Kanaf Privacy Policy

1. Information We May Collect

Depending on how you use Kanaf, we may collect or store:

• Account information, such as your email address and authentication information, if you choose to create or use an account.
• Messages you submit through Kanaf’s chat.
• Conversation and session history, summaries, reports, and related content.
• Information you voluntarily provide in your profile or onboarding, such as your name, age range, language, dialect, life stage, and preferences.
• Voice recordings when you choose to use voice input, and the resulting transcript.
• Technical and usage information required to operate the service, apply usage limits, prevent abuse, and maintain service reliability.
• Subscription and entitlement information associated with Kanaf Plus.

Kanaf does not require users to provide more personal information than is reasonably necessary to provide the features they choose to use.

2. Guest Access

Kanaf allows users to access its core chat functionality as a guest without creating an account.

Guest use may be subject to a limited usage allowance.

Account-based features, such as full history, synchronization, search, reports, long-term profile continuity, or certain subscription-related functionality, may require sign-in.

3. How We Use Information

We use information only for purposes related to providing and operating Kanaf, including:

• Providing AI-powered conversations.
• Personalizing responses when users choose to provide contextual information.
• Saving and retrieving sessions for registered users.
• Generating summaries, reports, titles, and related session features.
• Converting voice input into text.
• Managing subscriptions, entitlements, and usage limits.
• Preventing fraud, abuse, and security incidents.
• Maintaining and improving service reliability.

Qantara Apps Studio does not sell users’ personal information.

4. Artificial Intelligence Processing

Kanaf uses external artificial-intelligence services to provide certain features.

For users who have accepted the current consent (version 2), Kanaf processes core text conversations, session title generation, Kanaf Plus reports, session summaries, and cumulative personal summaries using Claude Haiku 5.5 through Anthropic’s direct API. This processing takes place only after the user gives explicit consent to Anthropic as the processing provider, and these functions do not pass through Lovable AI Gateway.

OpenAI’s direct API is used only for voice-to-text transcription; Kanaf’s other functions do not use OpenAI. During the migration, the core conversation for users who have only the previous consent (version 1) may be processed using Google Gemini through Lovable AI Gateway. Availability of this legacy processing is not guaranteed and it may be limited or unavailable. Sessions of users with only the previous consent are not automatically summarized through Anthropic; users of older app versions must update the app and accept the current consent to receive the full feature set.

• Anthropic (Claude Haiku 5.5) — core text conversations, session titles, Kanaf Plus reports, session summaries, and cumulative personal summaries through Anthropic’s direct API, only after explicit consent (version 2) to this provider.
• OpenAI’s direct API — voice-to-text transcription only.
• Google Gemini through Lovable AI Gateway — solely for the core conversation of users with the previous consent (version 1) during the migration, without any guarantee of availability.

Information transmitted for AI processing may include:

• The user’s current message.
• Relevant portions of the conversation history.
• Context or profile information voluntarily provided by the user when needed to generate contextual responses.
• Session summaries or continuity information when relevant features are enabled.
• Voice recordings when voice input is used.

AI services may also be used for certain content-related search functionality. A text-conversation request includes the message and relevant conversation context or profile information when needed; it does not include the user’s email address or login tokens. Kanaf does not intentionally include the user’s account identifier or device identifier in the AI prompt.

5. Your Consent Before AI Data Transmission

Kanaf does not transmit your messages, conversation context, profile information, or voice recordings to external AI services before obtaining your explicit consent.

Before the first use of a feature that requires external AI processing, Kanaf provides a disclosure explaining:

• What information will be transmitted.
• Why it will be transmitted.
• Which services or providers will process it.
• That this processing is necessary to provide the requested AI-powered functionality.

The user must take an affirmative action to consent before transmission begins.

Previous consent (version 1) to processing by Google or Lovable is not treated as automatic consent to Anthropic. Before sending any data to Anthropic, Kanaf requests fresh, explicit consent (version 2) that identifies Anthropic as the processing provider, and this requirement is enforced on Kanaf’s servers. Until that consent is obtained, no data is sent to Anthropic, and some features may be limited or unavailable until the user updates the app and accepts the current consent.

If you decline, you may continue to access the application, but AI-powered features that require external processing will not function.

You may review or withdraw your AI-processing consent from Settings. Once consent is withdrawn, Kanaf will stop future AI transmissions until you provide consent again.

6. Third-Party Services

Kanaf may use third-party services to provide specific functionality, including:

• Anthropic (Claude Haiku 5.5) — direct API processing for core text conversations, session titles, Kanaf Plus reports, session summaries, and cumulative personal summaries, only after explicit consent (version 2).
• OpenAI — direct API processing for voice-to-text transcription only.
• Google Gemini through Lovable AI Gateway — solely for the core conversation of users with the previous consent (version 1) during the migration; availability is not guaranteed.
• Supabase / associated backend infrastructure — authentication, database storage, sessions, and backend functions.
• RevenueCat — subscription and entitlement management.
• Apple and Google — when users choose to authenticate using their respective login services.

Qantara Apps Studio selects service providers that provide appropriate safeguards for the personal information they process and requires service providers processing data on its behalf to handle that information consistently with the purpose of the processing, this Privacy Policy, and applicable contractual and data-protection obligations.

Information processed by third parties may also be subject to those providers’ applicable privacy and data-processing terms.

7. Storage and Security

User information may be stored using trusted cloud infrastructure used by Kanaf’s backend.

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration, misuse, or disclosure.

However, no electronic storage or transmission method can be guaranteed to be completely secure.

8. Data Retention

We retain information for as long as reasonably necessary to provide Kanaf and fulfill the purposes described in this Policy.

Some information may be retained longer when reasonably necessary:

• To comply with legal obligations.
• To maintain service security.
• To prevent fraud or abuse.
• To resolve disputes.
• To protect legal rights.

Information processed by external providers may also be subject to those providers’ applicable processing and retention terms.

Retention of data processed through Anthropic’s direct API is governed by Anthropic’s applicable commercial terms and data-processing and retention conditions. This Policy does not promise zero retention or immediate deletion by Anthropic. Kanaf’s consent-withdrawal and account-and-data-deletion rules remain as described in Sections 5 and 9.

9. Account and Data Deletion

Registered users can request permanent deletion of their account directly within Kanaf:

Settings → Account → Delete Account

Following confirmation, the account and associated application data will be deleted or de-identified, including relevant conversation, session, preference, and profile information, except where limited retention is legally required or reasonably necessary for security, fraud prevention, dispute resolution, or protection of legal rights.

Guest users may stop using Kanaf at any time. Certain operational records associated with anonymous use may be retained only as reasonably necessary to operate or protect the service and prevent abuse, after which they may be deleted or de-identified.

10. Authentication

Kanaf may provide optional authentication methods including:

• Email and password.
• Sign in with Apple.
• Google Sign-In.

Authentication is not required to access the basic guest chat functionality.

When you choose a third-party authentication provider, Kanaf receives only the information made available through that service as necessary to establish or access your account.

11. Subscriptions

Kanaf may use RevenueCat to manage subscription status and feature entitlements.

Qantara Apps Studio does not directly receive or store payment-card details processed by Apple App Store or Google Play.

12. Kanaf Is Not a Medical Service

Kanaf provides general emotional support, reflection, organization of thoughts, and wellbeing tools.

Kanaf does not provide medical or psychological diagnosis or treatment and is not a substitute for a physician, mental-health professional, emergency service, or professional healthcare.

13. Changes to This Privacy Policy

We may update this Privacy Policy when Kanaf’s features, data-processing practices, or legal requirements change.

The current revision date will appear at the top of this page.

14. Contact Us

For questions concerning privacy, personal data, account deletion, or AI-processing consent, contact: