Privacy Policy

Kinen ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and how we handle it. It covers both the Kinen web application and the Kinen browser extension for Chrome and Firefox.

1. Data We Collect

Account information

When you create an account we store your email address and authentication credentials. We use Supabase for authentication and database hosting (EU region).

Content you save

Articles, URLs, notes, highlights, and any text you add to your library are stored so you can access, search, and interact with them. This includes content saved via our browser extension.

AI-processed data

When you use AI features (summarize, explain, ask), the relevant content is sent to our AI provider for processing. We do not use your content to train AI models. AI responses are stored alongside your items for your convenience.

Payment information

Payments are processed by Stripe. We never see or store your full card number. Stripe handles all payment data under their own privacy policy.

Usage data

We collect basic analytics (pages visited, feature usage) to improve the product. We do not sell this data or share it with advertisers.

2. How We Use Your Data

• Provide, maintain, and improve the Kinen service
• Process your saved content and deliver AI features
• Handle billing and subscription management
• Send essential service emails (login links, account alerts)
• Detect and prevent abuse or fraud

3. Data Storage and Security

Your data is stored on Supabase infrastructure in the EU (Frankfurt, eu-central-1). All data is encrypted in transit (TLS) and at rest. We apply row-level security policies to ensure you can only access your own data.

4. Data Sharing

We only share your data with:

• Supabase — database and authentication hosting
• Stripe — payment processing
• AI providers — content processing for AI features (only the content you explicitly submit)

We do not sell, rent, or trade your personal data. We do not share data with advertisers.

5. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Export your data in markdown and JSON formats (available in Settings)
• Delete your account and all associated data
• Rectify inaccurate personal data
• Object to processing of your data

To exercise any of these rights, email us at hello@kinen.app. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data and saved content are permanently removed within 30 days. Anonymized analytics may be retained for product improvement.

7. Browser Extension

The Kinen browser extension is available for Google Chrome and Mozilla Firefox. This section describes exactly what the extension does and does not do with your data.

7.1 What the extension collects

When you click "Save to Kinen" in the extension popup, the extension reads:

• The URL of the active tab — so we know which page to save to your library.
• The title of the active tab — displayed in the extension popup for confirmation.
• Authentication cookies from kinen.app — to verify you are logged in. These cookies are only read from the kinen.app domain and are never sent anywhere other than our own server.

7.2 What the extension does NOT collect

• Does not track your browsing history or activity
• Does not collect data from pages you do not explicitly save
• Does not run in the background or monitor your tabs
• Does not collect search queries, form inputs, or passwords
• Does not collect device identifiers, IP addresses, or system information
• Does not inject scripts or modify any web page content

7.3 Permissions and why we need them

7.4 How saved data is processed

When you save a URL, our server fetches the page content and extracts a clean, readable version. For specific content types:

• YouTube videos — we fetch the transcript via the YouTube API
• Tweets — we fetch the tweet content via Twitter's oEmbed API
• Standard web pages — we parse the HTML using Mozilla's Readability library

This processing happens entirely on our server. The extension itself only sends the URL.

7.5 Local storage

The extension does not use persistent local storage (no localStorage, IndexedDB, or service worker cache). Authentication tokens are held temporarily in memory during your browser session and are cleared when the browser is closed.

7.6 Data transmission

All communication between the extension and our server uses HTTPS encryption. The only data transmitted is:

• Your authentication cookie (in the HTTP Cookie header, to kinen.app only)
• The URL you choose to save

No data is sent to any third party. No data is transmitted until you explicitly click "Save to Kinen".

8. Children

Kinen is not intended for children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.

10. Contact

For any privacy-related questions, contact us at hello@kinen.app.