<- Back to blog

Kirkify Privacy and Security: What We Collect and What We Do Not

1358 words7 min read

Kirkify Privacy and Security: What We Collect and What We Do Not

What This Guide Helps You Verify

Most privacy pages are hard to parse quickly. This guide is designed to help you verify three things: what data is collected, what is not collected, and where to confirm current policy details.

The Core Promise: Immediate Deletion

Here's the fundamental principle that guides everything we do: your images are deleted immediately after processing. When you upload an image to Kirkify, it travels to our servers using encryption. We process it through our AI model. Then it's gone. Completely. We don't store it. We don't archive it. We don't use it to train our AI. It's deleted.

This isn't a marketing claim—it's how we actually operate. Your images are yours. We have no business keeping them. We don't want to keep them. We delete them immediately because that's the right thing to do and because it's the only way to truly respect your privacy.

What We Actually Collect

We do collect some data about how you use Kirkify, but it's minimal and carefully limited. We track which pages you visit, which features you use, what device you're using, and your general location at the country or region level. We collect aggregated usage statistics that help us understand how people use the service.

But here's what we explicitly don't collect: personal identification information. We don't require names or email addresses. We don't collect payment information—Kirkify is free. We don't store facial recognition data. We don't retain EXIF data or image metadata. We collect the absolute minimum amount of data necessary to understand how people use Kirkify and to keep the service running. Nothing more.

Security: Protecting What We Do Collect

All data traveling to and from our servers is encrypted using TLS 1.2 or higher. This means that even if someone intercepts the connection, they can't read the data. Sensitive data stored on our servers is encrypted at rest, meaning it's protected even if someone gains unauthorized access to our storage systems.

Our servers are protected by firewalls and intrusion detection systems. We apply regular security updates and patches. We have DDoS protection to prevent service disruptions. Employee access to systems is strictly limited through role-based access control. Staff members require multi-factor authentication to access sensitive systems. We conduct regular access audits to ensure no one has access they shouldn't have.

We take security seriously because we understand that your trust is earned through consistent, verifiable practices. We conduct regular security audits, perform penetration testing, scan for vulnerabilities, maintain incident response procedures, and train our staff on security best practices.

Compliance: The Laws We Follow

Kirkify complies with GDPR (General Data Protection Regulation), which means you have the right to access your data, delete your data, move your data to another service, object to processing, and have data protection built into our systems from the ground up.

We comply with CCPA (California Consumer Privacy Act), which gives you the right to know what data is collected, delete personal information, opt-out of data sales, and receive equal service regardless of your privacy choices.

We also comply with COPPA (Children's Online Privacy Protection Act) and PIPEDA (Personal Information Protection and Electronic Documents Act). These aren't just legal requirements—they represent our commitment to protecting everyone's privacy, especially vulnerable populations.

Your Privacy Rights

You have the right to access your data. Contact us with a data access request and we'll provide your data within 30 days in a portable format that you can use with other services.

You have the right to delete your data. Request deletion of your personal data and we'll delete it within 30 days. Some data may be retained for legal reasons, but we'll be transparent about what and why.

You have the right to opt-out of certain data collection. Adjust your browser privacy settings, use do-not-track signals, or contact us directly to opt-out of analytics.

You have the right to data portability. Request your data in a standard format and we'll provide it within 30 days so you can transfer it to another service if you choose.

Third-Party Services

We use Google Analytics and Clarity Analytics for analytics, but we anonymize the data so it can't be traced back to you. We use cloud infrastructure providers for hosting, and they're subject to strict data processing agreements that require them to protect your data. We use content delivery networks for performance, but no personal data is stored there.

We do not sell your data to third parties. We only share data when required by law, when necessary for service operation, when you explicitly consent, or when required for fraud prevention. We're transparent about these situations.

Protecting Your Privacy

If you create an account, use a strong password. Keep your browser and operating system updated. Avoid using public WiFi for sensitive activities. Review your browser privacy settings. Be cautious with personal information.

Remember: Kirkify doesn't require an account. No personal information is needed. Your images are deleted immediately. We don't track you across the web. You can use Kirkify completely anonymously if you choose.

Real-World Privacy Scenarios

Using Kirkify at work is generally safe, but your employer may monitor network traffic. Use your personal device or personal network when possible. Avoid uploading sensitive company information. Check your company's privacy policy to understand what they monitor.

When you share kirkified images, the original image is deleted from our servers, but the shared image is your responsibility. Be mindful of what you share publicly. Consider the privacy of people in images. Review your social media privacy settings.

Using Kirkify on public WiFi is generally safe because all data is encrypted in transit and images are deleted immediately. However, use a VPN for extra security if you're concerned about network monitoring.

Transparency and Accountability

Our comprehensive privacy policy explains what data we collect, how we use your data, how long we retain data, your privacy rights, and how to contact us. It's available at kirkify.uk/privacy and is written in plain language, not legal jargon.

We conduct annual security audits. We perform regular compliance reviews. We have third-party security assessments. We conduct vulnerability testing. These aren't one-time events—they're ongoing practices.

If You Have Concerns

Email [email protected] if you have privacy concerns. We respond within 7 business days. We take all concerns seriously and investigate thoroughly.

If you believe your privacy rights have been violated, contact your local data protection authority. File a complaint with the relevant regulator. We will cooperate fully with investigations.

If you discover a security vulnerability, email [email protected]. Don't publicly disclose the vulnerability. We will investigate and fix it promptly. We appreciate responsible disclosure and take security seriously.

Looking Ahead

We're continuously working to improve our privacy and security practices. We're planning enhanced encryption options, additional privacy controls, improved transparency tools, and regular policy updates. Subscribe to our privacy updates, follow our blog for announcements, check our privacy policy regularly, and contact us with questions.

Privacy as a Core Value

Your privacy isn't just a legal requirement for us—it's a core value. We believe you should have complete control over your data and understand exactly how it's being used. By choosing Kirkify, you're choosing a service that deletes your images immediately, doesn't store personal data, complies with privacy regulations, maintains transparent practices, and prioritizes your security.

We're committed to maintaining these standards and continuously improving our privacy and security practices. If you have any questions about how we handle your data, please contact us. Your trust is important to us. Privacy isn't a feature—it's a promise.

Related Reading

References

Privacy FAQ

Where should users verify current policy details?

Always verify policy details on the live policy pages, which are the source of truth.

What should users avoid uploading?

Avoid highly sensitive personal data and any image you do not have rights to use.

What is the source of truth for policy details?

Always treat live site policy pages as the source of truth for current legal and operational details.