Privacy Policy

Effective September 2, 2026

Data we collect

Account and profile: name, email address, password hash, interface language, role, preferred AI tool, learning preferences, progress, saved conversations, and account identifiers. AI content: the prompt you enter, your selected role and tool, language, name, and up to the most recent 12 conversation messages when you explicitly allow text AI. When you explicitly allow voice AI, the recording is sent for transcription and the resulting transcript is used as your prompt. Purchases: product, transaction, subscription, entitlement, and status records; Ken Mentor does not receive full card numbers or Apple payment credentials. Diagnostics and optional analytics: security and error records, a device-scoped random identifier, and product-interaction events. Prompts and recordings are not included in analytics events.

How we use data

We use this information to provide and personalize practices and roadmaps, generate requested AI responses, transcribe requested voice input, sync progress, secure accounts, verify entitlements, deliver account messages, diagnose failures, and—only when analytics is enabled—measure the product funnel.

AI consent and third-party processing

Before any text or voice content leaves the device, Ken Mentor names the data involved and asks for permission. Text prompts and the context listed above are processed by Cloudflare Workers AI. Voice recordings are processed by Cloudflare Workers AI for transcription, then the transcript and conversation context are processed for the response. Cloudflare states that it does not use customer content to train or improve AI models without explicit consent and that Workers AI does not persistently store that content unless a customer separately enables storage. Ken Mentor stores conversation messages in its database only when needed to provide account sync and conversation history. You can refuse AI processing and continue using non-AI parts of the app.

Other service providers

Cloudflare hosts the application, database, security layer, and AI processing. Apple processes iOS purchases and subscription controls. Stripe processes web payments. Resend delivers transactional account email. These providers receive only the information needed for the requested service. Ken Mentor requires service providers handling Ken Mentor data to protect it consistently with this policy and applicable law; if a provider cannot do so, we will stop the relevant transfer or use.

Retention

Account, profile, progress, saved conversations, and entitlement records remain while the account is active and are deleted when the in-app account deletion completes, except records a payment processor must retain by law. Optional analytics events are automatically deleted after 90 days. Operational error records are automatically deleted after 30 days. Expired account verification and recovery tokens are automatically deleted within 30 days after expiration. Sent reminder records are automatically deleted after 30 days. Residual copies may remain in rolling disaster-recovery snapshots for up to 30 days and are not used to recreate a deleted account.

Your choices

Open Profile → AI & Privacy to allow or revoke text AI, voice AI, and optional analytics separately. Revocation stops future transmission; it does not undo processing already completed at your request. You can export your data or permanently delete your account from Profile. Apple subscriptions must be canceled separately through Profile → Manage Plan or Apple subscription settings.

Children and families

The app presents general-audience educational content and does not ask for a date of birth. When local law requires parental authorization, a parent or legal guardian must authorize account creation, paid features, and AI processing for the child. Parents may contact us to request access, deletion, or help managing a child's data. Users should not enter sensitive personal information about themselves or others.

Security

We use encrypted transport, hashed passwords, authenticated sessions, cryptographic verification of Apple transactions, request limits, security headers, monitored errors, and rolling database recovery. No system is perfectly secure.

Contact

Privacy requests: support@kennethyepez.com.