Privacy Policy

• Access requests: your email address, the description you submit and the status of your request.
• Account and sign-in: your email address, sign-in link records, active sessions and, when available, the IP address of sign-in requests, which we use to limit repeated requests.
• Project content: project names, conversation messages, pinned notes, generated briefs and their saved versions, so you can return to your work.
• Technical records: request identifiers, usage counts, response times and error information used to run and troubleshoot the service.
• Kitchenlab does not use analytics or advertising cookies and does not collect payment information.

We use this information to provide Kitchenlab, understand how it is used and improve it, respond to support requests, keep the service secure, apply our acceptable use rules and fix problems.

We do not sell your data, and we do not use your content to train AI models.

Other participants cannot see your projects. Kitchenlab administrators review access requests, and they can read project conversations in the admin area to understand how Kitchenlab is used and to improve it. They can also export conversations, pinned notes and briefs for that purpose; exports identify people by a participant number unless an administrator chooses to include email addresses, and they stay within the Kitchenlab team. The team also looks at project data when needed for technical support or when you ask us to.

If our moderation system flags a message, that message is not processed, and administrators are sent that message by email together with the project name and your email address. They can also see it in the admin area, where they review any appeal you make.

We share information only with the providers needed to run Kitchenlab:

• AI processing: your messages and the relevant project context, including conversation history and pinned notes, are sent through OpenRouter to a third-party model provider to produce replies, pinned notes and briefs.
• Content safety: before a message is processed, its text is checked by an automated moderation service. Only the text of that message is sent for this check, not your conversation history or account details.
• Email: sign-in, access and moderation emails are sent through an email delivery service.
• Hosting: our hosting and database services store and process the information needed to operate the service.

We may disclose information when required by law.

Anyone with a brief’s sharing link can read that brief without signing in, so consider its contents before sharing the link. Revoking a link does not remove copies someone has already downloaded or exported.

Kitchenlab uses one cookie, kl_session, to keep you signed in for up to 30 days. Signing out removes it and ends that session.

Email sign-in links work once and expire after 15 minutes.

• Projects: kept until you delete them. Deleting a project from your dashboard removes it and its messages, pinned notes and saved briefs from the application database.
• Moderation records: flagged messages, warnings and appeal decisions are kept with the project and deleted with it. Copies already emailed to administrators may stay in their mailboxes.
• Exports: copies that administrators export to understand how Kitchenlab is used are kept only as long as needed and are not updated when you delete a project.
• Account and access request: kept while you use Kitchenlab. You can ask us to delete them at any time.
• Backups: copies of deleted data may remain in backups for a limited time before they are overwritten.

Information is sent over encrypted connections (HTTPS) and stored in a database that only the service and its administrators can reach. No online service is completely secure, but we take reasonable steps to protect your information.

Kitchenlab uses AI to guide the conversation, record decisions as pinned notes and write the discovery brief. It relies on third-party foundation models; it does not learn from your conversations, and your content is not used to train or fine-tune those models by us.

AI output can be incomplete or wrong. Review pinned notes and briefs before relying on them.

You can delete your projects at any time from your dashboard. To access, correct or delete your account information, email [email protected].

Questions about this policy or your data can be sent to [email protected]. We aim to respond promptly.

We may update this policy. When we do, we will change the “Last updated” date above, and we will give clear notice of significant changes.