Privacy notice

Summary

What we process. Session answers you submit, optional first names, email if you verify or subscribe, subscription status, and limited technical data needed to run and secure the site.

Sensitive data. A session can reveal health, mental wellbeing, sex life, or sexual orientation. In the EU, EEA and UK that is special-category data under Article 9 GDPR. We process it only with explicit consent, given by a separate affirmative control before the session is sent for generation. Browsing the site is not that consent. You can withdraw it at any time.

No human reads the session. Reports are generated by AI. Staff do not review session content in the ordinary course.

Retention. Raw answers are not written to a durable store after the session ends. If you turn on a history feature, condensed summaries and scores are kept until you delete them or for 24 months, whichever comes first. Partner invitation data expires after 14 days.

Cookies. Essential storage works without a choice. Analytics run only after you accept. See section 09.

Where Kionese is available

Sessions are not yet offered in India, Pakistan, Bangladesh, Sri Lanka, Afghanistan, or Ukraine, because local legal, language, safety, and payment work is unfinished. That is not a permanent bar. Elsewhere the service is offered under this notice and the Terms. Primary markets are the United States, United Kingdom, Canada, Australia, and the EU/EEA.

We infer country from IP for that check and for security. We do not collect GPS. Using a VPN to start a session from a location where launch work is unfinished is a breach of the Terms.

Information we collect

You provide: session answers; optional first names and avatars; email when you verify, subscribe, request a copy, request the free guide by email, or join a waitlist; relationship-type selections.

Voice: if you use the microphone, speech-to-text runs in your browser. We receive the text, not an audio file. Your browser vendor may process the audio under its own terms.

Payments: card numbers are collected by our merchant of record, not by us. We receive subscription status, plan, and a transaction reference.

We generate: the report; and, only if you use a history feature, condensed themes and numeric clarity, conflict, and connection scores. A background tone check may classify the dynamic you describe so the report can adjust safety language. That check is not a diagnosis and is not shared.

Technical: browser type, language, approximate country, referring page, and security logs. We do not buy data from brokers. We do not collect government IDs, precise location, or contact lists.

Artificial intelligence

You are interacting with an AI system. Questions, reports, scores, and briefs are machine-generated. This disclosure is made for Article 50 of the EU Artificial Intelligence Act and equivalent rules.

After you give explicit consent, session text is sent to a contracted AI inference provider solely to produce your report. Output can be wrong. It is not clinical care and not a medical device. We do not use session content to train models, and the provider contract prohibits that use.

Kionese does not make decisions with legal or similarly significant effects under Article 22 GDPR. You can ignore any output.

Purposes

We process information to generate the report you request, verify email, run subscriptions, operate optional history features, deliver couples sessions, send a copy you ask for, send the free guide you request by email (with the occasional clarity tips you agree to when you tick the box; we keep your address, language and the time you agreed with our email provider, and you can unsubscribe at any time from the link in every email), prevent abuse, keep the service secure, and meet tax and accounting duties. We do not use it for cross-context behavioural advertising.

Legal bases

For EU, EEA, and UK users: explicit consent (Articles 6(1)(a) and 9(2)(a)) for session content that may reveal special-category data; contract (Article 6(1)(b)) for the paid service; legitimate interests (Article 6(1)(f)) for security and abuse prevention; legal obligation (Article 6(1)(c)) for tax records. Analytics cookies use a separate consent, described in section 09.

Retention

• Raw session answers: not written to a durable store after the session ends.
• History features: condensed summaries and scores, until you delete them or 24 months, whichever is sooner.
• Couples invitation and partner answers: 14 days, then deleted.
• Email: until you ask us to delete it, except where a message must be kept for a dispute.
• Payment records: for the period tax law requires, typically up to 7 years.
• Security logs: 90 days.

Who receives information

We do not sell personal information. Recipients are limited to these categories. Each processor acts on our instructions under a written contract, except the merchant of record, which is an independent controller of the payment data you give it:

• An AI inference provider, to generate the report after your explicit consent.
• A cloud hosting provider, for the application and database.
• A network security and delivery provider, to serve the site and block attacks.
• A merchant of record, to take payment, calculate tax, issue the receipt, and handle payment disputes. That name, not Kionese, appears on the card statement.
• A transactional email provider, for codes and copies you request.
• A product analytics provider, only after you accept analytics cookies.

The current named list is available by emailing support@kionese.com. We may also disclose information if the law requires it, or in a merger, in which case we will tell you before a different notice applies.

Kionese LLC is established in the United States. Information may be processed in the United States and in other countries where those providers operate. Transfers from the EEA or UK rely on Standard Contractual Clauses, the UK Addendum, or an adequacy decision.

Other people

You may describe another person. We use that only to produce your report. A partner you invite answers on their own device, is told how answers will be used, and can refuse by not responding. Neither of you sees the other's raw answers. The merged reading may quote both. An invited partner may email support@kionese.com to access or delete their answers. Do not use Kionese to monitor or pressure anyone.

Cookies and similar technologies

Storage is split into essential and non-essential. Non-essential tags are not set, and non-essential scripts are not loaded, until you choose Accept. Reject is as easy to reach as Accept. You can reopen the choice from Cookie settings.

Essential. Language, session state needed to finish a read you started, a pseudonymous id if you use history, subscription status, and the cookie that stores this choice (k_cookie_choice, 6 months). These are strictly necessary under Article 5(3) of the ePrivacy Directive.

Analytics, consent required. Aggregated page measurement and, where enabled, masked interaction replay. Text typed into session fields is not captured in replay. We do not use advertising cookies. A Global Privacy Control signal is treated as a rejection of analytics where the law requires it, including in California.

This page does not load a measurement script before that choice.

Security

Traffic is encrypted in transit. Stored data is encrypted at rest. Production access requires multi-factor authentication. If a breach is likely to risk your rights, we notify the relevant authority and, where required, you, within the legal time limit.

Minors

Kionese is for adults 18 or older, or the higher age of majority where you live. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it.

Your rights

You may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent. Email support@kionese.com with the subject "Data Request". We respond within 30 days. You may complain to your local authority. History can also be deleted in the product.

Regions

EU, EEA, UK. Rights under GDPR and UK GDPR as in section 12. Complaints go to your supervisory authority or the UK Information Commissioner's Office.

United States. We do not sell personal information or share it for cross-context behavioural advertising. State rights of access, correction, deletion, and appeal apply where your state provides them. Reply with the subject "Privacy Appeal" to appeal a refusal. Where a state treats emotional-wellbeing content as consumer health data, we process it only with consent.

India. Sessions are not currently available. A waitlist email and country are processed under the Digital Personal Data Protection Act 2023 to tell you if the service launches.

Other regions. Access, correction, deletion, and complaint rights under Canadian, Australian, New Zealand, Brazilian, Japanese, Korean, Singapore, Swiss, and South African law apply where you are covered. We do not target China or Russia and do not claim to meet every localisation rule there.

Contact