Cookies on Kythene

Pick which categories of cookies you're OK with.

Read our cookies policy and the privacy policy.

Loading…
Self-host licence Start free
kythene
Start free

Privacy policy

Last updated: 19 October 2026

Kythene (the "Company" or "we") take your privacy very seriously. Our philosophy is to have the smallest privacy footprint possible and to be open, transparent and decent in how we operate with your data.

Kythene is a trading name of Tamperan Ltd, a company registered in England and Wales (company number 17324867), whose registered office is at Piccadilly Business Centre, Aldow Enterprise Park, Manchester M12 6AE. Tamperan Ltd is the data controller for the personal data described in this policy.

The purpose of this policy is to describe what information we collect and hold, and what we do with it.

Applicability

This policy applies to all visitors to our website, and all accounts.

By submitting your information through our website or software you agree to the terms of this policy and expressly consent to the collection, use and disclosure in accordance with this policy.

Compliance

We are compliant with, and operate within the terms of, the GDPR, CCPA and other relevant legislation.

Part of this compliance includes your right to access (and request removal of) any data we hold about you. If you wish to make such a request, please contact us via our contact form. Requests will be handled in compliance with relevant legislation.

Information we collect & how it is used

Product analytics

We use PostHog for product analytics, to understand how the product is used so we can improve it. We use PostHog's EU cloud. Analytics from your browser goes through our own domain on its way to PostHog, which doesn't pass your IP address on, and PostHog is set not to store IP addresses anyway. Instead we add the country and region your visit comes from. This happens in three ways:

  • Before you make a cookie choice, if you're in one of the places listed under Your cookie choice, our website and application send PostHog a basic record of each page you view, and of when you leave it: the page's address and title, the page or site that sent you, any campaign tags in the link, how long you spent on the page and how far down it you scrolled, your browser, operating system, device type, screen size, language and time zone, and your country and region. Nothing is stored on your device for this (no cookies, no local storage), nothing else about your visit is recorded, and no profile of you is built. If you then accept analytics, these page views are not linked to you. If you reject it, nothing more is sent. We do this on the basis of our legitimate interests: knowing how many people visit and which pages they read, without storing anything on your device.
  • When analytics is on, PostHog stores an identifier on your device (in a cookie and your browser's storage, for up to a year) and records how you use our website and application: the pages you view, clicks and other interactions (with the text of what you click hidden), where you click and scroll, page performance, errors and browser console messages, and session recordings - a replay of your visit showing what was on the page and what you did. What you type into form fields is hidden from recordings, but the rest of the page is not, so in the application a recording can include the content of your workspace that was on screen. If you're signed in, this is linked to your account id. Session recordings are kept for 30 days.
  • On our servers, we record a small set of product-usage events in the application - including the CLI and agent (MCP) access, which have no web page to consent through - and on our website (for example when you sign in, or when work is published, recalled or remembered). These are recorded whatever your cookie choice, because they don't store anything on your device; when analytics is on, they're also linked to PostHog's identifier for your browser. When you're signed in, or analytics is on, we also report errors you run into on our servers, with the address of the page and the kind of request. These events carry only structural metadata (counts, timings, and which features were used) and never the content of your memories, artifacts or search queries. They are pseudonymous, tied to your account id where you're signed in, and used solely to understand activation and product usage and to fix faults - never sold, and never used for advertising profiles.

PostHog keeps analytics data for up to 7 years, except session recordings, which are kept for 30 days.

If you're in the UK, the European Economic Area, Switzerland or Canada (only Quebec, where we can tell your province), analytics stays off until you accept it in the cookie banner. Everywhere else it's on from your first visit and the banner doesn't open by itself: you can switch analytics off at any time via Manage cookies in the footer. If your browser sends a Global Privacy Control signal, analytics is off unless you switch it on yourself. You can change your choice the same way at any time, and when you switch analytics off, PostHog's cookie and browser storage are removed from your browser.

We keep a record of each cookie choice - when it was made, which version of this policy it was made against, what you chose, whether you were in one of the places above, in a US state with its own privacy law, or elsewhere, how the choice was made (the banner or a Global Privacy Control signal), and your account id if you were signed in - as evidence of consent. A choice made before you sign in is recorded again against your account when you do. These records don't include your IP address or browser. If you delete your account, your account id is removed from them. We keep each record for 6 years, then delete it.

Your online account

When you sign in or create an account you use a 3rd party sign-in (e.g. GitHub, Google, Apple, Microsoft) that you already have and which is governed by the 3rd party's terms.

Through that sign-in, we collect only basic profile information (e.g. name, email, locale, URL to avatar image) which you consent to via your sign-in provider at the point of signing in. We retain this information for the life of your account with us.

You may provide further details in your online account as part of using the tool. This information is held securely and not disclosed to 3rd parties.

Messages you send us

If you write to us through our contact form, we keep your message, name and contact details for 2 years. After that we delete them and keep only a record that a message was sent, when, and what it was about.

Subscriptions & payments

We use a reputable 3rd party payments processor and we do not collect, hold, store nor have access to your payment details.

We do collect and retain records relating to any payments or subscriptions (e.g. amount paid, when, what for) for the purposes of administering your account and subscription, and for administering our business as required by law.

Self-host licence keys

If you buy a self-host licence, we issue you a signed licence key. That key is a small, readable token that carries your business contact details - contact name, work email, company name and company URL - so that the software you install can identify who it is licensed to and configure itself, and so a key can be traced back to the account it was issued to.

These are business contact details only; a licence key never contains a password, a card number, or any other secret. A licence key is readable by anyone who holds it, so please treat it as you would any other business credential and share it only within your organisation. We retain the licence record (including these contact details) for as long as the licence is active and for as long afterwards as we are required to keep business records. You can review and correct these details from your account at any time; a corrected key is re-issued automatically.

3rd party integrations

You may choose to use a number of 3rd party integrations in your use of the software, e.g. for advertising or social sync. Any such activity by you is at your discretion and is bound by the terms you agree with the 3rd party.

Anonymous aggregated data

We reserve the right to share anonymous aggregate data publicly. Such disclosure will be aggregated and anonymous and not contain sufficient detail to identify any customer.

Disclosure

We do not disclose your data to any third party except as expressly outlined in this policy, or with your explicit consent, or for these limited circumstances:

  • to protect, enforce, or defend the legal rights, privacy, safety or property of the Company, our affiliates or their employees, agents and contractors (including enforcement of our agreements and Terms of Use)
  • to protect against fraud
  • to comply with the law, where we are obligated to disclose such data to a government or law enforcement
  • to respond to valid requests from government and public authorities

Such disclosures, if made, may be outside your country of residence.

AI

Your data is not used to train AI models, nor is it disclosed to any AI provider, except as required to deliver features you actively use (such as keyword analysis), and then only the data necessary for that feature.

Location

Any information you provide to us will be stored and processed on secure servers.

Marketing

If you consent, we may periodically contact you electronically to update/inform you about new or exciting developments relating to Kythene or new products we create. You can manage your consent online in your profile.

We do not disclose, nor sell access to, your data to any third party for any marketing purposes besides what you may opt-in and consent to.

Cookies

Our website and application use these strictly necessary cookies and browser storage, which are always on:

  • Signing in - keeps you signed in. It's cleared when you close your browser, unless you choose to stay signed in, when it lasts 30 days. Signing in also uses short-lived cookies, for an hour or less, that protect the sign-in itself.
  • Your cookie choice - remembers what you chose, for 12 months.
  • Messages - carries a one-off message (such as "saved") across a page load, for 15 seconds.
  • Shared links - if you open a shared link that needs a code, PIN or password, remembers that you've entered it so you aren't asked on every page. These cookies (named kythene_v_, kythene_sc_ and kythene_scpin_, followed by part of the link's id) last 30 days and are only sent on shared-link pages.
  • Invitations - remembers the invitation you're accepting while you sign in, for 30 minutes.
  • Connecting an AI tool - remembers which AI tool you picked when connecting, in your browser's local storage.
  • The application's own screens - in the application, remembers which review panels you had open, in your browser's session storage, which is cleared when you close the tab (as is a note that you've just pulled to refresh, in the installed application); if you dismiss the offer to install the application, remembers that for 30 days in local storage; and keeps a copy of an offline page in your browser's cache, so you see a proper message rather than an error when you lose your connection.

These are optional: off until you accept them in the places listed under Your cookie choice, and on by default elsewhere until you switch them off:

  • Analytics - PostHog's cookie and browser storage, as described under Product analytics.
  • Preferences - in the application, your light or dark theme, in local storage.

Cloudflare, which sits in front of our website and application to protect them, can set its own security cookies. When you buy or manage a licence, you're taken to pages hosted by Stripe, our payments processor, which sets its own cookies on those pages. We don't use advertising or marketing cookies.

Contact

For any privacy questions or concerns please contact us via our contact form or by email at support@kythene.com

Changes to this policy

This policy may be updated from time to time. Any changes become effective at the time they are published.

We will not make changes that materially affect the privacy of your data without giving advance warning and/or the ability to opt in/out of the change.