Legal // Privacy

PRIVACY
POLICY

Effective Date May 8, 2026
Last Updated October 20, 2026

Cloak and Kernel, LLC ("Cloak & Kernel," "we," "us," or "our") develops software products. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites, including cloakandkernel.com and kernel.cloakandkernel.com, and our products and services (collectively, the "Services"). It also describes your rights with respect to that information.

The information we process depends on the Services and features you use. References to accounts, subscriptions, and billing apply only to Services that offer those features. Where consent is required, we request it separately; this Privacy Policy does not replace that consent.

We respect user privacy and collect only the information reasonably necessary to operate, maintain, and improve our Services and, where advertising is enabled, to support advertising as described below.

Some information is necessary for the operation of the Services. If you choose not to provide certain information, some features of the Services may not function properly.

01 //

Information
We Collect

1.1 // Information You Provide
  • Account and contact information, such as your name, email address, or username
  • Communications you send to us, including support requests and feedback
  • Payment and billing information processed through third-party payment providers (we do not store full payment card details)
1.2 // Information Collected Automatically
  • Device and application information such as device model, operating system version, language settings, and anonymous identifiers used for analytics and diagnostics
  • IP address and approximate location derived from IP (used for security, fraud prevention, and analytics)
  • Usage data such as features accessed, session duration, and in-app events
  • Crash reports and diagnostic data
  • Cookies and similar technologies, including those set by advertising partners where advertising is enabled, and the information collected through them
  • Preferences stored in your browser, such as Kernel's selected position and scoring format, which you may remove by clearing your browser's site data
1.3 // Information from Third Parties

We may receive limited information from third-party service providers that support our Services, such as analytics, infrastructure, or payment providers, subject to their own privacy policies.

02 //

How We Use
Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Services
  • Authenticate users and manage accounts
  • Process subscriptions and manage billing
  • Send transactional and service-related communications
  • Analyze usage patterns to improve product performance and user experience
  • Detect, investigate, and prevent fraud, abuse, and security incidents
  • Comply with applicable legal obligations
  • Respond to user inquiries and provide customer support
  • Where advertising is enabled, deliver and measure advertisements, subject to applicable consent requirements and privacy choices
03 //

Legal Basis
for Processing

Applicable to EEA, UK, and Switzerland residents.

  • Performance of a contract: Processing necessary to provide the Services you request
  • Legitimate interests: Analytics, fraud prevention, security, and product improvement, where these interests are not overridden by your rights
  • Consent: For advertising cookies and personalized advertising, and for certain analytics technologies, where required by law
  • Legal obligation: Compliance with applicable laws and regulatory requirements

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

04 //

How We Share
Information

We may share personal information in the following circumstances:

  • Service Providers: With trusted third-party providers who perform services on our behalf, such as hosting, analytics, customer support, and payment processing
  • Advertising: Where advertising is enabled, with advertising partners to deliver relevant advertisements, measure their performance, and prevent fraud, subject to applicable consent requirements and your privacy choices
  • Legal Compliance: When required to comply with applicable law, legal processes, or lawful requests by public authorities
  • Security and Fraud Prevention: To detect, prevent, investigate, or address fraud, abuse, security incidents, or technical issues
  • Business Transfers: In connection with a merger, acquisition, financing, sale of company assets, or other business transaction
  • With Your Consent: When you direct us to share information or otherwise provide consent
05 //

Third-Party
Service Providers

We work with third-party providers to operate, maintain, and improve our Services. The providers used and the information they receive depend on the Service and features you use. Providers acting on our behalf process personal information under applicable contractual safeguards and instructions. Other providers, including advertising partners, may also process information for their own purposes as described in their privacy policies.

Analytics & Product Intelligence
Infrastructure & Data Storage
Communications & Support
Monetization & Revenue

Each third-party provider maintains its own privacy practices governing how it processes personal information. We encourage users to review the privacy policies of these providers if they wish to learn more about how their data may be handled.

Advertising & Cookies

Where we display advertising through Google AdSense, Google and other third-party advertising partners may use cookies and similar technologies to collect information about your browser or device and your interactions with advertisements. These technologies support ad delivery, measurement, fraud prevention, and, where permitted, personalized advertising based on your visits to our websites and other websites. Google's advertising cookies enable Google and its partners to serve these advertisements. For information about Google's practices, visit How Google uses information from sites or apps that use its services.

You may opt out of Google's personalized advertising through Google Ads Settings, and of personalized advertising from participating third-party providers through the Digital Advertising Alliance's opt-out page. Before enabling advertising that requires consent or opt-out controls, we will provide the applicable controls and information about participating advertising partners and their privacy policies on the relevant Service. Where consent is required, we will obtain it before using advertising cookies or processing personal information for personalized advertising and provide a way to withdraw it. Opting out of personalized advertising does not necessarily remove advertisements; you may continue to receive ads that are not based on your interests.

06 //

Data
Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account data is retained for the duration of your account and for a reasonable period thereafter
  • Usage and analytics data may be retained in aggregated or anonymized form
  • Crash and diagnostic data is typically retained for up to 12 months

When personal information is no longer needed, we delete or anonymize it in accordance with our data retention practices.

07 //

International
Data Transfers

Cloak & Kernel is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

08 //

Your
Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information.

8.1 // General Rights

You may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate personal information
  • Request deletion of your personal information, subject to certain exceptions
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority
8.2 // EEA, UK, and Swiss Residents (GDPR / UK GDPR)

You may also have the right to:

  • Receive your personal data in a portable, machine-readable format
  • Object to processing based on legitimate interests
  • Request restriction of processing in certain circumstances
8.3 // California Residents (CCPA / CPRA)

California residents may have the right to:

  • Request disclosure of the categories and specific pieces of personal information collected about you
  • Request deletion of personal information we have collected about you
  • Request correction of inaccurate personal information
  • Limit use of sensitive personal information where applicable
  • Opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising
  • Not be discriminated against for exercising privacy rights

We do not sell personal information for money. Where advertising is enabled, we may share identifiers and internet activity with advertising partners for targeted advertising, which may constitute "sale" or "sharing" under applicable state privacy laws, including "sharing" under California law.

8.4 // Other U.S. States

Depending on your state of residence and whether its privacy law applies to our processing, you may have rights to access, correct, delete, or obtain a copy of your personal information; opt out of its sale, targeted advertising, or certain profiling; and appeal a decision regarding your privacy request. You may contact privacy@cloakandkernel.com to exercise applicable rights or submit an appeal. We do not discriminate against users for exercising applicable privacy rights.

8.5 // Advertising Privacy Choices

Before enabling advertising that involves the sale or sharing of personal information or targeted advertising, we will provide a "Your Privacy Choices" link on the relevant Service and configure recognition of Global Privacy Control (GPC) browser signals. When that advertising is enabled, we will honor GPC signals as requests to opt out of sale, sharing, and targeted advertising for the browser or device sending the signal. These controls will allow you to change your advertising preferences without creating an account.

8.6 // Account Deletion

In order to delete your account:

  • Email privacy@cloakandkernel.com with the subject line: "Delete Account Request."
  • In the body of your email, tell us the email you signed up with and confirm you are the account owner
  • Log out of the app

To protect your privacy we may take reasonable steps to confirm your identity before fulfilling your request.

After confirmation, account deactivation is typically processed within 72 hours. Account-specific data is deleted within 30 days.

09 //

Data
Security

We implement industry-standard technical, administrative, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10 //

Children's
Privacy

Our Services are intended for users 16 and older and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

We do not knowingly sell or share personal information of consumers under 16, or use their personal information for targeted advertising.

If we learn that we have inadvertently collected personal information from a child under 16, we will promptly delete that information.

If you believe we may have collected such information, please contact privacy@cloakandkernel.com.

11 //

Links to
Other Services

Our Services may contain links to third-party websites or services that are not operated by Cloak & Kernel. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing them with personal information.

12 //

Changes to
This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy and may provide additional notice, such as an in-app notification or email, where appropriate.

Where a change requires your consent under applicable law, we will request that consent before applying the change.

13 //

Contact
Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact:

Cloak and Kernel, LLC
Privacy Inquiries: privacy@cloakandkernel.com