Cookie policy

Cookies & similar storage

Cookies are small values your browser stores and sends back to a website. Local storage saves settings in your browser, while session storage keeps temporary information for a tab. This policy covers these technologies on kimiko.app and docs.kimiko.app, operated by Inovia AI Solutions LTD.

Website cookies are separate from the desktop app’s local database and optional health signals. See our Privacy policy for the wider picture.

Essential storage

These values support choices you make and services you request. They are not used for advertising or optional website analytics.

Your analytics choice

kimiko_analytics_consent_v1 is a cookie containing your accept or reject choice. The official website and docs share it so you do not need to choose twice.

Duration: up to 180 days.

Your appearance preference

kimiko-website-theme in local storage remembers your light or dark theme. The website and docs store this preference separately because they have different origins.

Duration: until you change the preference or clear browser storage.

Preview access

__Host-kimiko_preview keeps an authorized visitor signed into the protected website preview. It is an HTTP-only cookie, unavailable to page scripts. Local development can use kimiko_preview instead.

Duration: seven days, or until preview sign-out.

Website account session

kimiko-account is an HTTP-only cookie used for your website sign-in. Sign-out, session revocation, and security checks can end access sooner.

Duration: up to seven days, subject to session validation.

Sign-in verification

kimiko-login-attempt binds an email-code sign-in attempt to your browser. Hosted sign-in can also use temporary authentication-state cookies to validate its return to Kimiko.

Duration: limited to the authentication flow; the custom email-code attempt expires after ten minutes.

Optional analytics

If you choose Accept analytics, PostHog EU Cloud helps us understand page visits, referrals, campaign tags, browser and device information, visit duration, scroll depth, and marked download or checkout clicks. We do not use advertising cookies, session recordings, form capture, or automatic tracking of every click.

Returning visits and sessions

A project-specific ph_…_posthog cookie stores browser and session identifiers. It recognizes the same browser across kimiko.app and docs.kimiko.app. We do not link it to your account or desktop app telemetry.

Duration: up to 180 days, refreshed during accepted visits, or until consent is withdrawn.

Temporary tab state

PostHog uses project-specific ph_… session-storage entries to manage analytics within a tab. The full names depend on the configured project.

Duration: until the tab closes or consent is withdrawn.

Your browser sends these events to k.kimiko.app, an address on our domain that PostHog runs for us. PostHog derives approximate country, region, and city from the network IP address, then discards the raw IP from stored events. We do not ask for precise device location. Cookie expiry is separate from the retention of analytics events already received by PostHog.

Other services

When you visit hosted authentication, payment, or billing pages, WorkOS, Stripe, or Link may use their own cookies under their policies. Your optional Kimiko analytics choice does not control essential storage on those separate services.

Cloudflare Turnstile checks browser and network signals when you use the support form to help prevent abuse. That security check is separate from analytics. Private account and checkout pages, the preview sign-in page, and the prepared desktop demo do not load website analytics.

Your cookie choices

Use Cookie settings in the footer or the floating Cookie settings button to reopen the consent panel wherever website analytics is enabled. Choose Reject analytics or Accept analytics; closing the panel does not accept.

On local previews or sites where analytics is disabled, the panel is not shown and optional analytics stays off. This link then brings you to these instructions.

• Before a choice or after rejection: no optional analytics requests or identifiers are created.
• After withdrawal: further analytics stops and this project’s browser identifiers are cleared. Events already collected are not automatically erased.
• Do Not Track or Global Privacy Control: analytics stays off even if you previously accepted, and acceptance is disabled while the signal is on.
• Blocked cookies or JavaScript: optional analytics stays off. Blocking essential cookies can prevent sign-in or stop preferences being saved.

You can also delete cookies, local storage, and session storage through your browser’s site-data controls. Clearing the consent cookie resets your choice; analytics remains off until you accept again. Website and docs consent is shared on the official domains, and open tabs check for changes.

Changes & contact

We will update this page when our use of storage changes, and request a new choice where a material change requires renewed consent.

For privacy questions, contact Inovia AI Solutions LTD, Republic of Cyprus, at kimiko@inoviatech.io. General enquiries can go to info@kimiko.app.