Privacy Policy

1. Who we are

Peppermint LLC, operating as Kerny ("we", "our", "us"), is a web analytics assistant that connects to Google Analytics 4 (GA4) to help you understand your website data. Our service is available at kerny.io.

For questions about this policy, contact us at hello@kerny.io.

2. What data we collect

We collect the following categories of information:

• Account information — your name and email address when you sign up via Google OAuth
• Google Analytics data — read-only access to your GA4 properties to answer your questions. We access metrics, dimensions, and reports from your connected GA4 accounts
• Usage data — questions you ask Kerny, features you use, and session information to improve the product
• Technical data — IP address, browser type, and device information for security and performance

3. How we use your data

We use collected data to:

• Provide the Kerny service — answering your questions using your GA4 data
• Authenticate you via Google OAuth
• Improve our AI models and product features
• Send product updates and important notices (you can opt out at any time)
• Detect and prevent fraud or abuse

4. Google Analytics data

Kerny connects to your GA4 account using Google's official API with read-only permissions. This means:

• We can only read your analytics data — we cannot modify, delete, or create data in your GA4 account
• We access your data only to respond to your questions within the Kerny interface
• We do not sell, share, or use your GA4 data to train third-party AI models
• You can revoke Kerny's access to your Google account at any time via your Google account settings

Kerny's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Data sharing

We do not sell your personal data. We may share data with:

• Service providers — companies that help us operate Kerny (hosting, analytics, AI infrastructure), bound by data processing agreements
• Legal requirements — if required by law, court order, or to protect our legal rights

We use Anthropic's API to power the AI assistant. Questions you ask and relevant data context are processed by Anthropic's systems. We do not share your account credentials or full GA4 dataset with Anthropic — only the specific data needed to answer each question.

6. Data retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal information is deleted within 30 days
• Google Analytics tokens are revoked immediately
• Anonymized, aggregated usage data may be retained for product improvement

7. Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and strict access controls. Google OAuth tokens are stored securely and never exposed in logs or client-side code.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, contact us at hello@kerny.io.

9. Cookies

We use essential cookies to keep you logged in and remember your preferences. We do not use third-party advertising cookies. You can manage cookies through your browser settings.

10. Children's privacy

Kerny is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to this policy

We may update this policy as our product evolves. We'll notify you of significant changes via email. Continued use of Kerny after changes means you accept the updated policy.

12. Contact

Questions or concerns? Email us at hello@kerny.io.