In short
- Who you want to meet can reveal your sexual orientation. Identity verification uses your face. Lifestyle facts can hint at your health. The law gives this data extra protection, and so do we.
- You share most of it by choice, and you can change or remove it at any time.
- We never sell it and never use it for advertising. kejn uses no analytics or tracking tools.
- This page adds to our privacy policy. Where it says more, this page applies.
What counts as sensitive
The GDPR calls it "special categories of personal data" and Swiss data protection law calls it "sensitive personal data". It includes data about sex life and sexual orientation, health, and biometric data used to identify a person. On kejn, this is the data concerned:
Gender, who you want to meet, and orientation
To introduce you to the right people, we need your gender and the genders of the people you want to meet. Together, these can reveal your sexual orientation. You can also add your orientation to your profile, but you do not have to.
Biometric data in identity verification
Before your first contact, you verify your identity with our partner Didit. Didit compares the photo on your ID document with a short selfie video and checks that you are really present. This comparison uses biometric data from your face. Didit carries out the check for us; we receive the result and the details read from your document, not your face data.
Lifestyle facts that can hint at your health
You can add facts like whether you smoke or drink, how often you exercise, whether you have or want children, and your height. These are optional. Some people see them as health information, so we treat them with the same care.
What you choose to write
In prompts, Compass answers, invitation notes and messages you may decide to mention your health, beliefs or other personal matters. We never ask you to. Please share only what you are comfortable with: the person you write to can read it.
What we do not collect
We do not ask about your religion, political views, ethnic origin, health conditions or medical history, and we do not collect data from health apps, wearables or health providers.
Why we use it, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Gender and who you want to meet | To introduce you only to people who want to meet someone like you, and the other way round | Your explicit consent, which you give by entering it |
| Orientation (optional) | To show on your profile and to shape your introductions | Your explicit consent |
| Biometric check during verification | To make sure every member is a real, adult person who is who they say they are | Your explicit consent, which you give before the check starts |
| Lifestyle facts (optional) | To show on your profile and to help find people who fit your way of life | Your explicit consent |
| Sensitive content in reports | To handle reports and keep members safe | Establishing, exercising or defending legal claims, and protecting vital interests where someone is in danger |
Under the GDPR, explicit consent is the basis in Art. 9(2)(a); legal claims are covered by Art. 9(2)(f). Under Swiss law, we ask for your express consent where it is required for sensitive personal data.
Verification is required before your first contact, because it is how kejn keeps fake profiles and minors out. If you do not want your face to be checked, you can still create a profile and look around, but you cannot send or accept invitations.
Who can see it
- Other members see your gender, your lifestyle facts and, if you added it, your orientation on your profile. Who you want to meet can be seen by members you are in contact with. Other members never see your ID document, your selfie video or any verification scores.
- Our team sees sensitive data only when their work needs it, for example to review a report or to help you with a verification problem.
- Our service providers process it only on our instructions: Hetzner (servers in Germany) stores it, Didit (Spain) runs the verification, and Amazon Rekognition (EU) checks uploaded photos and videos for content that is not allowed. No AI reads your messages or invitation notes. Details are in our privacy policy.
- Authorities only when the law requires it or when someone’s life or safety is in danger.
We never sell sensitive data and never use it for advertising. kejn uses no analytics or tracking tools, so no other company learns any of it from us. Our own service statistics, kept on our servers, record your gender with some steps you take, such as sending or accepting an invitation, so we can keep introductions balanced between genders. They are never shared.
How long we keep it
- Profile data, such as gender, who you want to meet, orientation and lifestyle facts: as long as it is on your profile. When you remove it, it is gone. When you delete your account, it is deleted after the 30-day period in which you can change your mind.
- Verification result and the details read from your ID: as long as your account exists. When your account is deleted, the raw verification data and the ID details are wiped; only proof of the check (its result and date, the document type and the issuing country) is kept for 12 months, to prevent fraud and repeat abuse. Your face data is not stored on our servers. Didit keeps the document photos and selfie video for no longer than is needed to complete and document the check.
- Reports: up to 2 years after the case is closed.
Your choices
- Change or remove your orientation and lifestyle facts at any time in your profile.
- Change who you want to meet in your settings. This also changes your introductions.
- Before you answer a Compass question, its tag shows where the answer goes: on your profile, shown only after a mutual yes, or private, where it only shapes your introductions. kejn sets this for each question, so you always know who will see an answer before you give it.
- Withdraw your consent by removing the information, or by deleting your account. Withdrawing does not affect what happened before.
- Ask for a copy of your data, or for corrections, by writing to privacy@kejn.com.
How we protect it
- All connections are encrypted, and our servers are in a professionally run data centre in Germany.
- Your documents and selfie video stay with our verification partner. Other members never see them.
- Your date of birth from your ID is kept private. If you chose a feel age, nobody learns your real age from us.
- Only a small number of authorised people can access sensitive data, and only when their work needs it.
For residents of Washington, Nevada and other US states
kejn is built for people in Europe. Because our apps are available in US app stores, this section serves as our Consumer Health Data Privacy Policy under the Washington My Health My Data Act, Nevada law (SB 370) and similar state laws. It applies if you are a resident of one of those states or your data is collected there.
Consumer health data we may collect
- Lifestyle facts you add, such as smoking, drinking, exercise and whether you have or want children.
- Gender and who you want to meet, and your orientation if you add it. Some of these laws treat information about gender-affirming care or sexual orientation as health data where it reveals health status.
- Biometric data used in identity verification.
- Anything about your health that you choose to write in your profile, notes or messages.
- Precise location, which some of these laws treat as health data if it could show that you visited a place where health services are provided. We do not use your location for that, and we do not set up geofences around such places.
Where it comes from and why we use it
We collect it from you, and from Didit for verification. We use it to provide kejn: to show your profile, to prepare your introductions, to verify that members are real adults, and to keep the community safe. We do not use it for any other purpose without your consent.
Who we share it with
We share it with other members as you choose to show it on your profile, with the service providers named above who process it for us, and with authorities when the law requires it. We have no affiliates that receive it. We do not sell consumer health data.
Your rights
- Confirm whether we collect, share or sell your consumer health data, and access it, including a list of all third parties and affiliates we shared it with and how to contact them.
- Withdraw your consent.
- Have it deleted, including from our backups and by our service providers.
- Appeal if we refuse your request.
To use these rights, write to privacy@kejn.com with the subject "Consumer health data". We will confirm it is you and answer within 45 days. If we need more time, we will tell you why, and we can extend this once by another 45 days.
If we turn down your request, you can appeal by replying with the subject "Appeal". We will answer within 45 days and explain our decision. If you are not satisfied, you can contact your state Attorney General, in Washington at atg.wa.gov/file-complaint.
Contact
ClickAttack Ltd, Data protection, Einsiedlerstrasse 23, 8834 Schindellegi, Switzerland. E-mail: privacy@kejn.com.