Kanaf Privacy Policy

1. Information We May Collect

Depending on how you use Kanaf, we may collect or store:

• Account information, such as your email address and authentication information, if you choose to create or use an account.
• Messages you submit through Kanaf’s chat.
• Conversation and session history, summaries, reports, and related content.
• Information you voluntarily provide in your profile or onboarding, such as your name, age range, language, dialect, life stage, and preferences.
• Voice recordings when you choose to use voice input, and the resulting transcript.
• Technical and usage information required to operate the service, apply usage limits, prevent abuse, and maintain service reliability.
• Subscription and entitlement information associated with Kanaf Plus.

Kanaf does not require users to provide more personal information than is reasonably necessary to provide the features they choose to use.

2. Guest Access

Kanaf allows users to access its core chat functionality as a guest without creating an account.

Guest use may be subject to a limited usage allowance.

Account-based features, such as full history, synchronization, search, reports, long-term profile continuity, or certain subscription-related functionality, may require sign-in.

3. How We Use Information

We use information only for purposes related to providing and operating Kanaf, including:

• Providing AI-powered conversations.
• Personalizing responses when users choose to provide contextual information.
• Saving and retrieving sessions for registered users.
• Generating summaries, reports, titles, and related session features.
• Converting voice input into text.
• Managing subscriptions, entitlements, and usage limits.
• Preventing fraud, abuse, and security incidents.
• Maintaining and improving service reliability.

Qantara Apps Studio does not sell users’ personal information.

4. Artificial Intelligence Processing

Kanaf uses external artificial-intelligence services to provide certain features.

AI requests are routed through:

Lovable AI Gateway

Kanaf currently uses:

• Google Gemini for conversational processing, generation of responses, and related text-based AI features.
• OpenAI for voice transcription when users choose to use voice input.

Information transmitted for AI processing may include:

• The user’s current message.
• Relevant portions of the conversation history.
• Context or profile information voluntarily provided by the user when needed to generate contextual responses.
• Session summaries or continuity information when relevant features are enabled.
• Voice recordings when voice input is used.

AI services may also be used for features such as session summaries, reports, title generation, or certain content-related search functionality.

Kanaf does not intentionally include the user’s account email address, account identifier, authentication token, or device identifier in the content sent to the AI model as part of the AI prompt.

5. Your Consent Before AI Data Transmission

Kanaf does not transmit your messages, conversation context, profile information, or voice recordings to external AI services before obtaining your explicit consent.

Before the first use of a feature that requires external AI processing, Kanaf provides a disclosure explaining:

• What information will be transmitted.
• Why it will be transmitted.
• Which services or providers will process it.
• That this processing is necessary to provide the requested AI-powered functionality.

The user must take an affirmative action to consent before transmission begins.

If you decline, you may continue to access the application, but AI-powered features that require external processing will not function.

You may review or withdraw your AI-processing consent from Settings. Once consent is withdrawn, Kanaf will stop future AI transmissions until you provide consent again.

6. Third-Party Services

Kanaf may use third-party services to provide specific functionality, including:

• Lovable AI Gateway — routing of AI-processing requests.
• Google Gemini — conversational and text-based AI processing.
• OpenAI — voice transcription and related processing.
• Supabase / associated backend infrastructure — authentication, database storage, sessions, and backend functions.
• RevenueCat — subscription and entitlement management.
• Apple and Google — when users choose to authenticate using their respective login services.

Qantara Apps Studio selects service providers that provide appropriate safeguards for the personal information they process and requires service providers processing data on its behalf to handle that information consistently with the purpose of the processing, this Privacy Policy, and applicable contractual and data-protection obligations.

Information processed by third parties may also be subject to those providers’ applicable privacy and data-processing terms.

7. Storage and Security

User information may be stored using trusted cloud infrastructure used by Kanaf’s backend.

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration, misuse, or disclosure.

However, no electronic storage or transmission method can be guaranteed to be completely secure.

8. Data Retention

We retain information for as long as reasonably necessary to provide Kanaf and fulfill the purposes described in this Policy.

Some information may be retained longer when reasonably necessary:

• To comply with legal obligations.
• To maintain service security.
• To prevent fraud or abuse.
• To resolve disputes.
• To protect legal rights.

Information processed by external providers may also be subject to those providers’ applicable processing and retention terms.

9. Account and Data Deletion

Registered users can request permanent deletion of their account directly within Kanaf:

Settings → Account → Delete Account

Following confirmation, the account and associated application data will be deleted or de-identified, including relevant conversation, session, preference, and profile information, except where limited retention is legally required or reasonably necessary for security, fraud prevention, dispute resolution, or protection of legal rights.

Guest users may stop using Kanaf at any time. Certain operational records associated with anonymous use may be retained only as reasonably necessary to operate or protect the service and prevent abuse, after which they may be deleted or de-identified.

10. Authentication

Kanaf may provide optional authentication methods including:

• Email and password.
• Sign in with Apple.
• Google Sign-In.

Authentication is not required to access the basic guest chat functionality.

When you choose a third-party authentication provider, Kanaf receives only the information made available through that service as necessary to establish or access your account.

11. Subscriptions

Kanaf may use RevenueCat to manage subscription status and feature entitlements.

Qantara Apps Studio does not directly receive or store payment-card details processed by Apple App Store or Google Play.

12. Kanaf Is Not a Medical Service

Kanaf provides general emotional support, reflection, organization of thoughts, and wellbeing tools.

Kanaf does not provide medical or psychological diagnosis or treatment and is not a substitute for a physician, mental-health professional, emergency service, or professional healthcare.

13. Changes to This Privacy Policy

We may update this Privacy Policy when Kanaf’s features, data-processing practices, or legal requirements change.

The current revision date will appear at the top of this page.

14. Contact Us

For questions concerning privacy, personal data, account deletion, or AI-processing consent, contact: