Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains what information Kanakaw ("we", "us") collects when you use our website, applications and API (the "Service"), how we use it, and the choices you have.

1. Information We Collect

Information you provide

• Account data: your email address and a hashed password. We never store passwords in plain text.
• Content: prompts you submit and images you upload as inputs for generation.
• Payment data: purchases are processed by third-party payment providers; we receive order status and amounts but do not store card numbers or wallet keys.
• Communications: messages you send to our support addresses.

Information collected automatically

• Usage data: generation history (model, type, timestamps, credit charges) tied to your account.
• Technical data: IP address, browser type and basic request logs used for security, rate limiting and debugging.

2. How We Use Information

• To operate the Service: run generation jobs, store your results, maintain your credit balance.
• To secure the Service: prevent fraud, abuse and unauthorized access.
• To communicate with you: account verification emails, important service announcements and support replies.
• To improve the Service: aggregate, de-identified usage statistics.

We do not sell your personal information, and we do not use your prompts or uploads to train AI models.

3. Cookies and Local Storage

We use browser local storage to keep you signed in and remember interface preferences. We do not use third-party advertising cookies or cross-site trackers.

4. Sharing

We share data only with:

• Infrastructure providers (cloud hosting, GPU compute, object storage) that process data on our behalf under contractual safeguards;
• Payment providers to process purchases;
• Authorities when required by law or to protect our rights and users' safety.

5. Retention

• Account data is kept while your account is active.
• Generated content and uploads are kept so you can access your history; you may request deletion at any time.
• Server logs are retained for a limited period for security purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email [email protected] from your registered address. We respond within 30 days.

7. Security

We use industry-standard measures: TLS encryption in transit, hashed passwords and API keys, least-privilege access to production systems, and isolated processing infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Children

The Service is not directed to children and may not be used by anyone under 18 years of age. We do not knowingly collect data from minors; if you believe a minor has provided us data, contact us for deletion.

9. International Transfers

Our infrastructure may be located in different countries. Where data is transferred internationally, we rely on appropriate safeguards such as contractual protections with our providers.

10. Changes

We may update this Policy from time to time. Material changes will be posted on this page with an updated date.

11. Contact

Privacy questions or requests: [email protected] or via our contact page.