PRIVACY POLICY

Your data, what we do with it, and how to take it back.

This page says what Kognai collects when you use kognai.ai, the Achiri companion and the pay pages, where it goes, how long it stays and what you can do about it. It was written from what the software actually does, not from a template. We do not sell personal data and we do not use it for advertising.

Who we are

Kognai (the operator of kognai.ai) is responsible for the personal data described here. Questions and requests about your data: x@kognai.ai.

What this covers

• The website kognai.ai, including the documentation and the pay pages under kognai.ai/pay.
• Achiri, the companion app at kognai.ai/achiri (by invitation), and the Achiri bot on Telegram when you link it.
• The optional connections from Achiri to your own accounts (Google Calendar, Google Drive, Gmail).
• Golden Kog token analyses and other services you pay for with a crypto wallet.

The Kognai citizen app at app.kognai.ai and other Kognai products may add their own notice where they collect something different.

What we collect

How you get in, and how your account is protected

• Achiri opens only with your personal invitation link, sent to you privately. Typing an email address on the door does not open it. The link is signed by Kognai's server with a value only that server holds, so it cannot be guessed, and it stops working when your invitation ends or when the key is changed (you then receive a new link).
• Opening the link sets a signed cookie in your browser. Every request that reads or changes your personal data (your conversations, memory, files, wallet, settings, connected accounts) must carry that cookie, and Kognai's server checks on every request that the signature is valid, that it has not expired, that your invitation is still active, and that the request concerns your own account and no one else's. A request without it, or for another person's account, is refused.
• A device or a wallet that already holds another Achiri account is never attached to yours automatically. If you used Achiri on another device before, write to us and we link it by hand once we know it is yours.
• The Achiri bot on Telegram reaches your account only after you link your chat from inside Achiri.

Learning from conversations (off unless you say yes)

After your third conversation Achiri asks you, once, whether it may learn from your conversations. It is off until you say yes, and you can turn it off at any time in Settings: the next message is no longer recorded.

• Before anything is written, a privacy filter replaces emails, phone numbers, identity and passport numbers, bank and card numbers, wallet addresses and keys, visible street addresses and names you give with a placeholder. A row that still looks sensitive after the filter is dropped. A message that contains a password or a key is never kept.
• The record does not carry your email or your account identifier, only a one way code that cannot be traced back without a key we keep separately.
• Only answers you approved may be used to train Kognai's own models. Answers you corrected are kept to study the mistake, never to train.
• A conversation turn in which Achiri read one of your connected accounts (your Google Calendar or Drive, or any other account you connect) is never recorded for learning, even when learning is on, and is never used for corrections, tests or training.
• In Settings you can delete every learning record made from your conversations.

Connected accounts (optional)

You can connect your own accounts in Achiri, Settings, Connectors. Nothing is read until you connect, and each connection asks Google only for what that feature needs:

• Google Calendar, read only: when you ask about your agenda, Achiri reads your events for the next 7 days to answer.
• Google Drive, read only, plus permission for files Kognai creates: when you ask, Achiri searches your Drive by name and gives you the file name and link. When you ask it to save a file to your Drive, it can see and change only the files it created for you, never your other files.
• Gmail, read only: counts, your latest messages (sender, subject, date), a search by sender or subject, and the text of one message only when you ask for that message. Achiri never sends, labels or deletes mail.
• Telegram: you can link your Telegram chat to your Achiri, so the bot answers as the same Achiri with the same memory. We store the chat identifier. Your messages to the bot pass through Telegram.

The access keys Google gives us are encrypted (AES 256 GCM) and stored on Kognai's own server; they are never written to logs. When you disconnect, we delete them at once and ask Google to revoke the access. Calendar and Drive share one Google sign in with Gmail, so the revoke at Google happens when the last of them is disconnected. You can also remove Kognai's access at any time from your Google Account permissions page. Other account types shown as coming soon are not active.

Google user data

Wallets and payments

• Crypto payments. Paid services such as Golden Kog analyses are paid in USDC with a wallet you control, on Base or Solana, using the x402 protocol. A payment facilitator (PayAI) checks and settles the payment on chain. We store the paying wallet address, the amount, the network and the order. Wallet addresses and transactions are public on the blockchain by design; anyone can see them, and we cannot remove them.
• Linked wallet. If you link a wallet to Achiri, you sign a one time message to prove it is yours; we store the address and the link.
• Credits. Where a card or mobile payment is offered for Achiri credits, you pay on the payment provider's own page. Kognai never receives or stores your card number.
• Golden Kog acknowledgement. Before paying for a Golden Kog analysis you confirm that it is a risk analysis and signals only, never financial advice. The time of that confirmation is sent with your order.

Public data we analyse

Some Kognai services analyse public information, not information about you as a user. Golden Kog reads public blockchain records and market data about a token, plus token data bought from a data provider, and reports figures such as holder shares and flows; it does not publish lists of wallet owners. Our market intelligence service reads public posts and discussions on public websites. Our public account on X reads posts that mention it. If you think public information about you is being processed by us and you object, write to us.

Who processes it

Most of your personal data (conversations, memory, files, identity, connected account keys) is stored on a server Kognai operates itself, and many requests are answered by models that run on it. Other providers handle a part when a feature needs them:

Why we use it, and on what basis

• To provide the service you asked for (performance of our agreement with you): answering you, remembering what you told Achiri, making files, images and videos, delivering what you paid for.
• With your consent: learning from your conversations, connecting your accounts, linking Telegram or a wallet. You can withdraw consent at any time; it does not affect what was done before.
• Legitimate interests: keeping the service secure, preventing abuse and fraud, rate limits, fixing errors, measuring costs.
• Legal obligations: payment and accounting records, and answering lawful requests.

We make no decision with legal or similarly significant effects on you by automated means alone.

How long we keep it

• Conversations: your most recent turns, up to the limit of your plan; older turns become short summaries. Kept until you erase them or ask us to.
• Memory facts, rules, projects, programmes, files and documents: kept until you remove them or ask us to delete your account.
• Learning records: kept until you delete them in Settings, or ask us to.
• Connected account keys: until you disconnect, which deletes them immediately.
• Invitation and identity records: while you have access to Achiri, and deleted when you ask us to delete your account.
• Payment and order records: as long as accounting and tax law requires. On chain records cannot be deleted by anyone.
• Logs and error reports: kept for operating and securing the service; we delete what concerns you on request where the law allows.

Your rights, and how to use them

You have the right to access your data, to correct it, to have it deleted, to receive it in a portable format, to object to or restrict some uses, and to withdraw consent. Many of these you can do yourself in Achiri:

• Settings, memory: read what Achiri remembers and remove an item, or erase your conversation history and memory at once.
• Settings, files and documents: delete a file or a document.
• Settings, learning: turn learning off and delete every learning record.
• Settings, connectors: disconnect Google or unlink Telegram.

For everything else, including a copy of your data (sent as a machine readable file), deleting your whole account and everything linked to it, or a correction, write to x@kognai.ai from the email address you use with Kognai. We answer within one month. Erasing your conversation history in the app does not by itself delete summaries, files, projects or your identity record; ask us for full deletion and we delete them all.

If you think we handle your data unlawfully, you can complain to the data protection authority of the country where you live or work. We would like to hear from you first, so we can fix it.

People under 18

Kognai's services are not directed at children. We do not ask your age when you sign in. Achiri is by invitation, and a person under 18 may only use an account opened with a parent or guardian, who is recorded on the account. On such an account nothing of the young person's own money is ever used: credits come from a monthly allowance decided by the guardian, and requests are reviewed with stricter rules (nothing violent, sexual, frightening or commercial). If you believe a child is using Achiri without a guardian, write to us and we will act on it.

Cookies and browser storage

• Achiri sets two cookies when you open your invitation link: one that remembers your access, signed by Kognai and not readable by the page's scripts, which Kognai's server checks on every request for your data; and one with your account identifier. Both last 30 days.
• Your browser keeps your device identifier and app preferences in local storage. On a pay page, local storage keeps the link to an analysis you paid for, so a reload shows it again; the wallet connection tool may also keep its own session there.
• We use no advertising cookies and no third party analytics on kognai.ai.

Transfers and security

Some providers listed above process data in other countries, including outside the European Economic Area. Where the law requires it, we rely on the safeguards those providers offer, such as standard contractual clauses. We protect your data with encryption for connected account keys, a privacy filter on learning records, and access limited to what each part of the service needs. No system is perfectly secure: if a breach affects your data, we will tell you and the authority as the law requires.

Changes to this policy

When what we collect or how we use it changes, we update this page and its date. If a change matters for you, Achiri will tell you before it applies.

Version 2026.10.11. Last updated 11 October 2026.