Privacy Policy for Kimrel

Effective Date: April 21, 2026

1. Introduction

This Privacy Policy explains how Kimrel ("we," "our," or the "Service") collects, uses, stores, and discloses information when you access our website, create an account, use our chat or API features, or otherwise interact with our services.

Kimrel is an independent platform that provides a custom interface and related tools for third-party AI models. Our Service may provide access to models including Kimi K2, which is developed by Moonshot AI. Kimrel is not affiliated with, endorsed by, or sponsored by Moonshot AI.

By using the Service, you acknowledge that your information may be processed as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect information that is necessary to operate the Service, process transactions, secure accounts, and provide AI-powered features.

2.1 Account Information

When you create or access an account, we may collect:

Your name
Email address
Authentication provider information, such as Google or GitHub account details
Basic profile information made available through your selected sign-in provider

We use this information to create and maintain your account, authenticate you, provide support, and administer credits or subscriptions associated with your account.

2.2 Conversation, Prompt, and Output Data

When you use the Service's chat or API features, we may collect:

Prompts, messages, instructions, and other content you submit
Model outputs and responses generated through the Service
Conversation history and related session context
Model selections and request parameters associated with your usage

We use this information to provide the requested AI functionality, maintain conversation continuity, troubleshoot service issues, prevent abuse, and improve the reliability of the Service.

We do not use your conversations to train our own proprietary AI systems.

2.3 API and Usage Data

If you use our API or developer features, we may collect:

API key identifiers and related usage records
Request timestamps, endpoint usage, and model usage data
Credit consumption, rate-limit, quota, and operational metrics
Diagnostic logs relevant to security, fraud prevention, and debugging

We use this information to authenticate API access, enforce usage controls, detect abuse, investigate incidents, and administer billing or credit balances.

2.4 Device, Technical, and Log Information

We may automatically collect technical information such as:

IP address
Browser type and version
Device type and operating system
Referring pages, pages visited, and approximate usage patterns
Session identifiers, request IDs, and related technical diagnostics

We use this information for service delivery, analytics, security monitoring, fraud prevention, and compatibility improvements.

2.5 Cookies and Session Data

We may use cookies, local storage, and similar technologies to:

Maintain sessions and sign-in state
Remember user preferences
Support guest-session limits and abuse prevention controls
Improve site functionality and reliability

You can control cookies through your browser settings, but disabling certain cookies may affect the availability or functionality of parts of the Service.

2.6 Payment and Billing Information

When you purchase credits or subscriptions, we may collect or receive transaction-related information such as:

Billing contact details
Purchase amount, currency, and product purchased
Transaction status and payment timestamps
Limited payment metadata provided by our payment processors

Payment processing is handled by third-party providers such as Creem or Stripe, and we do not intentionally store full payment card details on our own servers.

3. How We Use Your Information

We may use collected information to:

Provide, operate, maintain, and improve the Service
Authenticate users and secure accounts
Process payments, credits, subscriptions, and related support requests
Deliver chat, API, and AI-powered functionality you request
Monitor usage, enforce quotas, rate limits, and platform policies
Detect, prevent, investigate, and respond to fraud, abuse, security incidents, or technical issues
Communicate with you about service updates, account issues, billing matters, or support inquiries
Comply with legal obligations and enforce our terms, policies, and rights

4. Third-Party AI Models and Providers

To deliver AI features, we may route prompts, conversation content, request metadata, and related technical information to third-party AI model or inference providers.

This may include support for models such as Kimi K2, which is developed by Moonshot AI. We provide an independent interface and related tooling built around such models, but we are not the developer, owner, or operator of the Kimi K2 model and are not affiliated with Moonshot AI.

Third-party AI providers may process submitted content in accordance with their own terms, policies, and infrastructure practices. Where applicable, you should review the relevant provider terms and policies before using model-specific features through our Service.

We do not sell your personal information or conversation content as part of a data brokerage business. We may disclose information in the following limited circumstances:

Service Providers: to vendors and contractors that help us operate the Service, including hosting, analytics, authentication, customer support, payment processing, and infrastructure providers
AI and Inference Providers: where necessary to generate responses or provide AI-related functionality you request through the Service
Legal Compliance: when disclosure is required to comply with applicable law, regulation, legal process, or lawful governmental request
Protection of Rights and Safety: to protect the rights, property, security, and safety of the Service, our users, or others
Business Transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable legal requirements
With Your Direction or Consent: when you instruct us to share information or otherwise provide consent

6. Data Retention

We retain information for as long as reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, enforce agreements, and protect the security and integrity of the platform.

Retention periods may vary depending on the type of information and the purpose for which it was collected. For example:

Account and billing records may be retained for legal, tax, and accounting purposes
Conversation, API, and operational logs may be retained for service continuity, abuse prevention, debugging, and security review
Certain information may be deleted, anonymized, or aggregated when it is no longer reasonably required

If you request deletion of your account or personal data, we will review and process the request subject to applicable legal, security, fraud-prevention, accounting, and contractual retention requirements.

7. Data Storage and Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures may include encryption in transit, access controls, credential management, logging, and security monitoring.

No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and API keys. If you believe your credentials or API keys have been compromised, you should revoke them and contact us promptly.

8. Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

Request access to personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of personal information, subject to applicable exceptions
Object to or restrict certain processing in limited circumstances
Withdraw consent where processing is based on consent
Opt out of non-essential marketing communications

To exercise applicable rights, please contact us using the contact details below. We may need to verify your identity before fulfilling certain requests.

9. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and take appropriate action.

10. Third-Party Links and Services

The Service may contain links to third-party websites, documentation, or services that we do not control. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing information to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date above. If we make material changes, we may also provide additional notice where required by law.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Service: Kimrel
Email: support@kimrel.com
Website: https://kimrel.com