Privacy Policy

Confidentiality

Kilnery is built for leaders who carry real exposure — to boards, to markets, to public scrutiny. We designed every layer of this platform around a single principle: your reflections are yours alone.

Your data is encrypted at every stage: in storage, in transit, and during processing. Where we use AI to enhance your reflection experience, your data is processed and returned and never used to train AI models. Privacy is built in.  

The technical details are below for those who want them. But here’s the commitment: we built this for people who need complete confidence in what they share.  

What We Collect

When you use Kilnery’s reflection platform at app.kilnery.com, we collect:

Account information: Your name and email address, used to create and manage your account.

Reflection responses: The personal reflections you submit through our monthly framework.

Usage data: Basic information about how you interact with the platform (pages visited, features used), collected to improve the experience.

We do not collect payment or billing information through the app. We do not collect location data. We do not sell, rent, or share your personal data with third parties for marketing purposes.

How We Protect Your Data

Encryption

All data is encrypted at rest using industry-standard 256-bit AES encryption. All data transmitted between your device and our servers is encrypted in transit using TLS.

Infrastructure

Our platform is built on enterprise-grade infrastructure:

Convex (our database provider) is SOC 2 Type II certified, audited annually by independent organizations. Customer databases are isolated with unique credentials. Convex is hosted on AWS, which holds certifications including SOC 2 Type II, ISO 9001, and more.

Vercel (our hosting provider) provides secure, globally distributed hosting with built-in DDoS protection and edge security.

‍

How AI Is Used

Kilnery uses AI to enhance your reflection experience, for example, by generating personalized prompts and surfacing patterns in your growth over time.

When your reflection data is processed by our AI features, it is sent to OpenAI’s API. Here is what happens with that data:

OpenAI does not use your data to train their AI models. This is a firm policy of their API service.

OpenAI may retain API inputs and outputs for up to 30 days solely for safety monitoring purposes, after which the data is automatically deleted.

Your reflections are stored permanently only within Kilnery’s own encrypted database, which you control.

Cookies and Analytics

We use minimal cookies necessary for the platform to function (such as keeping you logged in). We may use basic analytics to understand how the platform is used and to improve the experience. We do not use advertising cookies or tracking pixels. We do not share analytics data with third parties.

Your Rights and Controls

You have the right to:

Access your data: Request a copy of all personal data we hold about you.

Delete your data: Request that we delete your account and all associated reflection data from our systems.

Export your data: Request your reflection data in a portable format.

Withdraw consent: You may stop using the platform at any time.

To exercise any of these rights, contact us at concierge@kilnery.com.

‍

Data Retention

We retain your reflection data for as long as your Kilnery membership is active. If you cancel your membership or request deletion, we will delete all of your reflection data from our systems within 30 days.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the platform before the changes take effect.