Kwik L'IRIS is a companion you talk to, so it holds things you have said. This page says exactly what is kept, who else sees it, why, for how long, how we measure our advertising, and how to see, move or remove all of it. What you tell it is never sold, never shared for advertising, and never used to train anything.
KWIK L Inc, a Colorado corporation, Denver, Colorado 80202, United States, decides how and why the personal data described here is used (under European and UK law, the “controller”; under Indian law, the “Data Fiduciary”). You can reach a person at support@kwikl.com. For India, our Grievance Officer is reached at the same address, with “Grievance Officer” in the subject.
Your account. Your email address, your name, when you joined, your settings, and your confirmation that you are 18 or older, with when you gave it.
If you sign in with Google. Google tells us your name, your email address, that the address is verified, and a number that identifies your Google account to us. We use them only to sign you in. We never receive your Google password, and we do not ask for your contacts, calendar, files or anything else in your Google account.
Your designs. Each companion you design in the studio: its character, look, finish and colours, your iris’s seed and colour, and its mind (its name, what it calls you, its personality, manner, powers and language). A design you make before you have an account is kept only in your own browser until you save it.
Your request, if you registered. What you wrote in the registration form: your name, address, city, what you do, why you want an iris and who introduced you. A person reads it.
Sign-in links. A one-way hash of each link, your address, the time and the requesting IP. Never the link itself. Links expire in fifteen minutes, work once, and are swept a day later.
Your conversations. What you write or say to it (as words) and what it replies, so the thread is there when you come back.
Memories. Short facts drawn from your conversations, kept in the Ledger. You can read every one, edit it, delete it, or turn the whole mechanism off.
Your iris and avatars. The seed your iris was grown from, its colour, your avatars' designs and the images rendered for you. Your iris is generated, never scanned from your eye: it is not biometric data. So that no iris is ever given twice, we keep a registry of every iris we have grown: a fingerprint of its seed (not the seed itself), its registry number, and when it was grown.
The Archive. The documents and photographs you place there, or show it in a conversation, and the text read from documents so that you can search them. You can download, rename, close to the companion, or delete each one.
Your heir, if you name one. Their name and email address, kept only to carry out your instruction. We do not contact them while you live. Please tell them you have named them.
The Family plan, if you hold one or sit on one. If you hold a Family plan: the email addresses you gave seats to, when, and whether each seat is taken. If you were given a seat: that you were invited, by whom, and whether you took it. The holder sees the address they invited and whether the seat is taken; they never see your name, your companions, what you say or what is remembered. You see the holder’s name. An invitation is sent by email to the address the holder gave us.
Gifts, if you give one or open one. If you give a gift: what it holds, what you paid, your name as you wrote it, your note, the name and the email address you gave us for the person it is for, and when it should arrive. We use that address only to send that gift’s letter (and again if you ask us to); no other letter ever goes to it. The gift’s code is kept sealed until the gift is opened; after that we keep only its fingerprint. If you open a gift: that your account opened it, and when. The person who gave it is told that it was opened and when, and nothing else; they never see your address, your companion or what you say. A gift you are making is kept in your own browser until you give it, and a code you are about to open is kept there for a day at most while you sign in.
The Connection Index, if you turn it on. It is off until you turn it on in your account. While it is on we count, day by day: how many conversations you had, and how many of them spoke of someone in your life; how often your companion suggested reaching out to someone, and how often you then said you had; and the time you spent in conversation. We keep the counts and never the words: a turn is read once, as it passes, for a small set of phrases, and nothing of it is stored for this. You see your own numbers in your account. We read averages across members, never one member’s numbers beside their name, and only when at least five members have turned it on. Turn it off and your counts are deleted at once. While it is on, they are in your export.
Where you pay from. So that prices are said in your own money, we work out a region (United States dollars, India, the United Arab Emirates or the United Kingdom) from your device’s time zone, the language of your browser and, where our network provider names it, the country you connect from; or we use the one you choose. If you pay a price that is for cards issued in one country, we ask our bank which country your card was issued in, and keep that with the payment’s record.
The Messenger, if you join it. Your handle and your Iris Code; who you are connected with, who has asked, and who you have blocked; and the messages you exchange with other members. Messages are kept encrypted on our server. Other members you are connected with see your handle, your name, the companion you talk to and its iris as a picture; they never see your email address or your iris’s seed. If you report a member, or are reported, we keep the report with a copy of the message named and the five before it.
Notes on your devices, if you turn them on. For each device, the address your browser’s notification service gave it and the keys that seal a note for that device alone, with the device’s name and time zone. A note about the Messenger says who wrote, never what.
Notes to the house. What you write to us from your account, and our answers.
Membership and orders. Your plan, its periods, the amounts paid and their status, and any physical piece you order with its delivery details. These are financial records the law requires us to keep.
Where you came from. When you arrive on kwikl.com from a link, we note the campaign that link carried (for example “meta / autumn”), the website you came from, and a random visitor number in a first-party cookie, so we can count which of our messages bring people. This is kept with your request or account, so we know which campaign brought a member. It is not linked to anything you say.
Care. When a message shows words that may mean a risk of self-harm, the product shows you crisis lines (see Terms, under Care). We record only that a card was shown, as a count. Nothing you said is copied, read by the house or added to your Ledger.
Operational records. Token counts, cost and response time per turn, and an event log of actions like signing in. These keep the service affordable, secure and diagnosable. They never hold what you said or searched.
The memory system is instructed, in the software itself, never to write down information about health conditions, diagnoses, medication, mental health, therapy, finances, sexual activity, religion, politics, race, ethnicity, immigration status, criminal history, abuse, self-harm, or any government or payment identification number. If something is unclear, it is left out. This limits what is written down, not what you may discuss. We do not ask you for such information; if you choose to speak of it, it is used only to answer you in that conversation.
No decision with legal or similarly significant effect on you is made by automated means alone. Where a person at the house decides something about your account, a person made that decision.
AI providers. To answer you, the text of your conversation and your memories are sent to whichever AI provider serves that turn: Anthropic, OpenAI or Google. They process it only to produce the reply, as our processors, under terms that do not allow them to train on it.
Documents and photographs. When you show it a photograph or bring a document into a conversation, that file is sent, with that turn only, to the AI provider serving it. When a document you left open to it matches what you say, only the matching passage is sent with that turn, and you are shown which document was read. Nothing else in your Archive leaves our server.
The people of the house. The few people who run Kwik L'IRIS can see your account's standing, your membership and payments, and counts of what you keep (how many conversations, memories and files). They cannot see your conversations, the lines of your Ledger, or the contents of your Archive, and every action they take on an account is recorded.
The Messenger. The member you write to reads what you send them. When a member reports a message, a person at the house reads that message and the five before it; nothing else in any conversation is shown to anyone at the house, and each reading is recorded. When you ask your companion for words in the Messenger, the last lines of that conversation are sent to an AI provider so it can write them; if the other member has turned this off in their settings, only your own lines are sent. Your Ledger is never sent for this.
Notification services. A note on your device travels through your browser maker’s notification service (Google, Mozilla, Microsoft or Apple), sealed so that only your device can open it.
Avatar renders. When you render an avatar, an image of your iris and the avatar's description are sent to OpenAI's image engine, which returns the picture. Nothing you have said is sent with it.
Spoken replies. When the Shadow answers aloud in its natural voice, the text of its reply is sent to OpenAI to be turned into speech. The voice you hear is AI-generated.
Your voice. When you speak to the Shadow, your own browser turns your voice into words. In Chrome and Edge this is done by the browser maker's speech service (Google or Microsoft); in Safari, by Apple. We receive only the words. We never receive or keep a recording of your voice.
The Window. When a question needs current information, a short search query built from your question goes through our AI provider's web search. It searches for the world, never for you: not your name, and not what your Ledger holds. You can close the Window at any time.
Payments. Memberships, deposits and balances are taken by Stripe. Your card goes to Stripe directly and never reaches us. For cards issued in India, Stripe works with a partner to register the e-mandate your bank requires.
Email. Your address is passed to our email provider to deliver sign-in links, invitations, receipts and notices.
Hosting and backups. Our servers and their encrypted backups are kept by our hosting providers, who store data for us and may not use it for anything else.
Fulfilment. If you order a physical piece, the workshop and courier receive the design, your name and your delivery details. Nothing you have said.
Your heir. Only after your death has been verified, and only as the Terms describe under Succession.
Advertising measurement and Google Analytics. See the next section.
We also disclose data where the law compels it, and we will tell you when we are permitted to. If the company is ever sold or merged, your data moves only under this notice, and we will tell you first.
Google Analytics. On our public pages we use Google Analytics 4 to count visits and see which pages and steps work (for example, how many people open the studio, save a design, or choose a plan). It sets first-party cookies and receives your browser type, the pages you visit on kwikl.com and your approximate location, which Google derives from your IP address without storing the address itself. We switch off Google’s advertising features and signals. It never receives your name, your email address, your conversations, your memories, your iris or your designs. Google acts as our processor for this. It follows the same switch and the same rules as Meta, described below: off in the United Kingdom and the European Union unless you allow it, and off if your browser sends a Global Privacy Control signal.
We advertise Kwik L'IRIS on Facebook and Instagram, and we measure which of those ads bring people who join. To do that, when measurement is on, we tell Meta Platforms, from our public pages and from our server, that someone who clicked one of our ads arrived, registered, was admitted or became a paying member, with the amount paid. With each of these we send Meta's own click identifier and browser cookie (if present), your IP address and your browser type, so Meta can match the event to its ad. We do not send your name, your email address, your conversations, your memories, your iris or your avatars, ever.
Under some US state privacy laws, this may count as “sharing” personal information for advertising. You can turn it off:
The switch is kept in a cookie on this browser. If your browser sends a Global Privacy Control signal, we treat it as off. If you visit from the United Kingdom or the European Union, measurement stays off unless you allow it. Meta's use of what it receives is governed by Meta's privacy policy.
kl_s keeps you signed in (essential). kl_gn holds a one-time number for fifteen minutes while you sign in with Google (essential). _ga and _ga_… are Google Analytics’ own cookies, set only when measurement is on (kept up to 14 months). kl_v is a random visitor number and kl_src the campaign you arrived from (first-party, kept 90 days, used only to count what brings people). kl_ad remembers your ad-measurement choice. kl_region remembers which money prices are shown in (kept a year). kl_lang remembers the language you chose. kl_faces notes that this browser already holds our Hindi or Arabic letter faces, so that pages are drawn in them at once (kept a year; it says nothing about you). _fbp and _fbc are Meta's measurement cookies, set only when measurement is on. There are no other advertising cookies.
Data is stored in the United States. If you live elsewhere, your data is transferred there to provide the service. From the European Union and the United Kingdom, we rely on the safeguards the law recognises for such transfers (such as the EU standard contractual clauses and the UK addendum to them, or a provider's certification under the EU–US Data Privacy Framework). From India, transfers are made as the Digital Personal Data Protection Act allows. From the United Arab Emirates, transfers are made as its Personal Data Protection Law allows.
Conversations, memories, your Archive and your heir's details are kept until you delete them or close your account. In the Messenger, a message you take back is erased after seven days, an ended conversation after thirty days, and the copy kept with a report 180 days after the report is decided; leaving the Messenger takes back every message you wrote, and deleting your account erases them at once; a handle you let go is held for ninety days so that nobody else can take it. Arrival and measurement records are kept for up to 180 days. Operational records and care counts are kept for up to twenty-four months. Deleting your account removes your conversations, memories, Archive, heir details, devices, Messenger messages and connections, and sessions, anonymises the account record, and cancels any running membership. The registry of irises keeps the fingerprint and the number of each iris you were given, no longer tied to you, so that it is never grown for anyone else. Financial records are the exception: the law requires them to be kept for as long as it says. Backups are overwritten on a rolling cycle of about two weeks.
Export everything, as JSON, from your account, at any time, and download anything in your Archive. Read, edit or delete any memory, or clear them all. Clear your conversation history. Turn memory off. Turn ad measurement off (above). Name, change or withdraw your heir. Delete your account, permanently.
You may also ask us to show you what we hold, correct it, delete it, restrict or object to its use, move it to you in a common format, or withdraw a consent you gave. Withdrawing consent does not undo what was lawfully done before. Write to support@kwikl.com. We acknowledge within 48 hours, and act within 30 days (45 where a US state law allows it). We will not treat you differently for using any of these rights, and we never charge for them.
You have the rights above under the GDPR and the UK GDPR, and you may complain to the data protection authority where you live, work or think a breach happened (in the UK, the Information Commissioner's Office). We would rather hear from you first.
Under the Digital Personal Data Protection Act, 2023, you may obtain a summary of the personal data we process and of who it is shared with, ask for it to be corrected, completed, updated or erased, and withdraw your consent as easily as you gave it. You may nominate a person to use these rights for you if you die or become unable to: the heir you name in your account can be that person, or you may tell us someone else. Please write to our Grievance Officer first. If you are not satisfied with the answer, you may complain to the Data Protection Board of India.
Under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you may ask for information about and access to your data, have it corrected or erased, restrict or object to its use, and move it. You may complain to the UAE Data Office.
Colorado, California, Virginia, Connecticut, Utah, Texas, Oregon and a growing number of other states give residents rights over their personal data. Wherever you live, we give every account the same rights rather than making you prove your address: you can see everything we hold, correct it, export it, delete it, and opt out of advertising measurement, without a fee.
If we refuse a request, you may appeal by replying to our answer, and we will respond within forty-five days. Colorado residents may then contact the Colorado Attorney General, and California residents the California Privacy Protection Agency.
KWIK L Inc does not sell personal information. What you say to Kwik L'IRIS, what it remembers, your iris and your avatars are never shared for advertising and never used to train any AI model, ours or our providers'. The only information that reaches an advertising platform is the measurement described above, and you can switch it off.
Passwords, where used, are hashed with scrypt. Sessions are stored only as hashes and kept in httpOnly cookies. Sign-in links are stored only as hashes. Messenger messages are encrypted where they are stored, under a key kept apart from the database. Traffic is encrypted in transit, and every action the house takes on an account is recorded. No system is perfect. If a breach ever puts your data at risk, we will tell you without undue delay, and we will notify the authorities the law names (within 72 hours where the GDPR or UK GDPR applies, and as India's Data Protection Board requires).
Kwik L'IRIS is for adults. It is not directed at anyone under 18, everyone confirms their age at the door, and we do not knowingly create accounts for anyone younger. If you believe a child has an account, write to support@kwikl.com and it will be closed and its data deleted.
If this page changes in a way that matters, we will say so in the product and by email before it takes effect, rather than quietly updating a date.