Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how Kilu AI ("Kilu AI," "Company," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Kilu AI website, application, APIs, and all related generative AI services. This policy is intended to comply with the Kenya Data Protection Act, 2019 ("KDPA").

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, password, and profile information.
• User Content: Text prompts, uploaded images, videos, audio files, and scripts.
• Chat messages: Content of messages sent to and received from the AI chat assistant.

2.2 Information Collected Automatically

• Usage data: Pages accessed, features used, timestamps, and generation jobs submitted.
• Device data: IP address, browser type, operating system, and general location.

3. How We Use Information

• To provide and improve the Service, including processing AI generation requests.
• To manage your account and provide customer support.
• To detect and prevent fraudulent or illegal activity.
• Machine Learning Adaptation: Kilu AI uses your interactions to learn and adapt its responses to your specific needs and expectations. We do not use your data to train Third-Party general-purpose models without separate consent.

5. How We Share Information

We transmit your content to third-party AI providers for processing, including Agnes AI, Replicate, Inc., and Google (Firebase). These Subprocessors handle data under their own terms and policies.

6. Biometric-Adjacent Data

Uploading photographs or voice recordings of faces/voices may be treated as biometric data under the KDPA. By uploading such content, you provide explicit consent to our processing for the sole purpose of generating the requested Output. We do not build persistent biometric identification profiles.

8. Data Retention

We retain your personal information for as long as necessary to provide the Service. Uploaded files and generated Output are typically retained for 30 days after generation, unless longer retention is required for legal or security investigations.

9. Your Rights

Under the KDPA, you have the right to access, correct, or delete your personal data. To exercise these rights, please contact us at [email protected].

13. Kenya Data Protection Act

We process personal data as a data controller in accordance with the KDPA. You have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

16. Contact Us

Kilu AI
Nairobi, Kenya
Email: [email protected]
WhatsApp/Phone: +254 717 866 266