Kineto Privacy Notice

Last updated: November 24, 2025

1. Introduction

KINETO LIMITED ("we", "us", "our") provides an AI-powered, no-code platform that enables users to build, deploy, and manage real applications without writing code (the “Service”).

We also operate the website www.kineto.dev ↗, kineto.app and mykineto.app (the “Website”).

This Privacy Notice explains how we collect, use, and protect your personal data when you use our Website or Service.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: KINETO LIMITED, a company incorporated and registered in England and Wales with company number 16807588 whose registered address is at Alpha House, 100 Borough High Street, London, United Kingdom, SE1 1LB

If you have questions about this Privacy Notice or how your data is handled, please contact us at privacy@kineto.app ↗.

We have appointed an EU representative under GDPR: JetBrains N.V., Terrace Tower, Gelrestraat 16, 1079 MZ Amsterdam, The Netherlands, for questions related to EU data processing please contact us at privacy@jetbrains.com ↗.

2. Personal Data We Collect

We collect and process personal data in the following contexts:

A. When You Visit the Website

• Technical data: IP address, browser type, device identifiers, operating system, referral URLs, and page interaction data.
• Cookies and analytics data: collected through cookies and similar technologies (see Section 9).
• Contact, demo and waitlist forms: name, company, email, and any additional details you provide.
• Newsletter sign-ups: name and email address.

B. When You Use the Platform

• Account data: name, email address, and encrypted password.
• Project data: content, datasets, app configurations, and other material you upload or create.
• Usage data: log files, API activity, workflow events, and model interaction statistics.
• AI interaction data: prompts, completions, and metadata from AI features.
• Payment and billing data: processed securely by our payment provider (e.g., Stripe).
• Support data: any messages, attachments, or contextual information shared with our team.

We do not intentionally collect special category data (e.g., health data, political opinions, biometric information).

3. How We Use Your Data

We process personal data for the following purposes:

Purpose	Example	Legal Basis
To provide and maintain the Service	Account setup, app hosting, AI processing	Contract (Art. 6(1)(b))
To personalise and improve our AI features	Product optimisation, aggregated analytics	Legitimate interests
To handle billing and account management	Payment collection, invoicing	Contract / Legal obligation
To provide customer support	Responding to queries or bug reports	Legitimate interests
To send product updates and marketing	Newsletters, event invitations	Consent (Art. 6(1)(a))
To secure and monitor the Service	Preventing abuse, detecting fraud or misuse	Legitimate interests
To comply with legal obligations	Tax, audit, or regulatory requests	Legal obligation (Art. 6(1)(c))

4. Website Privacy

When you visit our Website:

• Cookies and Analytics: We use cookies and analytics tools (e.g., Google Analytics, Plausible) to understand visitor behaviour and improve site performance. You can control cookie preferences through our Cookie Banner or your browser.
• Contact Forms: Data submitted via contact or demo forms is used to respond to your request and may be stored in our CRM (e.g., HubSpot).
• Marketing Tools: With your consent, we use marketing automation tools (e.g., Mailchimp, HubSpot) to send you relevant updates.
• External Links: Our Website may link to third-party sites (e.g., GitHub, LinkedIn). We are not responsible for their privacy practices.

5. AI Features and Data Processing

Our platform includes AI-assisted features such as text generation, code suggestions, and automation design.

• Prompt and response data are processed solely to deliver the AI functionality requested by you.
• We do not use customer data to retrain public AI models.
• We may use anonymised, aggregated statistics to improve the quality, fairness, and safety of our AI models.
• You retain full ownership of the content, data, and applications you create.

6. Sharing Your Data

We share your data only with trusted third parties that help us operate our Website and Service, including:

• Hosting providers (e.g., AWS, Google Cloud)
• Payment processors (e.g., Stripe)
• Analytics and marketing services
• AI model providers (e.g., OpenAI, Anthropic, or similar, when applicable)

All third parties are subject to strict data processing agreements that ensure security and compliance.

A full list of our subprocessors — including their roles and locations — is available in our Subprocessors List ↗, which we update regularly.

We may also share data with regulatory or legal authorities, when required by law.

7. International Data Transfers

If we transfer data outside the UK (e.g., to cloud or AI providers based abroad), we use lawful transfer mechanisms such as:

• Adequacy regulations, or
• International Data Transfer Agreements (IDTAs) and UK Addenda to EU Standard Contractual Clauses (SCCs).

Copies of applicable safeguards are available upon request.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this Privacy Notice, or as required by law. Typical retention periods:

• Account and billing data: up to 6 years after closure.
• AI and project data: deleted or anonymised within 90 days after deletion by the user.
• Website analytics data: retained for up to 12 months, then anonymised.
• Marketing data: retained until consent is withdrawn.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable secure and functional operation of the Website and Service.
• Analyse usage and performance.
• Personalise content and marketing (only with your consent).

You can manage cookies through our Cookie Settings or your browser preferences. For detailed information, please review our Cookie Policy. ↗

10. Security

We maintain appropriate technical and organisational measures to protect personal data, including:

• Encryption in transit and at rest.
• Role-based access control.
• Secure data hosting with redundancy.
• Regular security reviews and audits.

Despite these measures, no online system can be completely secure. We recommend you use strong passwords and enable additional security features where available.

11. Children’s Privacy

Our Website and Service are not directed at children under the age of 13. We do not knowingly collect personal data from minors. If we become aware that personal data from a child under 13 has been collected, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately at privacy@kineto.app ↗.

12. Your Data Protection Rights

Under the UK GDPR, you have the right to:

• Access your personal data.
• Rectify incorrect or incomplete information.
• Erase data (“right to be forgotten”).
• Restrict or object to processing.
• Port your data to another service.
• Withdraw consent (where applicable).

To exercise your rights, email privacy@kineto.app ↗.

You also have the right to file a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk ↗.

13. Updates to This Privacy Notice

We may update this Privacy Notice from time to time.

When we make material changes, we will notify you through the Website, the platform, or by email.

The latest version is always available at https://kineto.dev/legal/privacy-notice ↗.