Privacy policy

1. Data controller

The data controller is YIRIWA, LLC, publisher of Kaneme. Questions about personal data may be sent to info@kaneme.com.

Kaneme has its own processing activities, separate from those of other services published by YIRIWA, LLC. Using Kaneme does not subscribe you to communications from another service.

2. Data processed

Kaneme processes four categories of data for distinct purposes.

Kaneme emails: besides account emails (sign-in, payment, security), Kaneme sends account holders product emails—welcome, getting started and service news. Legal basis: the legitimate interest of YIRIWA, LLC in informing users about the service they use. You can turn them off at any time with the “Product emails” setting in your account or the unsubscribe link in each announcement.

Account emails keep being sent.

Publishing a text certificate makes its SHA-256 fingerprint public. It allows a known text to be compared with the certified text; local verification does not send the text to the server. kaneme-text-v1 rule: remove U+200B, U+2060 and U+FEFF (preserve U+200D); NFC; replace every ECMAScript whitespace run (/\s+/gu, including NBSP) with U+0020; trim; UTF-8 without BOM; SHA-256 in lowercase hexadecimal.

• Account data: email address, name if provided, technical identifiers, and authentication methods. Purpose: create and secure access. Legal basis: performance of the contract.
• Content and voice: texts submitted by the customer, derived voice, produced documents, and saved sources. Purpose: provide the requested service. Legal basis: performance of the contract.
• Usage and billing data: completed operations, credits used, timestamps, technical logs, subscription history, payment history, and automatic top-up settings. Purposes: billing, security, fraud prevention, and reliability improvement. Legal bases: performance of the contract, legal accounting obligations, and legitimate interests.
• Organization and sharing data: membership of a Business organization, role, budget, each member’s consumption of the shared balance (visible to the owner and administrators); visas granted or received and the log of actions taken under a visa—date, type, result, never the text—available to the voice holder. Purpose: operate the Business offer and visas. Legal basis: performance of the contract.

3. What Kaneme does not do with your texts

Texts submitted by a customer are used first to build that customer’s own voice. They are not shared with other customers or used to train a model made available to third parties. Two contributions, set from the voice and revocable at any time, add to this.

The first, on by default for a voice linked to a regional register of French and possible to turn off, pools style patterns under a pseudonym, never the text itself (legal basis: legitimate interest). The second, only if you accept it, uses your reference texts, which you confirm you wrote, to improve the accuracy of voice fidelity measurement (legal basis: consent). Turning either off removes the corresponding contributions; declining changes nothing about the service.

The measurement engine is never recalibrated on text produced by artificial intelligence, including text written with the help of the service. This rule protects both measurement integrity and content confidentiality.

You can prepare your passport in the browser before creating an account. Confirmed writing is saved as voice references in your account. A temporary local copy lets you resume your input.

The pattern review runs in the browser without sending the text. If you ask for the passport writing trial before opening an account, your text and your request are sent to a model provider for the time it takes to produce the answer: Kaneme does not store them or link them to any account, and the written text stays in your browser. Connected verdicts process the text on the server and retain a stamp.

Anonymous API and MCP trial calls process texts temporarily on the server without storing those texts or linking them to an account.

The Kaneme extension for Chrome reads only the text you select, or the field where you ask it to insert your voice, and only after your action (right-click or shortcut). It sends that text to Kaneme for measurement, or for the Observatoire reading (“Read with the Observatoire”), which needs no account: the text is read, then discarded, without being recorded. With an account, the measurement is linked to your account like any connected measurement; without an account, the selection and the three texts you paste are processed for the time of the measurement, without being stored or linked to an account.

Sign-in tokens, trial texts and the chosen voice stay in Chrome’s session memory, cleared when Chrome closes; on the device, the extension keeps only the public identifier of its sign-in client and the date of the first successful report, with no text or score. It does not read your history or your other tabs, and never sends a message on your behalf: you do the sending.

The Observatory (ai-slop-observatory.vercel.app), another YIRIWA, LLC service, can open Kaneme with a text, but only if you click “Rewrite in my voice”. The text, its type and the list of flagged passages arrive through the page address, after the # sign, which a browser sends to no server; Kaneme removes them from the address bar on arrival. Before you sign in, they wait in this tab’s memory, cleared when it closes, and are removed from it once you are signed in.

Kaneme sends them to its servers only when you ask for the rewrite or the measurement, and then processes them like any text you entrust to it. “Review in the Observatory” sends the chosen version back the same way; the voice measurement stays in Kaneme. No data is shared between the two services’ databases.

If you choose “Continue with Kaneme” on the Observatory, your Kaneme account serves as your account there. The Observatory then receives only what you allow on Kaneme’s authorization screen: an identifier specific to it (neither your email address nor Kaneme’s internal identifier), your language and, if you hold a Business seat, your organization’s name and your role. It receives neither your voices nor your texts.

If you allow it, it also charges your credits for what goes beyond its free quotas (text and document analyses, batches, site audits): it may then read your available balance to show you the price, each analysis or audit holds credits when it starts, charges what completes, returns the rest, and every charge appears in your credit history. You can revoke this access at any time from your connected applications. What the Observatory keeps on its side is governed by its own privacy policy.

The Slop Report is the free newsletter shared by Kaneme and the Observatory. You are subscribed only if you tick the box offered at sign-up (unticked by default) or turn on the switch in your settings, and only with a verified address. Kaneme then sends Resend your address, your first name and your account language, and keeps proof of your consent (date, origin, version of the box text).

You unsubscribe through the link in every issue or through the switch, which reads the actual state at Resend; closing the account removes a subscription made from Kaneme.

Referrals: your account gets a referral code. A referral link you click is kept in your browser for at most sixty days, then sent once when the account is created; Kaneme then records who referred you and the date of your first paid top-up. To refuse self-referral, Kaneme keeps the card fingerprint Stripe attaches to each payment (an opaque identifier, never the card number).

Your referrer sees how many people signed up and paid through their link and the credits received, never your name, your address or your purchases.

Customer content is not sold, rented, or disclosed for advertising purposes.

4. Processors and transfers

Kaneme relies on technical providers acting as processors, each for a defined purpose and under a contractual confidentiality commitment.

Some providers are established outside the European Union. The corresponding transfers are governed by the European Commission’s standard contractual clauses or an equivalent mechanism.

• Database hosting and authentication: Supabase (data hosted in the European Union, Paris region).
• Application hosting and delivery: Cloudflare, Inc. (Workers network, United States).
• Artificial-intelligence model providers, to carry out requested operations: OpenRouter, Inc. (United States), which forwards each request to the provider of the model used and routes only to providers that do not collect submitted content; OpenAI (United States), called directly as a fallback when OpenRouter is unavailable. Submitted content is not used to train their models under the contractual options selected.
• Calculation of style representations used for measurement: Hugging Face, Inc. (United States), on inference endpoints dedicated to Kaneme, which receive the texts being measured.
• Extraction of content from web addresses you submit, web search and indexing of documents you add: Jina AI, which receives the address or query, the retrieved page and the passages to index.
• Payment: Stripe (payment cards). No card data passes through our servers. When you turn on automatic top-up or the Business seat subscription, Stripe keeps your card for later charges; Kaneme keeps only its brand and last four digits, for display.
• Email: Resend.
• Google account sign-in, when selected: Google receives the authentication request. This route is optional; email-link sign-in does not use it.
• Optional professional import: Google grants access to documents selected in its picker (drive.file). Sent email requires a separate permission, disabled by default; Slack processes searches for your own messages. Kaneme stores no unapproved preview. Only passages you select and attest become voice references.
• Anti-bot protection for sign-in forms: Cloudflare receives your IP address and technical browser signals when the request is sent.
• Application error monitoring: Sentry receives the technical context of an incident, which may include your account identifier.

5. Retention periods

Your content and voice are retained while the account is active. Closing it erases the stored files before deleting the account. The Stripe customer is deleted and the address is removed from Kaneme’s mailing lists at Resend; if a provider is unavailable, a private retry task retains only the identifiers needed for erasure until it succeeds.

Issued invoices remain subject to legal retention.

Billing data is retained for the legally applicable accounting and tax period.

Technical and security logs are retained for no more than twelve months.

Audience-measurement events collected by Kaneme itself are deleted automatically after ninety days. They contain no account identifier.

Technical anomalies recorded by Kaneme on its own servers—error message and technical trace, without an account identifier or content you wrote—are deleted automatically after ninety days.

You may request deletion at any time, without closing the account, for content not required to satisfy a legal obligation.

6. Your rights

Data subjects have rights of access, rectification, erasure, restriction, objection, and portability, as well as the right to give instructions concerning their data after death.

You may exercise these rights by contacting info@kaneme.com. We respond within one month, which may be extended under the conditions permitted by applicable law.

Data subjects may also lodge a complaint with the competent supervisory authority in their country of residence.

7. Security

Data access is segregated by account at database level, not only in the application. API keys are stored in hashed form. Data is encrypted in transit.

Access tokens for third-party services connected by the customer are kept out of browser reach and used only on the server.

8. Cookies

Kaneme sets cookies that are strictly necessary for the service, including authentication-session cookies. These are secure, first-party cookies and are not shared with another domain.

Kaneme also measures its audience itself, without any cookie or identifier stored on your device. These measurements never leave our servers, are shared with no one, and are limited to the page viewed, the steps taken on our pages (a button clicked, a check started), how long the page took to load and display, device type, and referring site. Your IP address and browser are used only for the duration of the request to calculate a visitor key that changes every night; neither is retained, and the key cannot recognize you from one day to the next or on another site.

Kaneme uses no third-party audience-measurement service and sets no advertising or cross-site tracking technology.

The internal measurement described above does not require prior consent: it stores nothing on your device, follows no one across sites, and produces only totals. You may nevertheless disable it at any time, and that choice is respected.

Your choice is saved on the device you use. You may change it at any time using the control below without losing access to Kaneme.

9. Minors

The service is not intended for anyone under sixteen. We do not knowingly collect data from a minor under that age; if notified, we delete it without delay.