Privacy Policy

Kanneko, a service operated by Shoptrix LLC, a California limited liability company ("Kanneko," "we," "us," "our"), operates the website kanneko.com and the AI driving-assistant service. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using Kanneko, you agree to the practices described here. If you do not agree, please do not use the service.

1. Information we collect

Email address
When you join our waitlist, we collect your email address. We do not collect any other personally identifying information during that process.

Conversation messages
When you chat with Kanneko, the messages you type or speak are sent to our AI providers to generate a response. The recent history of the chat (up to the last few messages) travels with each request from your own device. By default we do not keep the content of your conversations.

Help improve Kanneko (optional, adults 18+)
If this setting is offered to you in the chat and you expressly choose "Yes," we store a cleaned text copy of your messages and Kanneko's replies for up to 90 days to improve Otto, Peter and Rosa: unanswered questions, complaints, confusing replies, and where conversations break down. Before storage we automatically remove common email addresses, phone numbers, street addresses, payment-card numbers and ID numbers, and we do not store conversations that appear to contain health information. We never store audio for this purpose, never use it for advertising, never send it to Meta, and never sell or share it. We keep a record of your choice (yes, no, withdrawn or deleted), its date, and the version of this policy you saw, so we can show what you agreed to. Saying "No" does not change how Kanneko works for you, and we treat a Global Privacy Control signal as a "No." You can delete the stored text at any time from the chat or by emailing [email protected].

Anonymous usage statistics
To understand what drivers need, we count, per day, general topics of conversation (for example "fuel" or "traffic"), requests Kanneko cannot fulfil (such as directions), complaints, which companion and language were used, and how fast Kanneko answered. These counters contain no message text, no identifiers, and no exact time, and cannot be linked to you.

Otto's memory (optional account, adults 18+)
If you choose to, you can sign in with your email, without a password: we email you a one-time link that expires in 15 minutes. We use your email only to send that link; Kanneko's database does not store the email itself, only a protected fingerprint of it so we can recognize you next time. Our email provider, Resend, keeps standard delivery records of the message it sends (including the address) under its own privacy policy. If you then turn on memory and confirm you are 18 or older, Otto, Peter and Rosa remember durable things you tell them (your routes, hours, preferences, and people you mention) so they can help you better, from one day to the next. They never keep health, financial details, exact addresses, ID numbers, or anything about minors. You can see, add to, or delete what Kanneko remembers at kanneko.com/mi-memoria, turn memory off (which deletes everything it remembered), or delete your account at any time. If you don't use Kanneko for 12 months, your account and memory are deleted automatically. We record when you turn memory on or off and which version of this policy you saw. Memory is never used for advertising and never sent to Meta. A signed session cookie keeps you signed in for up to 180 days.

Voice recordings
When you send a voice note or use voice mode (on the website or in the mobile app), audio is recorded only while you have actively started a recording, there is no background or always-on listening. The audio is sent to our transcription providers (ElevenLabs, and Google as a backup) to convert it to text, processed in transit, and never stored on our servers. Only the resulting text is used to generate the response. Those providers handle audio under their own privacy policies, listed below.

Mobile app data stored on your device
The Kanneko mobile app keeps your conversation history, saved places, routes, and reminders only on your device (local storage). We do not store this data on our servers and we cannot access it. Specifically:

• Location: with your permission, the app uses GPS to save places, suggest routes, and trigger arrival reminders. Location data stays on your device; it is not uploaded to or retained by our servers.
• Contacts: with your permission, the app reads your contacts on-device only to place a call when you ask for it by voice. Your contacts are never uploaded, stored, or shared.
• Conversation history and reminders: stored locally so Kanneko can recall past chats and remind you of things. Deleting the app deletes this data.

Session identifier
We generate a unique session ID (UUID) stored in your browser's localStorage. This ID contains no personal data and is used only to maintain conversation context during your visit.

Server usage data
Our servers may automatically log standard technical information such as IP address, browser type, pages visited, and date/time of access. These logs are used solely for diagnostics and security.

Learned profile (mobile app)
When you use the Kanneko mobile app with Personalized Memory enabled, the app learns durable facts you share in conversation (such as frequent routes, routines, errands, and people you mention) to personalize replies and suggestions. This profile is stored only on your device, our servers process conversation excerpts in transit to extract these facts but never store the profile or the excerpts. The app never extracts health, financial, or precise home-address information.

Advertising and analytics data
When you reach our site from an advertisement or browse it, we and our advertising partner Meta Platforms, Inc. may collect device and usage identifiers, including cookies set by the Meta Pixel (such as _fbp and _fbc), your IP address, browser and user-agent, the pages you view, and advertising click identifiers such as fbclid, to measure ad performance and improve our campaigns. When you join the waitlist, we may also share a hashed (irreversible) version of your email address with Meta to measure conversions and match audiences. We never share your raw email address with advertising partners, and we never sell your personal information for money.

2. How we use your information

• Waitlist email: To notify you when Kanneko launches publicly. We do not send spam or sell your email to third parties for marketing.
• Chat messages: To process your request and generate the AI response in real time, and to update the anonymous daily usage counters described above.
• Product improvement: Only with your express "Yes," cleaned conversation text kept for up to 90 days to improve Kanneko's replies and companions. We do not use it, or the anonymous counters, to train third-party AI models or for advertising.
• Voice recordings: Solely to transcribe what you said into text, in transit. Kanneko never stores audio.
• Location and contacts (app): Solely to provide the feature you requested (saving a place, navigating, calling someone), processed on your device.
• Session: To maintain context during your active conversation.
• Account and memory (optional): Your email only to send your sign-in link; what you tell Kanneko, only if you turn memory on, to personalize its replies. Never for advertising.
• Learned profile (app): Solely to personalize Kanneko's replies and suggestions for you. It stays on your device and is never used for advertising, sold, or shared.
• Server data: To maintain security, detect abuse, and improve service stability.
• Advertising & measurement: To measure the performance of our advertising, understand how visitors reach us, and improve our campaigns. We do not sell your personal information for monetary value.

3. Third-party providers

To operate the service, we share certain information with the following providers. Each has its own privacy policy:

• Anthropic (Claude AI), Chat messages are sent to Anthropic's API to generate responses. Privacy policy: anthropic.com/privacy
• Google (Gemini AI), Used as a backup to transcribe voice notes to text, and as a fallback when Claude is unavailable. Privacy policy: policies.google.com/privacy
• ElevenLabs, Two uses. (1) Live transcription: while you are actively recording a voice note or talking in voice mode, your audio is streamed to ElevenLabs to turn it into text as you speak. Streaming starts only when you start a recording and stops when it ends; we do not store that audio on our servers, and only the resulting text is used to generate the reply. (2) Voice: the text of Kanneko's replies is sent to ElevenLabs to synthesize speech. Privacy policy: elevenlabs.io/privacy
• Supabase, Stores waitlist emails in a secure database. Privacy policy: supabase.com/privacy
• Cloudflare, Hosts the website and serves the backend (Cloudflare Functions), protects it from automated abuse (Cloudflare Turnstile, which may evaluate browser and device signals), stores a backup copy of the waitlist (so sign-ups are not lost if our main database fails), and stores the anonymous usage counters and, only for users who say "Yes," the cleaned conversation text and the record of privacy choices. Privacy policy: cloudflare.com/privacypolicy
• Resend, Processes and delivers our waitlist confirmation and notification emails. Receives your email address solely for this purpose, and to send the sign-in link if you ask for one. Privacy policy: resend.com/legal/privacy-policy
• Meta Platforms, Inc. (Facebook / Instagram), We use the Meta Pixel and Meta's Conversions API to measure the performance of our advertising and reach relevant audiences. This involves advertising cookies and a hashed (irreversible) version of your email address. Privacy policy: facebook.com/privacy/policy

Third-party apps opened at your request. When you ask Kanneko to navigate somewhere or play music, the app opens the corresponding app on your device (such as Google Maps or Spotify) with your request, for example, a destination or a music search. Those apps process that information under their own privacy policies; we do not control them and we receive nothing back from them.

4. Data retention

• Waitlist emails: Kept until you request deletion or until the service is discontinued.
• Chat conversations: Not kept, unless you choose "Yes" to "Help improve Kanneko." In that case the cleaned text is deleted automatically after 90 days, or sooner if you ask.
• Record of privacy choices: Kept as long as needed to demonstrate what you agreed to. It contains no message content.
• Anonymous usage counters: Kept as aggregate statistics; they contain nothing that identifies you.
• Voice recordings: Never stored by Kanneko. Audio is processed in transit by our transcription providers and discarded on our side.
• App data (conversations, places, reminders, contacts, location): Stored only on your device. Uninstalling the app removes it. We hold no server-side copy.
• Learned profile (app): Stored only on your device, until you turn off Personalized Memory in the app (which erases it), say "forget what you know about me," or uninstall the app. Our servers retain nothing.
• Session ID in your browser: Stored in localStorage. You can clear it anytime from your browser settings.
• Account and memory: Until you delete them, turn memory off (memory only), or go 12 months without using Kanneko. Sign-in links expire after 15 minutes.
• Server logs: Retained for a maximum of 30 days for diagnostic purposes.

5. Cookies, tracking & advertising technologies

We use the following technologies:

• Essential local storage: a session ID (UUID) stored in your browser's localStorage to maintain chat context during your visit. It contains no personal data and stays on your device, you can clear it anytime from your browser settings.
• Advertising & measurement cookies: the Meta Pixel sets cookies (such as _fbp and _fbc) and collects device and usage data to measure the performance of our ads on Facebook and Instagram and to reach relevant audiences. We also use Meta's server-side Conversions API for the same measurement purpose.

Your controls. When you first visit, a consent banner lets you accept or decline advertising cookies, and you can change your choice anytime via the "Your Privacy Choices" link in our footer. Until you accept, the Meta Pixel runs in a restricted, consent-revoked mode. We honor the Global Privacy Control (GPC) signal as a valid opt-out, and we apply Meta's Limited Data Use (LDU) so that California residents receive CCPA/CPRA protections automatically. If you decline or your opt-out is detected, we also stop sharing your information with Meta through our server-side Conversions API.

You can additionally control or block cookies through your browser settings and opt out of interest-based advertising through your Meta Ad Preferences, the DAA opt-out tool, or the NAI opt-out tool. See Section 8 for additional choices, including California opt-out rights.

6. Security

We implement technical safeguards such as HTTPS/TLS encryption, HTTP security headers, a Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), request rate limiting, and access controls to protect our systems and backend access. Data is processed on infrastructure located primarily in the United States. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's privacy

Kanneko is not directed to individuals under 13 years of age. We do not knowingly collect data from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

8. Your rights

Depending on your location, you may have the following rights:

• Access: Request what data we hold about you.
• Deletion: Request that we remove your email from the waitlist.
• Correction: Request correction of inaccurate data.
• Objection: Object to the processing of your data in certain circumstances.

In-app controls: In the Kanneko mobile app you can turn off Personalized Memory at any time from the side menu (this immediately erases the learned profile from your device), or say "forget what you know about me" to the same effect.

California residents (CCPA / CPRA). If you are a California resident, you have specific rights regarding your personal information, described below.

Categories of personal information we collect. In the past 12 months we have collected the following statutory categories of personal information:

• Identifiers, email address (waitlist), IP address, session ID (UUID), and advertising/device identifiers (such as cookies set by the Meta Pixel and click identifiers like fbclid).
• Internet or other electronic network activity, pages viewed, the ad or referrer that brought you, and your interactions with the site.
• Geolocation data, only in the mobile app, with your permission; stored only on your device. We do not receive or retain it on our servers.
• Audio information, voice recordings, processed in transit for transcription and never stored.
• Inferences, only in the mobile app, as the on-device learned profile, which stays on your device.
• Conversation content, only if you choose "Yes" to "Help improve Kanneko": cleaned text of your messages and Kanneko's replies, kept up to 90 days.
• Inferences (account memory), only if you sign in and turn memory on: durable facts such as your usual routes, hours and preferences, which you can see and delete.

Sources: directly from you (email, messages, voice), automatically from your device and browser, and from our advertising partner. Business / commercial purposes: to operate, secure, and improve the Service and to measure our advertising, as described above. Categories of third parties with whom we share information are listed in Section 3.

Sale and sharing. We do not sell your personal information for money. However, our use of the Meta Pixel and our sharing of identifiers and a hashed (irreversible) email with Meta for ad measurement and audience matching may qualify as "sharing" for cross-context behavioral advertising under California law. You have the right to opt out. To opt out, you may: (a) adjust your Meta Ad Preferences; (b) enable the Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out; or (c) email us at [email protected] with the subject "Do Not Sell or Share My Personal Information." We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA, and we do not use it to infer characteristics about you. We are therefore not required to offer, and you do not need to exercise, a separate "right to limit" the use of sensitive personal information.

Your California rights: the rights to know / access, to delete, to correct, to opt out of sharing, and to non-discrimination for exercising these rights. You will not be discriminated against, denied service, or charged a different price for exercising them. Authorized agents may submit a request on your behalf with proof of authorization, and we may ask you to verify your identity directly. We will respond within the timeframes required by the CCPA.

California "Shine the Light" (Civil Code § 1798.83). California residents may request information about our disclosure of personal information to third parties for those third parties' own direct-marketing purposes. We do not disclose your personal information to third parties for their own direct marketing. You may direct any such request to [email protected].

Your Privacy Choices. To exercise the opt-out and the choices above, use the "Your Privacy Choices" link in our footer or email [email protected].

EU / EEA / UK residents (GDPR): You have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases are your consent (waitlist and advertising cookies), our legitimate interests (service security and improvement), and contract performance (operating the service you request). You may withdraw consent at any time. Your data may be transferred to and processed in the United States under appropriate safeguards. You also have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us by email. We will respond within the timeframe required by applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. We encourage you to review it periodically. Continued use of the service after an update constitutes acceptance of the changes, except that if we change how we use the content of your conversations, we will ask for your permission again before the change applies to you.

10. Contact

If you have questions, requests, or concerns about this policy, contact us at: