Privacy policy

Effective November 3, 2026.

This policy covers Kennoc Phone, the Android app, and the Kennoc server that the app talks to. It says what Kennoc collects, why, who else receives it, and how you can delete it.

The short version

• Your phone turns your speech into text. Your voice recordings never leave your phone.
• Your contacts, your list of apps and your exact location stay on your phone.
• When you are signed out, your reminders and lists stay on your phone. When you sign in, Kennoc's server keeps a copy of them for your account.
• When the phone cannot handle a request by itself, it sends the text of your request to Kennoc's server. The server uses AI model providers to write the answer.
• If you subscribe, Google Play takes the payment. Kennoc never receives your card details.
• Kennoc has no ads. We do not sell your data. We do not let our AI providers train on it.
• One person runs Kennoc. That person can see what is stored on the server. "Who can see your data" says when we look.

Who we are

Kennoc is made by Fennoc LLC, a Texas limited liability company ("Kennoc", "we", "us"). You can reach us at privacy@fennoc.com.

Kennoc is offered in the United States only, to people 18 and older.

What we collect

When you sign in

• Your email address and your Google account ID, from Sign in with Google. The sign-in from Google also carries your name and a link to your photo. Kennoc does not keep them. We do not receive your contacts from Google. Kennoc does not ask Google for access to your Gmail, Google Calendar or Google Tasks. Kennoc can read the calendar on your phone, if you allow it. See "What stays on your phone".
• Your phone's time zone, once, at your first sign-in. Kennoc uses it to read times and dates on your clock, for example for reminders.
• A waiting list entry, if we have not let you in yet: your email address, the time, and how many times you tried.

When you subscribe

• Your Google Play purchase records. Google Play takes your payment. Kennoc never receives your card details. When you subscribe, the phone gives Google Play a scrambled form of your Kennoc account ID, so that Kennoc can match the purchase to your account. Kennoc's server then reads the purchase from Google Play and keeps a record of it: the code that Google Play uses to name the purchase, the plan, its state (for example active, on hold or cancelled), when it ends, whether it renews, and whether it was a test purchase. The record holds no price and no words.
• Your plan and your trial. Which plan you have, when your free trial started and ended, and any free time we give you.

When you use Kennoc

• What you say or type to Kennoc, when the phone sends it to the server, and Kennoc's replies. The server keeps your recent conversation so Kennoc can follow along.
• Your city and the time, with each request that goes to the server. The city is a name such as "Austin, TX". It helps the fox answer questions about places near you, such as store hours. The phone works out the city from your location, or you type it in Settings. The phone never sends your coordinates. The server uses the city to answer that request and does not store it. The city goes to our AI providers as part of the request.
• Your reminders and lists, when you are signed in. The phone copies each reminder to the server and keeps the two copies the same: its title, day, time, repeat, whether it is a must-do, whether it is done, and the name of its list. When you are signed out, your reminders and lists stay only on your phone.
• Your routines, when you are signed in and you turn routines on. The phone copies your routines, their steps and what you log to the server.
• Your tasks, plans and notes, and anything you ask Kennoc to remember.
• Web pages you ask about. In Kennoc's browser, when you ask the fox about a page, the phone reads the page at the moment you ask. It sends the page's address and title, its headings, its buttons, link text and form labels, its alerts and error messages, up to 6,000 characters of its text, and the words you searched to find it. It removes the part of the address after "?" first. It sends what you typed into plain text fields. It never sends what is in password, one-time code, card number or similar fields. Before the page's words leave your phone, the phone hides Social Security numbers, and it replaces long numbers, such as card and account numbers, with their last four digits. The server does the same again.
• The results of actions. After a call, a text or another action, the phone tells the server whether it worked. This can include a contact's name, for example "The text to Sam did not go out." It never includes the phone number.
• How many requests you make, so we can apply your plan's limit.
• Problem reports. If you tap "Report a problem" under an answer, the phone sends the answer, up to 1,000 characters of what you asked, the reason you picked (for example, that the answer was wrong or that something in the app did not work), any note you write, the app version and the time. If the phone cannot send the report at once, it keeps it for up to 7 days and tries again. We read every report and use them to fix bad answers and bugs.

To keep Kennoc working

• Turn reports. The time, whether the phone or the server answered, a result code such as "timeout", and how long it took. A turn report holds no words.
• Crash reports. The app version, the Android version, your phone model, the type of error and where in Kennoc's code it happened. A crash report holds no message text, names or web addresses. The phone keeps an unsent report for up to 7 days.
• Server logs. Your IP address and the time of each request. Some log lines also hold short pieces of text, for example the first 60 characters of a task title.
• A sign-in token. The server keeps only a scrambled form of it (a hash). The phone keeps it encrypted.
• Your agreement to the terms. The version of the terms you accepted and when. On your phone always; on the server when you are signed in.
• Whether Kennoc is your home screen. Once a day, a signed-in phone tells the server whether Kennoc is your home screen and your assistant, with the date, the app version and the build. It holds no words and no app names. We use it to learn whether Kennoc is useful enough to keep.

What stays on your phone

These never go to Kennoc's server:

• Voice audio. Kennoc uses only your phone's on-device speech recognizer, which Android provides. If your phone has no on-device recognizer, voice input does not start.
• Your contacts. Kennoc reads names and numbers on your phone to find the person you mean. Your contact list and phone numbers are never sent. The name you say is part of your request, like the rest of your words.
• Your apps. The list of apps on your phone, the apps you open, and the apps and sites you block or limit.
• Your recent requests list.
• Your calendar. If you allow calendar access, Kennoc reads today's events on your phone to show your next event on the home screen. The calendar on your phone can include events from your Google Calendar. Kennoc does not send your events to its server.
• Your exact location. The phone uses your location only to work out the name of your city. Your coordinates never leave your phone. Only the city name is sent, as "Your city and the time" says.

Your reminders and lists stay only on your phone while you are signed out. When you sign in, the server keeps a copy, as "Your reminders and lists" says.

If Android backup is on, Android can copy some of Kennoc's data on your phone, such as your recent requests, to your Google account. Google runs that backup, not Kennoc.

Why Kennoc asks for each permission

Kennoc asks for a permission when you reach a step that needs it. You can say no and still use the rest of the app.

We do not use any of these to build an advertising profile. We do not sell or share the list of your apps.

Kennoc's browser

Pages load straight from the website to your phone. Websites can see your IP address and set cookies, under their own privacy policies. Kennoc keeps cookies on your phone so you stay signed in to sites. Files you download go to your phone's Downloads folder.

Kennoc sends a page to its server only when you ask about it, as described in "Web pages you ask about".

Connecting an AI assistant

If this is turned on for your account, you can connect an AI assistant, such as Claude, to Kennoc. You start it in the assistant's settings. Kennoc then asks you to sign in with Google on Kennoc's own page and to choose what the assistant may do.

• What the assistant can do. It can see your open and completed tasks, their notes, their days and the names of your lists. If you allow it, it can also add, change and complete tasks. It cannot delete a task. It cannot reach your conversations with the fox, what you asked Kennoc to remember, your calendar or your plan.
• Where your tasks go. The assistant receives the tasks it reads. The company that runs the assistant handles them under its own privacy policy, not this one.
• What Kennoc keeps. The assistant's name, what you allowed, when you connected it and when it last used Kennoc. Kennoc keeps the assistant's sign-in codes and tokens only as hashes. For each thing the assistant does, Kennoc keeps the time, the kind of action and whether it worked, for 30 days. These records hold no task titles. Kennoc's sign-in page sets one cookie for up to 10 minutes, to keep the steps together, and removes it when you finish.
• How to stop it. In the app, open Settings, then Connected assistants, and tap Disconnect. The assistant loses access at once.

Who else receives your data

We use these service providers to run Kennoc. They process data for us. We do not sell data to them.

Neither AI provider keeps your text after it answers. Fireworks does not store prompts or answers for the open models Kennoc uses. It can hold part of a request in memory for a few minutes to answer faster. On OpenRouter, we turn on zero data retention, so it sends your text only to models that keep nothing. Because they keep nothing, they cannot train AI models on it.

An AI assistant that you connect is not our service provider. It receives your tasks because you chose to connect it, as "Connecting an AI assistant" says.

We may also disclose data when the law requires it, or to protect a person's safety.

If Kennoc moves to a company that we own, or if Kennoc is sold, your data moves with it. This policy keeps applying to it, and we tell you before anything changes.

Who can see your data

Each person's data is kept in a separate database on the server. Other Kennoc users cannot reach it.

The person who runs Kennoc has full access to the server. That person can read your requests, replies and tasks. Your data is not encrypted in a way that stops this. We look at your content only:

1. to answer a support request that you send us;
2. to fix a problem that you report, with your permission;
3. to protect Kennoc and its users from abuse or a security attack; or
4. when the law requires it.

Day to day, we look at counts and times that hold no words, such as turn reports and crash reports. Kennoc has few users today, so these counts can still show what one person did.

How we protect your data

The app talks to the server over an encrypted connection (HTTPS). The connection passes through Cloudflare, which decrypts it to screen it and encrypts it again on the way to the server. The server keeps sign-in tokens only as hashes. Only the person who runs Kennoc can sign in to the server.

No system is perfectly secure. If a breach exposes your data, we will tell you as the law requires.

How long we keep your data

• Your account and your content: until you delete your account.
• A waiting list entry: until we let you in, or until you ask us to delete it.
• Your purchase records and problem reports: until you delete your account. Google Play keeps its own records of your purchases, under Google's privacy policy.
• A connected assistant's activity records: 30 days.
• Server logs: up to 30 days.
• Backups: we keep an encrypted nightly backup at Backblaze and a weekly backup of the whole server at Hostinger. A deleted item can stay in a backup for up to 15 days, until that backup is replaced. We use backups only to recover from a fault.

How to delete your account

Email privacy@fennoc.com from the address you signed in with, or follow the steps at kennoc.com/delete-account. We delete your account and its data within 30 days and tell you when it is done.

Deleting your account ends every connection to an AI assistant. It does not cancel a Google Play subscription. Cancel the subscription in Google Play first, or it keeps renewing.

Signing out does not delete your data. Uninstalling the app removes Kennoc's data from your phone, but not from the server.

Your choices and rights

You can ask us to tell you what we hold about you, to give you a copy, to correct it, or to delete it. Email privacy@fennoc.com. We answer within 45 days. We do not treat you worse for asking.

If we say no to a request, you can appeal by replying to our answer. If you live in Texas and you disagree with the result of your appeal, you can contact the Texas Attorney General.

Children

Kennoc is not for anyone under 18. We do not knowingly collect data from children. If we learn that someone under 18 has an account, we delete it. If you think a child has given us data, email privacy@fennoc.com.

Changes to this policy

When this policy changes, we change the date at the top. Before an important change applies, we also tell you in the app or by email.

Contact

Fennoc LLC
5900 Balcones Dr STE 100, Austin, TX 78731
privacy@fennoc.com