Who we are
Kenmi is run by Muhammad Ibrahim Khan ("we"), an individual based in Pakistan. We decide how your personal data is used, which makes us its controller under data protection law.
For anything about your data, write to support@kenmi.app or use the contact page.
What we collect
We only store what Kenmi needs to work:
- Your email address, to sign you in. When you ask for a sign-in code, we keep your email with a scrambled copy of the code until it is used or deleted.
- Your profile: the resume, skills, ideal job and rules you give us to grade against.
- A sign-in token, kept in your browser or the extension. We only store a scrambled copy that lets us recognise it. We do not use cookies.
- Your plan: its status, when the current billing period ends, and the customer and subscription IDs Paddle gives us. Your payment details stay with Paddle.
- How many posts you graded each day, so we can apply the Managed plan allowance.
- Website visits: Cloudflare Web Analytics counts the pages you view, the site that sent you and your country. It uses no cookies and does not identify you.
- Where you first came from: when you sign up, we save the site that first sent you to Kenmi, the first page you saw and any campaign tag in that link, so we know which of our posts and guides help people. It is deleted with your account.
- Service logs: Cloudflare records technical details about requests to our API, such as their time, the country they came from and any errors. Error logs can include short pieces of an AI reply. We use them to keep Kenmi running.
How grading handles your data
On the free plan you bring your own AI key. It is stored only in the extension, on your device, and grading requests go from your browser straight to the AI provider you chose, under that provider's terms. We never receive your key or the job posts you grade.
On the Managed plan, the job posts you grade and your profile are sent through our API to the Google Gemini API to be graded. Job posts can include details about the client who posted them, such as their name and country. We never store the job posts or their grades. Google does not use them to train its models, but may keep them for a limited time to detect abuse.
Grades are advice for you alone. Kenmi never makes decisions about you that have legal or similarly significant effects.
Why we use it
Each use of your data has a legal basis:
- Running your account, grading posts and providing your plan are necessary for our contract with you. Without your email and profile we cannot sign you in or grade anything.
- Protecting sign-in from bots, enforcing allowances and keeping service logs rely on our legitimate interest in keeping Kenmi secure and working.
- Billing and tax records are kept by Paddle, as merchant of record, to meet its legal obligations.
What we never do
We never sell or share your personal information, use it for advertising, or use it to make decisions about credit or lending. Our use of data from the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
Who helps us run Kenmi
A few services process data on our behalf, only to provide Kenmi:
- Cloudflare hosts the website and our API, stores our database and service logs, counts website visits with Web Analytics, and checks sign-ins for bots with Turnstile, which looks at technical details such as your IP address and browser.
- Google grades job posts on the Managed plan through the Gemini API.
- Resend delivers the emails we send you: sign-in codes, and notices about your account and plan.
- Paddle sells the Managed plan as our merchant of record and handles payments, tax and invoices. It receives your Kenmi account ID so it can link your subscription to you. We never see your card details.
Where your data goes
These services may process data in the United States and other countries. When data leaves the UK or the European Economic Area, it is protected by their data processing terms, including the Standard Contractual Clauses approved for that purpose.
How long we keep it
Sign-in codes are deleted within 2 hours. Sessions end after 30 days without use. Daily usage counts are deleted after 45 days. Service logs are kept for up to 7 days. Everything else is kept until you delete your account. Paddle keeps billing records for as long as tax law requires.
Your rights
You can update your profile at any time, or delete your account from the dashboard, which removes all of the data above except the service logs, which expire on their own. If you have an active subscription, cancel it first so you are not charged again.
You can also ask us for a copy of your data, to correct it, to restrict or object to how we use it, or to receive it in a portable format, by writing to support@kenmi.app. We will answer within one month.
If you think we have handled your data wrongly, you can complain to the data protection authority where you live, such as the ICO in the UK. We would appreciate the chance to fix it first.
Changes to this policy
If we change how we handle your data, we will update this page and its date, and email you about anything significant before it takes effect.