Who we are
Kenva ("we," "us") operates kenva.app — a personal CRM that connects your AI assistant to contact notes stored in your own Google Drive. Questions about this policy: kenvaapp@gmail.com.
What we store — and where
Design principle: Kenva is a bridge, not a vault. Your contact notes are written to a "Kenva Contacts" folder in your own Google Drive as plain text files. We do not keep copies of them on our servers.
To run the service, we store a small amount of data ourselves:
- Account basics — the email address and user ID from your Google sign-in, so you can log in and we know whose account is whose.
- Drive credential — an encrypted Google Drive refresh token, kept in an encrypted vault, so Kenva can write to its folder in your Drive between sessions. It is scoped to the narrowest permission Google offers (files Kenva creates — nothing else in your Drive).
- Account status — whether your Drive is connected, your trial dates, and your plan status.
- Payment records — if you purchase a plan, payment is handled by a third-party payment processor. We receive confirmation of the purchase, not your card number.
What passes through Kenva
When you ask your AI assistant to save or recall a contact, the relevant note travels through Kenva's server between the assistant and your Drive to fulfill that one request. It is processed in memory to complete the request and is not retained as a copy of your notes afterward.
What we don't do
- We don't sell your personal information.
- We don't train AI models on your notes — not Claude, not anything else.
- We don't read your Drive beyond the files Kenva itself created.
- We don't show ads.
Third-party services
Kenva relies on a small set of processors to operate:
- Google — sign-in and Drive storage, under your own Google account and Google's privacy policy.
- Supabase — authentication and our encrypted credential vault.
- Cloudflare — hosting and serving the website and API.
- Anthropic (Claude) — your conversations with Claude happen under your own Claude account and Anthropic's terms; Kenva only responds to the requests Claude sends it on your behalf.
Your controls
- Revoke Drive access anytime from your Google account's security settings (Connections / third-party access). Kenva loses the ability to touch your Drive the moment you do.
- Your files stay yours — the Kenva Contacts folder remains in your Drive, readable and editable, whether or not you keep using Kenva.
- Delete your account — email kenvaapp@gmail.com and we'll delete your account record and stored credential. Files in your Drive are yours; we couldn't delete them even if asked to — remove them yourself if you wish.
Data retention
We keep your account data for as long as you have an account. If you delete your account, we remove your stored credential and account record promptly, keeping only what we're legally required to retain (for example, purchase records).
Children
Kenva is not directed at children and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If we make meaningful changes, we'll update the date at the top of this page and, for significant changes, note it on the site. Continued use of Kenva after a change means you accept the updated policy.
Contact
Anything unclear, or a request about your data: kenvaapp@gmail.com. See also our Terms of Use.