Privacy Policy

Kanneko, a service operated by Shoptrix LLC, a California limited liability company ("Kanneko," "we," "us," "our"), operates the website kanneko.com and the AI driving-assistant service. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using Kanneko, you agree to the practices described here. If you do not agree, please do not use the service.

1. Information we collect

Email address
When you join our waitlist, we collect your email address. We do not collect any other personally identifying information during that process.

Conversation messages
When you interact with the AI assistant in the demo, the messages you type or speak are sent to our AI providers to generate responses. We do not permanently store the content of your conversations on our servers — the session lives in temporary memory and expires automatically after 10 minutes of inactivity.

Voice recordings
When you send a voice note or use voice mode (on the website or in the mobile app), audio is recorded only while you have actively started a recording — there is no background or always-on listening. The audio is sent to our transcription provider to convert it to text, processed in transit, and never stored on our servers. Only the resulting text is used to generate the response.

Mobile app data stored on your device
The Kanneko mobile app keeps your conversation history, saved places, routes, and reminders only on your device (local storage). We do not store this data on our servers and we cannot access it. Specifically:

• Location: with your permission, the app uses GPS to save places, suggest routes, and trigger arrival reminders. Location data stays on your device; it is not uploaded to or retained by our servers.
• Contacts: with your permission, the app reads your contacts on-device only to place a call when you ask for it by voice. Your contacts are never uploaded, stored, or shared.
• Conversation history and reminders: stored locally so Kanneko can recall past chats and remind you of things. Deleting the app deletes this data.

Session identifier
We generate a unique session ID (UUID) stored in your browser's localStorage. This ID contains no personal data and is used only to maintain conversation context during your visit.

Server usage data
Our servers may automatically log standard technical information such as IP address, browser type, pages visited, and date/time of access. These logs are used solely for diagnostics and security.

Learned profile (mobile app)
When you use the Kanneko mobile app with Personalized Memory enabled, the app learns durable facts you share in conversation (such as frequent routes, routines, errands, and people you mention) to personalize replies and suggestions. This profile is stored only on your device — our servers process conversation excerpts in transit to extract these facts but never store the profile or the excerpts. The app never extracts health, financial, or precise home-address information.

Advertising and analytics data
When you reach our site from an advertisement or browse it, we and our advertising partner Meta Platforms, Inc. may collect device and usage identifiers — including cookies set by the Meta Pixel (such as _fbp and _fbc), your IP address, browser and user-agent, the pages you view, and advertising click identifiers such as fbclid — to measure ad performance and improve our campaigns. When you join the waitlist, we may also share a hashed (irreversible) version of your email address with Meta to measure conversions and match audiences. We never share your raw email address with advertising partners, and we never sell your personal information for money.

2. How we use your information

• Waitlist email: To notify you when Kanneko launches publicly. We do not send spam or sell your email to third parties for marketing.
• Chat messages: Solely to process your request and generate the AI response in real time.
• Voice recordings: Solely to transcribe what you said into text, in transit. Audio is never stored.
• Location and contacts (app): Solely to provide the feature you requested (saving a place, navigating, calling someone), processed on your device.
• Session: To maintain context during your active conversation.
• Learned profile (app): Solely to personalize Kanneko's replies and suggestions for you. It stays on your device and is never used for advertising, sold, or shared.
• Server data: To maintain security, detect abuse, and improve service stability.
• Advertising & measurement: To measure the performance of our advertising, understand how visitors reach us, and improve our campaigns. We do not sell your personal information for monetary value.

3. Third-party providers

To operate the service, we share certain information with the following providers. Each has its own privacy policy:

• Anthropic (Claude AI) — Chat messages are sent to Anthropic's API to generate responses. Privacy policy: anthropic.com/privacy
• Google (Gemini AI) — Used to transcribe voice notes to text, and as a fallback when Claude is unavailable. Privacy policy: policies.google.com/privacy
• ElevenLabs — When Kanneko's human-sounding voice is enabled in the app, the text of Kanneko's replies (never your messages or audio) is sent to ElevenLabs to synthesize speech. Privacy policy: elevenlabs.io/privacy
• Supabase — Stores waitlist emails in a secure database. Privacy policy: supabase.com/privacy
• Cloudflare — Hosts the website and serves the backend (Cloudflare Functions). Privacy policy: cloudflare.com/privacypolicy
• Resend — Processes and delivers our waitlist confirmation and notification emails. Receives your email address solely for this purpose. Privacy policy: resend.com/legal/privacy-policy
• Meta Platforms, Inc. (Facebook / Instagram) — We use the Meta Pixel and Meta's Conversions API to measure the performance of our advertising and reach relevant audiences. This involves advertising cookies and a hashed (irreversible) version of your email address. Privacy policy: facebook.com/privacy/policy

Third-party apps opened at your request. When you ask Kanneko to navigate somewhere or play music, the app opens the corresponding app on your device (such as Google Maps or Spotify) with your request — for example, a destination or a music search. Those apps process that information under their own privacy policies; we do not control them and we receive nothing back from them.

4. Data retention

• Waitlist emails: Kept until you request deletion or until the service is discontinued.
• Chat conversations: Not persisted. Session memory expires after 10 minutes of server inactivity.
• Voice recordings: Never stored. Audio is processed in transit for transcription and discarded.
• App data (conversations, places, reminders, contacts, location): Stored only on your device. Uninstalling the app removes it. We hold no server-side copy.
• Learned profile (app): Stored only on your device, until you turn off Personalized Memory in the app (which erases it), say "forget what you know about me," or uninstall the app. Our servers retain nothing.
• Session ID in your browser: Stored in localStorage. You can clear it anytime from your browser settings.
• Server logs: Retained for a maximum of 30 days for diagnostic purposes.

5. Cookies, tracking & advertising technologies

We use the following technologies:

• Essential local storage: a session ID (UUID) stored in your browser's localStorage to maintain chat context during your visit. It contains no personal data and stays on your device — you can clear it anytime from your browser settings.
• Advertising & measurement cookies: the Meta Pixel sets cookies (such as _fbp and _fbc) and collects device and usage data to measure the performance of our ads on Facebook and Instagram and to reach relevant audiences. We also use Meta's server-side Conversions API for the same measurement purpose.

Your controls. When you first visit, a consent banner lets you accept or decline advertising cookies, and you can change your choice anytime via the "Your Privacy Choices" link in our footer. Until you accept, the Meta Pixel runs in a restricted, consent-revoked mode. We honor the Global Privacy Control (GPC) signal as a valid opt-out, and we apply Meta's Limited Data Use (LDU) so that California residents receive CCPA/CPRA protections automatically. If you decline or your opt-out is detected, we also stop sharing your information with Meta through our server-side Conversions API.

You can additionally control or block cookies through your browser settings and opt out of interest-based advertising through your Meta Ad Preferences, the DAA opt-out tool, or the NAI opt-out tool. See Section 8 for additional choices, including California opt-out rights.

6. Security

We implement technical safeguards such as HTTPS/TLS encryption, HTTP security headers, a Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), request rate limiting, and access controls to protect our systems and backend access. Data is processed on infrastructure located primarily in the United States. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's privacy

Kanneko is not directed to individuals under 13 years of age. We do not knowingly collect data from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

8. Your rights

Depending on your location, you may have the following rights:

• Access: Request what data we hold about you.
• Deletion: Request that we remove your email from the waitlist.
• Correction: Request correction of inaccurate data.
• Objection: Object to the processing of your data in certain circumstances.

In-app controls: In the Kanneko mobile app you can turn off Personalized Memory at any time from the side menu (this immediately erases the learned profile from your device), or say "forget what you know about me" to the same effect.

California residents (CCPA / CPRA). If you are a California resident, you have specific rights regarding your personal information, described below.

Categories of personal information we collect. In the past 12 months we have collected the following statutory categories of personal information:

• Identifiers — email address (waitlist), IP address, session ID (UUID), and advertising/device identifiers (such as cookies set by the Meta Pixel and click identifiers like fbclid).
• Internet or other electronic network activity — pages viewed, the ad or referrer that brought you, and your interactions with the site.
• Geolocation data — only in the mobile app, with your permission; stored only on your device. We do not receive or retain it on our servers.
• Audio information — voice recordings, processed in transit for transcription and never stored.
• Inferences — only in the mobile app, as the on-device learned profile, which stays on your device.

Sources: directly from you (email, messages, voice), automatically from your device and browser, and from our advertising partner. Business / commercial purposes: to operate, secure, and improve the Service and to measure our advertising, as described above. Categories of third parties with whom we share information are listed in Section 3.

Sale and sharing. We do not sell your personal information for money. However, our use of the Meta Pixel and our sharing of identifiers and a hashed (irreversible) email with Meta for ad measurement and audience matching may qualify as "sharing" for cross-context behavioral advertising under California law. You have the right to opt out. To opt out, you may: (a) adjust your Meta Ad Preferences; (b) enable the Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out; or (c) email us at [email protected] with the subject "Do Not Sell or Share My Personal Information." We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA, and we do not use it to infer characteristics about you. We are therefore not required to offer — and you do not need to exercise — a separate "right to limit" the use of sensitive personal information.

Your California rights: the rights to know / access, to delete, to correct, to opt out of sharing, and to non-discrimination for exercising these rights. You will not be discriminated against, denied service, or charged a different price for exercising them. Authorized agents may submit a request on your behalf with proof of authorization, and we may ask you to verify your identity directly. We will respond within the timeframes required by the CCPA.

California "Shine the Light" (Civil Code § 1798.83). California residents may request information about our disclosure of personal information to third parties for those third parties' own direct-marketing purposes. We do not disclose your personal information to third parties for their own direct marketing. You may direct any such request to [email protected].

Your Privacy Choices. To exercise the opt-out and the choices above, use the "Your Privacy Choices" link in our footer or email [email protected].

EU / EEA / UK residents (GDPR): You have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases are your consent (waitlist and advertising cookies), our legitimate interests (service security and improvement), and contract performance (operating the service you request). You may withdraw consent at any time. Your data may be transferred to and processed in the United States under appropriate safeguards. You also have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us by email. We will respond within the timeframe required by applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. We encourage you to review it periodically. Continued use of the service after an update constitutes acceptance of the changes.

10. Contact

If you have questions, requests, or concerns about this policy, contact us at: