receipt with a reference number and a completion time. The receipt contains no personal information, deliberately, so that asking to be forgotten does not leave us holding a record of you.

10. How we protect it

Information is encrypted in transit and at rest. Access to production data is limited to what is needed to operate the service. Every query for your data is scoped to your account, and there is no path by which one member's information can be returned to another.

Passwords are stored as cryptographic hashes and cannot be read by us or recovered by anyone. Sessions are protected against interception and are invalidated when you change your password or sign out everywhere.

No system is perfectly secure and we will not claim otherwise. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant regulator without undue delay, and within seventy-two hours where that deadline applies to us.

11. Cookies and analytics

We use cookies that are necessary to run the service: keeping you signed in and keeping your session secure. These are required for the service to work and cannot be turned off from within it.

We use privacy-preserving measurement to understand aggregate performance and reliability. It is configured to record events and timings, never the content of what you write.

We do not run advertising pixels or third-party behavioural advertising trackers. If that ever changes, this policy will be updated first, you will be asked for consent where consent is required, and a clear opt-out will be provided.

12. Children

This service is for adults only. It is not directed at anyone under 18 and we do not knowingly collect personal information from anyone under that age.

If we learn that we hold information about someone under 18, we delete it and close the account. If you believe that has happened, tell us at privacy@kirian.ai.

13. Automated processing

The replies you receive are generated automatically. That is the service, and you are told so wherever it appears.

We do not use automated processing to make decisions that produce legal effects for you or that similarly significantly affect you. We do not profile you for advertising, credit, employment, insurance, or eligibility of any kind.

Safety controls run automatically over the conversation to prevent misuse. Where one of them restricts what the service will do, you can write to us and a person will look at it.

14. Where you can complain

Come to us first, at privacy@kirian.ai, and we will investigate.

If you are not satisfied you can complain to a regulator. In Canada that is the Office of the Privacy Commissioner of Canada, or your provincial commissioner. In the United Kingdom it is the Information Commissioner's Office. In the European Economic Area it is your national supervisory authority. In the United States, your state attorney general.

Using this service does not remove your right to complain, and complaining does not affect your access to the service.

15. Changes to this policy

We will update this policy as the service changes. The version and effective date are shown at the top.

Where a change materially affects how we handle your information, we will tell you in the product before it takes effect, and we will ask for consent again where the law requires it.